Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/SZwihJHojtcOA0Z53nmzobAG_IM.roa
File: SZwihJHojtcOA0Z53nmzobAG_IM.roa (raw, json)
Hash identifier: D3tad4ikdAzbdZsm6Y7BtMO41rAk3unz8nfvPdO9eNA=
Subject key identifier: 49:9C:22:84:91:E8:8E:D7:0E:03:46:79:DE:79:B3:A1:B0:06:FC:83
Certificate issuer: /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial: 01A162E17D8F26AB6FD842743BA3634B9C6A
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/SZwihJHojtcOA0Z53nmzobAG_IM.roa
Signing time: Thu 22 Oct 2026 09:11:47 +0000
ROA not before: Thu 22 Oct 2026 09:11:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.66.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:e1:7d:8f:26:ab:6f:d8:42:74:3b:a3:63:4b:9c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Validity
Not Before: Oct 22 09:11:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=499c228491e88ed70e034679de79b3a1b006fc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:7d:84:fd:1d:72:f5:73:5f:e9:33:99:b8:
04:a3:cf:87:41:ee:fa:06:19:77:64:b8:9c:1b:bb:
84:0d:b9:0a:47:49:81:21:10:c6:ee:d5:4c:30:db:
e0:8e:71:20:34:57:f2:2d:31:3e:b3:db:e1:be:5b:
6e:55:df:ed:f4:1d:82:18:fa:a1:84:28:19:81:6e:
40:91:9c:7b:34:44:1c:10:ad:ad:99:4f:bf:d5:8e:
86:c3:64:58:d2:51:e1:4f:1f:44:37:c1:c6:b3:32:
9c:28:26:e6:34:70:91:2d:31:1c:56:8a:f2:26:af:
80:22:29:2b:55:15:a6:c0:c6:e0:7b:85:95:52:0f:
0e:7f:cf:75:d4:51:f3:b8:c9:a5:0c:d2:76:46:0b:
d5:ce:14:fc:2d:8e:4a:3f:b3:a0:02:d5:fb:90:69:
c2:6e:55:da:b1:e3:a3:de:fd:19:f5:c7:b4:b8:cb:
c1:57:76:95:c7:d9:dc:e8:95:51:7e:12:5e:1d:cc:
4e:44:06:45:d3:8a:55:c6:28:c3:2e:49:15:ff:6e:
36:97:6f:24:72:33:dd:62:f7:03:40:52:8f:7b:45:
6d:dd:6b:a1:48:e9:68:7d:a9:56:30:51:58:ba:ee:
0e:41:a5:b5:5f:c1:56:73:9f:a6:a3:14:c7:56:d8:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9C:22:84:91:E8:8E:D7:0E:03:46:79:DE:79:B3:A1:B0:06:FC:83
X509v3 Authority Key Identifier:
keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/SZwihJHojtcOA0Z53nmzobAG_IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:23:00:98:ea:54:c7:d9:bd:3b:6d:6e:a8:5d:95:40:1d:c0:
f1:3e:fa:f1:a8:cb:dc:ba:09:ad:f0:ce:79:74:1e:ca:0b:e1:
d6:a7:25:e6:29:e4:25:84:0a:bd:91:e0:f9:1b:5a:02:03:88:
ca:92:1e:60:8d:36:46:33:db:43:74:8c:45:1f:83:d6:e8:da:
ca:59:d3:3f:0c:7e:0e:52:e4:7e:df:ec:02:71:cb:b8:cd:56:
21:83:27:2a:ec:42:61:0c:af:67:04:bd:72:56:fb:34:ac:de:
84:29:01:24:cb:da:f1:d0:20:dd:89:35:88:8d:a3:c7:6e:6b:
86:53:77:d8:d0:8d:cd:8d:cb:3a:d7:5c:42:2c:41:1e:db:c1:
cd:76:1b:b5:53:0e:92:be:17:a4:82:ee:f4:86:a9:13:84:5c:
a3:67:1c:c1:e5:d8:e7:a6:ed:20:83:25:d3:a2:d9:2d:5f:e4:
f2:9a:93:07:7f:b5:1b:ba:63:e8:04:3c:0c:8d:3d:a9:31:f4:
7e:6b:ed:5c:5b:5f:08:69:89:f2:16:f9:00:bc:d9:4b:2b:64:
66:a2:51:2b:39:a7:da:38:93:23:44:6d:38:49:e3:e4:76:9e:
0d:de:6a:79:8a:6e:1f:d4:b8:b7:9e:6b:d2:f2:5f:d3:ca:88:
ad:c3:64:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFi4X2PJqtv2EJ0O6NjS5xqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Y2Y5ZDhkNTUyY2RjN2Q4YzBkYzZmNjQ5YjMwMWYyMzUx
NDA5ZWUwHhcNMjYxMDIyMDkxMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTljMjI4NDkxZTg4ZWQ3MGUwMzQ2NzlkZTc5YjNhMWIwMDZmYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9B9hP0dcvVzX+kzmbgEo8+HQe76
Bhl3ZLicG7uEDbkKR0mBIRDG7tVMMNvgjnEgNFfyLTE+s9vhvltuVd/t9B2CGPqh
hCgZgW5AkZx7NEQcEK2tmU+/1Y6Gw2RY0lHhTx9EN8HGszKcKCbmNHCRLTEcVory
Jq+AIikrVRWmwMbge4WVUg8Of8911FHzuMmlDNJ2RgvVzhT8LY5KP7OgAtX7kGnC
blXaseOj3v0Z9ce0uMvBV3aVx9nc6JVRfhJeHcxORAZF04pVxijDLkkV/242l28k
cjPdYvcDQFKPe0Vt3WuhSOlofalWMFFYuu4OQaW1X8FWc5+moxTHVtg94QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmcIoSR6I7XDgNGed55s6GwBvyDMB8GA1UdIwQY
MBaAFCXPnY1VLNx9jA3G9kmzAfI1FAnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQt
YTEwNjkwYTc0NGU0LzEvU1p3aWhKSG9qdGNPQTBaNTNubXpvYkFHX0lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQtYTEwNjkwYTc0NGU0
LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUIiMA0G
CSqGSIb3DQEBCwUAA4IBAQDGIwCY6lTH2b07bW6oXZVAHcDxPvrxqMvcugmt8M55
dB7KC+HWpyXmKeQlhAq9keD5G1oCA4jKkh5gjTZGM9tDdIxFH4PW6NrKWdM/DH4O
UuR+3+wCccu4zVYhgycq7EJhDK9nBL1yVvs0rN6EKQEky9rx0CDdiTWIjaPHbmuG
U3fY0I3Njcs611xCLEEe28HNdhu1Uw6Svhekgu70hqkThFyjZxzB5djnpu0ggyXT
otktX+TympMHf7UbumPoBDwMjT2pMfR+a+1cW18IaYnyFvkAvNlLK2RmolErOafa
OJMjRG04SePkdp4N3mp5im4f1Li3nmvS8l/Tyoitw2TI
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:55:14 2026 by rpki-client