Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SJwzlxfcwICTklf_s8R-67YCyso.roa
File: SJwzlxfcwICTklf_s8R-67YCyso.roa (raw, json)
Hash identifier: DnW64AJKW4oEI9+a5JkKiYx8I8xhqSSHPF/uy8PPKlk=
Subject key identifier: 48:9C:33:97:17:DC:C0:80:93:92:57:FF:B3:C4:7E:EB:B6:02:CA:CA
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019D9195170609FC4D9A5F25C940168C105C
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SJwzlxfcwICTklf_s8R-67YCyso.roa
Signing time: Wed 15 Apr 2026 14:39:20 +0000
ROA not before: Wed 15 Apr 2026 14:39:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12741
IP address blocks: 189.81.28.0/23 maxlen: 23
189.81.36.0/23 maxlen: 23
189.81.40.0/23 maxlen: 23
189.81.44.0/23 maxlen: 23
189.81.48.0/23 maxlen: 23
189.81.54.0/23 maxlen: 23
189.81.58.0/23 maxlen: 23
189.81.62.0/23 maxlen: 23
189.81.66.0/23 maxlen: 23
189.81.74.0/23 maxlen: 23
189.81.78.0/23 maxlen: 23
189.81.80.0/23 maxlen: 23
189.81.242.0/23 maxlen: 23
189.81.246.0/23 maxlen: 23
189.81.250.0/23 maxlen: 23
189.81.254.0/23 maxlen: 23
205.188.220.0/23 maxlen: 23
205.188.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:95:17:06:09:fc:4d:9a:5f:25:c9:40:16:8c:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Apr 15 14:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=489c339717dcc080939257ffb3c47eebb602caca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:23:59:64:ec:45:b2:41:3c:0b:da:40:ed:
1c:00:d4:9c:14:51:e7:95:49:86:46:0d:cc:03:6d:
45:f6:38:d9:6e:40:ad:a8:ba:16:af:cb:4a:a7:0f:
d1:52:7c:54:47:6a:f3:34:2c:05:73:8e:6f:f9:ff:
98:44:04:5c:d4:20:e9:36:ed:b1:ba:44:af:c7:c6:
46:14:ae:ef:0a:9d:b5:08:40:56:76:69:95:6c:17:
79:20:9c:f3:90:6d:51:e5:b1:e9:82:3f:ff:57:1a:
96:ed:57:53:cb:39:69:a6:bd:2c:24:56:61:be:3f:
67:a0:1a:b9:6f:f0:41:8b:68:77:b6:a5:54:91:65:
7e:cd:33:9f:7e:16:68:16:0c:3e:f6:7f:5d:ca:ea:
4b:f9:82:26:0d:89:fa:b1:f5:54:72:9d:f1:7e:8d:
5c:36:e6:20:9d:4f:6e:29:68:e4:2b:ab:38:24:6e:
51:51:76:0e:f7:58:f9:ba:37:ab:0f:be:bb:37:8f:
9c:19:c8:dc:3b:f3:8e:93:63:22:1c:a4:62:b6:da:
0c:87:1d:63:76:58:9b:8d:aa:ee:6c:07:d3:93:c7:
62:46:7b:fc:60:e5:3d:93:58:58:56:8d:03:17:cd:
bb:b6:4c:0e:2e:97:0f:50:3c:34:f2:d3:fc:0d:d3:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9C:33:97:17:DC:C0:80:93:92:57:FF:B3:C4:7E:EB:B6:02:CA:CA
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SJwzlxfcwICTklf_s8R-67YCyso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.28.0/23
189.81.36.0/23
189.81.40.0/23
189.81.44.0/23
189.81.48.0/23
189.81.54.0/23
189.81.58.0/23
189.81.62.0/23
189.81.66.0/23
189.81.74.0/23
189.81.78.0-189.81.81.255
189.81.242.0/23
189.81.246.0/23
189.81.250.0/23
189.81.254.0/23
205.188.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:4d:20:18:e7:0a:f6:c6:76:1e:6e:f9:4c:c9:8e:b0:d1:91:
ac:15:9d:b7:27:30:da:30:dd:c5:0b:ee:18:bc:60:91:c4:38:
d2:e7:90:92:6f:d6:f2:57:b0:54:d0:ca:14:51:3d:ab:94:15:
56:c5:b7:f4:70:89:07:81:df:79:b7:c4:10:19:35:fa:7a:2b:
6a:62:a9:24:62:88:2e:b6:4c:76:12:df:0a:a3:af:9c:e1:bb:
e0:08:31:63:24:e8:00:6a:a8:34:81:03:97:14:4b:8c:2c:dc:
d1:88:fd:9e:a3:32:d5:85:4a:26:8a:dd:28:4a:c1:27:9b:e7:
50:48:e2:0a:49:67:4e:b8:0e:f8:ef:b4:3f:4c:3f:d8:12:65:
2d:57:f7:83:b0:a8:ed:15:b2:af:6a:57:18:13:cc:39:06:72:
14:60:7a:a0:f6:d8:55:65:88:e3:20:b6:60:b8:e0:85:33:8f:
c6:ea:05:34:16:70:09:15:39:95:9c:57:dd:6f:01:b1:96:87:
b7:5a:31:f1:e5:24:8b:dd:7e:17:6a:ce:d1:8a:fd:80:78:6d:
d7:51:5a:11:53:84:f4:be:e3:ca:ab:fb:66:e1:77:ba:a3:bd:
72:7a:e1:97:5b:1c:ae:ec:ab:3a:91:e4:39:df:5d:67:06:8e:
e7:51:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:13 2026 by rpki-client