Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/7SwUXzEbynVOAJ41PRN1VV-DthQ.roa
File: 7SwUXzEbynVOAJ41PRN1VV-DthQ.roa (raw, json)
Hash identifier: /HRDLDX8YtXPPm0ZzH9OOI6lge2ijM43IUSyaitp3HA=
Subject key identifier: ED:2C:14:5F:31:1B:CA:75:4E:00:9E:35:3D:13:75:55:5F:83:B6:14
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019D696CA1E59943D510A94AF33BFCCCB799
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/7SwUXzEbynVOAJ41PRN1VV-DthQ.roa
Signing time: Tue 07 Apr 2026 19:30:20 +0000
ROA not before: Tue 07 Apr 2026 19:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 104.160.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:6c:a1:e5:99:43:d5:10:a9:4a:f3:3b:fc:cc:b7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Apr 7 19:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed2c145f311bca754e009e353d1375555f83b614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:79:c0:d2:9c:89:43:4e:48:96:d8:ac:85:
61:8e:0e:ce:99:59:28:37:6b:ff:d0:d6:25:1f:31:
6a:4e:0a:bc:36:2c:75:82:94:59:71:29:4b:ca:20:
df:f1:8b:cf:d7:df:f3:a5:68:8c:8f:86:48:a3:0c:
77:a3:87:ed:39:e0:bb:a5:a0:bb:15:db:5f:83:e6:
f8:1a:92:20:e1:5a:f2:94:ea:cc:38:31:cb:25:97:
7e:94:b9:24:aa:11:94:0f:20:3a:2d:e2:02:c3:ae:
7c:66:c9:6f:33:03:47:1f:5f:6e:e1:15:48:e4:3d:
4d:6e:64:74:a9:38:05:55:f4:c3:43:b0:24:8c:21:
1a:4e:a7:ba:1b:5e:53:9c:49:e2:6e:ea:11:8a:88:
d8:25:bb:26:12:e5:03:5f:3b:6b:0e:00:87:45:18:
f9:05:92:83:2f:0d:aa:83:20:82:a7:8b:8a:c3:de:
6d:7c:c4:c2:91:10:08:74:e4:87:aa:45:0c:20:f8:
ed:69:35:bb:22:f5:f8:73:14:03:fb:d7:c2:96:16:
fe:7a:85:7f:bd:22:3f:15:c7:54:ae:bf:07:1e:9d:
a3:b4:66:7e:ae:f3:b9:ce:18:52:19:5e:ac:23:fa:
46:bc:f7:f2:34:1d:80:13:37:60:a0:76:aa:3c:38:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2C:14:5F:31:1B:CA:75:4E:00:9E:35:3D:13:75:55:5F:83:B6:14
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/7SwUXzEbynVOAJ41PRN1VV-DthQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.18.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b1:c3:e9:63:8f:31:1e:e5:84:2a:3d:07:9d:57:8b:e5:b3:
3f:88:25:23:e5:da:66:1d:1a:91:4f:d3:40:d6:51:38:98:d4:
27:38:fb:75:58:2d:7d:dc:92:59:d6:c4:cd:1c:b1:fd:31:10:
09:66:3f:6e:69:17:38:1a:a8:e2:01:fc:a4:27:87:70:5b:93:
2a:8c:57:3b:c4:4e:18:56:a2:48:32:2e:77:e9:10:43:f2:6f:
2b:2f:bf:b9:cd:da:42:34:2c:ff:9c:32:eb:00:4f:06:c2:b4:
74:1a:c0:0f:96:4b:04:ea:14:49:f0:97:27:aa:1b:ea:28:66:
e8:fa:4d:85:ab:4c:74:44:1b:2a:cc:64:94:8b:c1:41:90:91:
4f:e8:38:86:49:5a:6d:91:3c:56:03:e3:41:75:69:be:7f:57:
54:39:c1:5f:c0:84:0c:5d:a4:ba:0e:85:81:61:6e:7d:9e:1c:
3d:8c:c4:ff:05:42:55:44:54:9f:1c:07:ee:57:b7:ef:b0:0a:
fb:bc:a9:72:58:6b:32:61:0e:1c:e5:7e:73:42:c7:b2:1a:c6:
af:38:01:91:0b:48:bd:f1:ae:71:e5:f5:28:95:de:3e:5a:e4:
20:d7:04:c6:ef:3b:19:06:45:1a:78:0a:90:c7:f1:40:a9:b6:
80:bc:c2:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1pbKHlmUPVEKlK8zv8zLeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy
MDdmZDIwHhcNMjYwNDA3MTkzMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDJjMTQ1ZjMxMWJjYTc1NGUwMDllMzUzZDEzNzU1NTVmODNiNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlh5wNKciUNOSJbYrIVhjg7OmVko
N2v/0NYlHzFqTgq8Nix1gpRZcSlLyiDf8YvP19/zpWiMj4ZIowx3o4ftOeC7paC7
Fdtfg+b4GpIg4VrylOrMODHLJZd+lLkkqhGUDyA6LeICw658ZslvMwNHH19u4RVI
5D1NbmR0qTgFVfTDQ7AkjCEaTqe6G15TnEnibuoRiojYJbsmEuUDXztrDgCHRRj5
BZKDLw2qgyCCp4uKw95tfMTCkRAIdOSHqkUMIPjtaTW7IvX4cxQD+9fClhb+eoV/
vSI/FcdUrr8HHp2jtGZ+rvO5zhhSGV6sI/pGvPfyNB2AEzdgoHaqPDiMVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0sFF8xG8p1TgCeNT0TdVVfg7YUMB8GA1UdIwQY
MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt
MTVmMTNlM2Y3ZDg1LzEvN1N3VVh6RWJ5blZPQUo0MVBSTjFWVi1EdGhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1
LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKASMA0G
CSqGSIb3DQEBCwUAA4IBAQBIscPpY48xHuWEKj0HnVeL5bM/iCUj5dpmHRqRT9NA
1lE4mNQnOPt1WC193JJZ1sTNHLH9MRAJZj9uaRc4GqjiAfykJ4dwW5MqjFc7xE4Y
VqJIMi536RBD8m8rL7+5zdpCNCz/nDLrAE8GwrR0GsAPlksE6hRJ8JcnqhvqKGbo
+k2Fq0x0RBsqzGSUi8FBkJFP6DiGSVptkTxWA+NBdWm+f1dUOcFfwIQMXaS6DoWB
YW59nhw9jMT/BUJVRFSfHAfuV7fvsAr7vKlyWGsyYQ4c5X5zQseyGsavOAGRC0i9
8a5x5fUold4+WuQg1wTG7zsZBkUaeAqQx/FAqbaAvMKF
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:08 2026 by rpki-client