Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/sw9NxL-uyFYMLxbG97ryFnQTuR0.roa
File: sw9NxL-uyFYMLxbG97ryFnQTuR0.roa (raw, json)
Hash identifier: yavyf5NlBBIr2QIQxd9RxAc6ZNvDo52+vKKX5IPxdvQ=
Subject key identifier: B3:0F:4D:C4:BF:AE:C8:56:0C:2F:16:C6:F7:BA:F2:16:74:13:B9:1D
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019E8A408E69AC853EDC0D8D68AA85133481
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/sw9NxL-uyFYMLxbG97ryFnQTuR0.roa
Signing time: Tue 02 Jun 2026 21:32:26 +0000
ROA not before: Tue 02 Jun 2026 21:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 45.151.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:40:8e:69:ac:85:3e:dc:0d:8d:68:aa:85:13:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Jun 2 21:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b30f4dc4bfaec8560c2f16c6f7baf2167413b91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:4b:01:ba:ec:8b:a6:75:15:8b:f1:c3:be:
17:08:7d:a9:35:ee:89:92:a8:74:56:24:76:41:dd:
92:e4:d8:17:78:af:1d:05:c4:82:4d:98:72:5a:af:
07:12:75:92:35:be:2e:5f:83:97:ed:a6:26:0d:36:
de:45:08:74:93:7e:86:e8:df:96:9f:19:35:cb:a5:
58:d5:68:5a:e4:f9:2f:50:4e:c8:f9:74:56:b9:a3:
87:fa:9a:d8:80:3d:5e:e4:d5:74:94:29:7d:e5:70:
41:d1:0b:63:2e:76:30:8e:9b:58:64:d0:6e:84:28:
82:39:d2:9e:0e:a2:ee:c9:9a:39:99:ed:f0:9a:4c:
cc:0e:09:e7:7d:11:0f:59:bb:33:ee:3f:ed:d1:fe:
b6:37:9d:55:50:85:27:2a:5b:4e:26:d4:09:3d:fe:
3e:7a:80:8b:3e:8f:b6:67:ac:5f:e6:a6:f7:f0:aa:
39:d3:67:68:e9:44:d0:4b:fd:47:8a:bf:9a:dd:50:
ee:ac:d0:76:3a:6c:9f:54:ac:28:e3:ab:e0:42:3c:
bd:d2:5e:4d:48:05:ff:1d:3e:5d:14:72:68:3a:16:
bb:c1:ba:93:db:90:76:6b:2e:84:66:ac:4a:ca:95:
85:c1:ac:5b:b0:b4:b7:96:22:76:cb:81:9e:1a:1d:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:4D:C4:BF:AE:C8:56:0C:2F:16:C6:F7:BA:F2:16:74:13:B9:1D
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/sw9NxL-uyFYMLxbG97ryFnQTuR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.71.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ac:30:4f:50:75:41:81:79:09:0f:fd:60:c5:cd:3c:4f:12:
28:24:ab:84:21:db:13:40:8d:dc:da:b0:4c:de:e2:b2:68:29:
bf:08:9d:87:0f:a4:59:f3:20:5e:03:6a:9e:96:d2:a4:17:2d:
df:ea:82:5d:3e:6e:1a:23:68:58:d2:77:83:3d:4d:d9:67:b9:
c6:c4:43:d7:64:e0:d1:e8:16:d1:8b:ba:75:bf:55:ad:ec:21:
be:f7:ea:4d:26:99:8f:5d:50:60:51:cc:8d:fc:c6:05:c1:ce:
06:7b:56:f0:cf:ce:0c:12:6f:78:42:1b:2a:84:44:37:d5:e5:
93:3d:7b:a9:ee:25:2c:55:08:9e:1d:4c:d7:cc:52:12:52:48:
1c:0e:fa:8f:a0:11:d5:d7:a4:9c:b4:ec:91:57:f3:e6:e9:6e:
a3:ab:5b:ac:11:77:64:9c:7a:03:22:da:e5:be:28:b0:fa:cf:
cd:db:1c:4c:69:e3:75:cc:74:a6:cd:a7:8b:c1:52:8e:c9:2e:
57:23:9d:7c:8d:0c:53:c1:e9:0c:1b:8e:d5:de:3f:f5:95:b4:
6f:2a:d3:db:ff:32:9f:83:82:d6:cb:86:d8:f9:97:f9:34:67:
17:54:f0:0b:a2:e4:4e:df:84:97:63:b8:e8:9d:d1:7d:5a:fc:
ab:31:e8:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6KQI5prIU+3A2NaKqFEzSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NGFiMTk2YTViMTEzNjYwZDQwMWY4MDZiMzJiZTY2NjI1
YWZiYWEwHhcNMjYwNjAyMjEzMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzBmNGRjNGJmYWVjODU2MGMyZjE2YzZmN2JhZjIxNjc0MTNiOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVhLAbrsi6Z1FYvxw74XCH2pNe6J
kqh0ViR2Qd2S5NgXeK8dBcSCTZhyWq8HEnWSNb4uX4OX7aYmDTbeRQh0k36G6N+W
nxk1y6VY1Wha5PkvUE7I+XRWuaOH+prYgD1e5NV0lCl95XBB0QtjLnYwjptYZNBu
hCiCOdKeDqLuyZo5me3wmkzMDgnnfREPWbsz7j/t0f62N51VUIUnKltOJtQJPf4+
eoCLPo+2Z6xf5qb38Ko502do6UTQS/1Hir+a3VDurNB2OmyfVKwo46vgQjy90l5N
SAX/HT5dFHJoOha7wbqT25B2ay6EZqxKypWFwaxbsLS3liJ2y4GeGh02jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMPTcS/rshWDC8Wxve68hZ0E7kdMB8GA1UdIwQY
MBaAFAVKsZalsRNmDUAfgGsyvmZiWvuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgt
ZDJkYTUxN2E5NmZkLzEvc3c5TnhMLXV5RllNTHhiRzk3cnlGblFUdVIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kYzQ1MGYtMTFhOC00ZTkyLWI2ZTgtZDJkYTUxN2E5NmZk
LzEvQlVxeGxxV3hFMllOUUItQWF6Sy1abUphLTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdHMA0G
CSqGSIb3DQEBCwUAA4IBAQBXrDBPUHVBgXkJD/1gxc08TxIoJKuEIdsTQI3c2rBM
3uKyaCm/CJ2HD6RZ8yBeA2qeltKkFy3f6oJdPm4aI2hY0neDPU3ZZ7nGxEPXZODR
6BbRi7p1v1Wt7CG+9+pNJpmPXVBgUcyN/MYFwc4Ge1bwz84MEm94QhsqhEQ31eWT
PXup7iUsVQieHUzXzFISUkgcDvqPoBHV16SctOyRV/Pm6W6jq1usEXdknHoDItrl
viiw+s/N2xxMaeN1zHSmzaeLwVKOyS5XI518jQxTwekMG47V3j/1lbRvKtPb/zKf
g4LWy4bY+Zf5NGcXVPALouRO34SXY7jondF9WvyrMegi
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:31 2026 by rpki-client