Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/SW_D2qUYG_GJbG_CnJtWBtVKvgI.roa
File: SW_D2qUYG_GJbG_CnJtWBtVKvgI.roa (raw, json)
Hash identifier: /lUDCFHXonIPfSjzQsSAFVK7VYALWQeMdUB54XoyzJM=
Subject key identifier: 49:6F:C3:DA:A5:18:1B:F1:89:6C:6F:C2:9C:9B:56:06:D5:4A:BE:02
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019876F51217E4C1B0E86209E2146395ED8F
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/SW_D2qUYG_GJbG_CnJtWBtVKvgI.roa
Signing time: Mon 04 Aug 2025 21:20:29 +0000
ROA not before: Mon 04 Aug 2025 21:20:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 85.115.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:f5:12:17:e4:c1:b0:e8:62:09:e2:14:63:95:ed:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Aug 4 21:20:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=496fc3daa5181bf1896c6fc29c9b5606d54abe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:4c:2a:0e:b8:55:62:ff:68:5d:c7:69:c4:
a2:92:11:34:81:f4:ac:31:c3:31:9e:a9:6f:8b:db:
c6:2b:ab:0f:fa:be:c9:8d:7e:14:30:07:16:61:68:
50:c2:ae:14:ad:41:5f:5c:cc:32:ef:6e:be:9a:ba:
8f:5d:1e:d8:cd:d1:79:88:48:e2:35:c8:21:ab:8e:
f5:79:67:38:19:cd:e3:98:13:a2:de:5f:73:75:28:
31:a2:ea:b5:df:b3:5e:19:f2:17:3e:02:91:9f:6a:
6c:34:71:1a:82:a0:8a:02:e5:56:15:d0:8d:33:a6:
d6:32:f8:f8:c7:38:76:e0:f9:4f:86:ac:58:c8:16:
80:01:4f:5e:77:bc:98:79:fb:a1:c5:41:32:f8:07:
73:1f:b1:fe:d3:92:b4:0e:30:16:5b:cc:e9:15:89:
69:8e:32:7e:26:3d:b6:fe:f5:1c:81:8c:d0:4f:1f:
f4:97:74:d1:29:e8:e7:e8:21:9c:4f:88:82:72:d0:
e3:63:df:28:77:c4:5f:0e:d4:7e:44:eb:16:d6:7c:
90:22:89:1e:38:4c:fe:b7:20:d2:ae:68:a0:c0:84:
96:21:04:56:d7:8b:c2:2a:36:90:6b:73:90:ed:94:
21:38:a3:3f:c7:3d:03:10:a4:e6:4c:da:3d:3b:91:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:C3:DA:A5:18:1B:F1:89:6C:6F:C2:9C:9B:56:06:D5:4A:BE:02
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/SW_D2qUYG_GJbG_CnJtWBtVKvgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.211.0/24
Signature Algorithm: sha256WithRSAEncryption
28:89:e0:3b:54:1e:f2:73:37:b7:1f:b0:1c:0f:7b:7e:c8:39:
6d:a8:f5:18:28:7b:3a:fc:1a:b7:e3:75:7c:9d:b5:60:84:f0:
61:24:aa:a0:61:37:a8:3a:4b:9b:fd:c9:a3:36:e5:46:da:d5:
47:88:f3:95:e2:72:3d:90:6a:e8:1f:1c:4c:f5:bb:da:0c:50:
14:61:46:39:00:53:85:42:9f:75:08:74:83:bb:34:c2:c4:03:
fb:9a:4f:b9:1e:63:a3:a0:99:5f:bd:a8:88:34:b8:66:2a:f8:
7b:54:ff:63:6f:74:d7:d9:c9:fc:bb:c6:22:ff:7f:be:7b:0d:
a3:71:09:72:e5:69:cf:4b:ad:87:09:5c:9f:a1:07:35:be:c5:
be:88:c8:fd:99:77:59:bb:11:63:25:91:94:4b:fa:41:f5:a2:
8a:45:fb:19:1f:b1:74:92:3d:11:d0:13:27:64:8a:7a:46:e7:
83:98:1e:ab:b2:bf:b0:d8:e6:27:05:c7:0c:0d:52:d8:90:20:
3e:95:1e:ac:87:84:1b:40:a9:21:2e:c2:98:a1:0d:f8:3e:ea:
09:86:c6:05:26:f8:53:df:0f:60:6f:ec:c1:b2:ee:b6:ce:52:
ac:35:a6:c6:8f:b3:a8:b0:84:d1:2a:8b:f8:09:56:6a:ee:77:
3b:82:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:35 2025 by rpki-client