Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SXWGoki_NUQ9PQVZrdM0Hw_QNv4.roa
File: SXWGoki_NUQ9PQVZrdM0Hw_QNv4.roa (raw, json)
Hash identifier: wTDBOiQk6iaZWimbuWiLB8VRAHOMx16PDKlmETFmMKc=
Subject key identifier: 49:75:86:A2:48:BF:35:44:3D:3D:05:59:AD:D3:34:1F:0F:D0:36:FE
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A0AA87952CD9AE3C24937A44D39D80E8EC
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SXWGoki_NUQ9PQVZrdM0Hw_QNv4.roa
Signing time: Wed 16 Sep 2026 14:03:27 +0000
ROA not before: Wed 16 Sep 2026 14:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201124
IP address blocks: 2a14:6782:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:87:95:2c:d9:ae:3c:24:93:7a:44:d3:9d:80:e8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 16 14:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=497586a248bf35443d3d0559add3341f0fd036fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:51:e8:a5:fb:60:fc:f9:cd:e7:2c:c1:f4:2e:
c8:29:a9:7b:ce:1d:b1:f7:f7:9a:a5:54:de:22:da:
78:53:19:1b:15:01:08:62:7a:96:48:8f:26:5d:0a:
f3:28:08:b3:4c:3c:2b:a3:f5:80:52:a1:79:ce:45:
bf:87:00:59:77:04:62:50:71:bd:3a:a9:ef:18:b5:
4f:b3:7b:2f:11:0a:cd:22:35:2d:b0:25:8a:81:2e:
7f:fe:d0:87:3d:6c:24:fe:82:83:3b:d0:69:e3:82:
99:57:97:de:7b:49:46:9c:5f:34:d2:9a:06:fb:0d:
6a:76:51:35:bc:cd:69:41:e3:6b:71:02:13:cf:2f:
6a:d7:eb:33:cb:92:d9:d8:1d:24:4f:b2:65:df:7b:
39:a7:75:23:e0:f8:f6:56:8e:53:2d:15:a1:f9:45:
b2:76:fd:95:04:69:08:2a:a6:9f:34:a4:5e:9a:1a:
a4:d4:5f:a0:0b:3e:b5:90:d3:bc:79:49:38:c7:b5:
b6:22:90:ed:45:51:cd:3f:d8:b2:b9:66:d1:06:46:
27:b0:e9:62:a8:2b:c1:52:05:80:ab:4a:e9:45:c8:
32:50:60:7e:7c:f2:e7:01:6f:e9:a3:76:68:95:46:
8d:f9:89:49:71:78:e4:08:6c:13:fe:31:5c:0f:63:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:86:A2:48:BF:35:44:3D:3D:05:59:AD:D3:34:1F:0F:D0:36:FE
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SXWGoki_NUQ9PQVZrdM0Hw_QNv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:4::/48
Signature Algorithm: sha256WithRSAEncryption
42:92:12:f1:14:37:ff:79:a2:ce:4d:f6:6e:53:de:4c:60:b3:
db:18:7c:ea:86:d0:f9:3e:2b:6f:07:c7:e9:7f:3c:97:a7:e6:
1d:0b:e2:1b:f2:19:f7:a9:42:66:c6:a1:1a:1d:fc:b2:36:c2:
24:e8:b3:64:aa:f0:bc:4a:dd:88:2c:d0:92:90:8e:0d:70:a4:
96:4b:5c:2f:3f:80:36:6c:ab:fc:6c:04:d4:ca:95:1e:6c:f8:
a1:e5:e8:6d:95:dd:7f:74:b6:82:d7:7e:81:17:fb:ec:82:fe:
5c:6c:e8:31:53:e5:1e:b2:cf:3e:2f:c8:cf:42:ce:fa:18:00:
eb:22:42:bf:e6:d9:77:70:a0:64:dc:f9:1b:7f:ab:39:94:66:
8e:c9:6d:0d:2f:c2:99:09:51:2c:ce:37:7e:16:23:57:9d:d2:
5a:58:43:4e:d7:8a:c0:f6:97:09:58:59:cb:39:0a:fb:0c:bd:
93:1d:69:ba:fb:8a:2c:7f:60:bc:02:9c:7f:20:26:bf:49:d6:
8f:f8:ab:22:c5:8e:ee:66:93:84:85:eb:73:a3:f4:31:19:01:
49:0a:57:47:16:91:20:23:36:f1:bf:28:b2:07:5f:94:28:cb:
c1:b4:f3:0e:32:77:29:4a:55:88:db:de:c7:f8:db:5a:05:3a:
54:1e:3c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:31 2026 by rpki-client