Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/swM80mHJjK6IPnE-XxaI02sqJn4.roa
File: swM80mHJjK6IPnE-XxaI02sqJn4.roa (raw, json)
Hash identifier: JzcS3m104wsB9A+sIx9H6xt+jsfYiXqfNRN48uMkikc=
Subject key identifier: B3:03:3C:D2:61:C9:8C:AE:88:3E:71:3E:5F:16:88:D3:6B:2A:26:7E
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 019B7B365952E9A1AA14154239D32E9926C5
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/swM80mHJjK6IPnE-XxaI02sqJn4.roa
Signing time: Thu 01 Jan 2026 20:18:37 +0000
ROA not before: Thu 01 Jan 2026 20:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34814
IP address blocks: 46.149.80.0/20 maxlen: 24
91.203.12.0/22 maxlen: 24
193.16.45.0/24 maxlen: 24
193.37.156.0/24 maxlen: 24
193.151.104.0/22 maxlen: 24
195.60.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:59:52:e9:a1:aa:14:15:42:39:d3:2e:99:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Jan 1 20:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3033cd261c98cae883e713e5f1688d36b2a267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:ec:7a:8f:46:93:74:47:d0:96:3d:dd:22:
49:cb:5d:e2:0c:60:0a:7f:d5:29:e6:3e:b4:7c:8b:
8b:dd:34:de:a4:b5:49:78:b0:3c:04:26:99:06:b4:
3a:c1:35:36:fd:04:85:fc:d6:56:60:c8:84:f9:bb:
bf:90:db:53:4e:ab:ef:f8:70:aa:7e:05:60:87:2b:
63:c0:f5:87:b7:38:23:2b:5c:58:9d:64:f9:ed:fb:
a7:d8:5b:85:fa:40:49:e5:fc:47:da:d8:c9:38:ea:
27:fd:3f:08:86:e5:da:3a:58:3b:ab:d2:b3:16:32:
b7:4b:68:0a:d9:b0:5a:14:d1:ad:f8:aa:9c:00:95:
a7:2e:6e:38:bc:fb:ad:a1:ca:53:ec:81:64:36:af:
18:8c:34:2f:8a:1a:ac:e7:67:19:a3:34:37:50:52:
6f:03:ad:2b:63:f7:32:9f:fc:66:72:a7:9c:49:00:
b6:82:06:c3:91:32:7f:d9:fb:a2:0c:2a:04:b4:f4:
24:bc:59:e6:e8:9b:62:76:a5:ab:17:d9:ad:c1:2f:
9f:fd:12:be:e8:64:27:a2:59:f8:9b:3a:a0:69:f9:
f2:04:b9:f5:18:ba:d3:c4:e1:38:3b:2a:f5:04:b2:
38:4c:06:1b:cc:7e:58:8d:c0:aa:e3:e6:a2:16:77:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:3C:D2:61:C9:8C:AE:88:3E:71:3E:5F:16:88:D3:6B:2A:26:7E
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/swM80mHJjK6IPnE-XxaI02sqJn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.80.0/20
91.203.12.0/22
193.16.45.0/24
193.37.156.0/24
193.151.104.0/22
195.60.174.0/23
Signature Algorithm: sha256WithRSAEncryption
76:e4:34:8a:64:a5:d6:9a:eb:88:b7:d4:4f:47:fc:91:b2:3a:
03:d0:11:dc:49:0d:97:db:43:c4:7a:e1:99:57:95:36:ae:16:
62:00:51:2a:76:d2:f8:0a:a6:df:e2:96:72:5a:65:98:f6:88:
bd:64:a2:3d:cc:11:f5:a6:42:4a:84:90:3c:aa:2d:b2:78:26:
f7:07:a8:34:f2:13:ab:82:e6:9f:ac:33:41:30:11:7c:e3:53:
6d:2f:0f:60:80:ed:63:2c:ba:35:de:c7:44:5a:63:91:48:ce:
b6:7b:9c:1c:1e:d0:e1:f6:45:f5:0f:f3:1d:54:75:d7:76:e0:
55:5e:dc:c0:5f:dd:e3:b4:60:e3:44:a7:c7:55:55:80:19:23:
0a:8c:06:59:5e:02:6e:92:93:2e:e5:90:8e:6d:e8:cf:4f:be:
fb:4a:ab:39:44:f3:96:d0:5d:c5:c8:f1:ec:c4:c7:ee:36:b7:
1d:49:4f:df:3d:97:43:ff:c0:1a:93:b5:2d:fd:fd:19:35:b2:
44:96:6d:c3:2c:90:a5:9a:04:cd:8a:cb:d7:ac:9f:f0:6c:9c:
23:9e:82:6b:5a:1e:1e:89:18:f2:df:31:e4:b7:ac:a7:d2:5b:
5e:1a:55:30:32:b2:a5:e1:11:4d:ef:97:5d:5a:11:ce:49:39:
97:2c:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:21:00 2026 by rpki-client