Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0c_ezri7IEfz3oJ37hvhYXRj2r4.roa
File: 0c_ezri7IEfz3oJ37hvhYXRj2r4.roa (raw, json)
Hash identifier: fFymmd4KhgqhOCg8oUWEpMrXFbtjH8xA+QVVyyyov2E=
Subject key identifier: D1:CF:DE:CE:B8:BB:20:47:F3:DE:82:77:EE:1B:E1:61:74:63:DA:BE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE26C42A222D27A7C00B0CFB10134CBE8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0c_ezri7IEfz3oJ37hvhYXRj2r4.roa
Signing time: Thu 12 Mar 2026 14:21:11 +0000
ROA not before: Thu 12 Mar 2026 14:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 163.5.35.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:6c:42:a2:22:d2:7a:7c:00:b0:cf:b1:01:34:cb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 12 14:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1cfdeceb8bb2047f3de8277ee1be1617463dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:ef:52:a8:92:63:d6:92:cc:4f:d2:79:a5:
7d:c1:05:8b:9c:81:55:3c:bd:c5:39:ff:43:a4:71:
b2:4f:dd:dd:bd:b8:ea:71:b1:b7:e9:09:6e:24:8c:
58:ce:19:2f:a4:d4:18:f8:6b:9a:fc:b8:76:23:15:
0d:a3:a3:ad:6b:0f:a1:54:92:5a:d9:7a:c7:ac:b3:
f0:19:b6:09:ed:0a:4a:f1:ef:8a:51:6a:64:be:c0:
d6:a9:59:30:bf:8d:b3:f2:59:7b:b6:d2:e3:aa:bf:
12:1a:0a:7f:a7:69:2a:21:6a:f6:c8:e7:8a:dd:55:
af:74:df:75:ca:5b:cf:10:e5:09:f0:0d:d4:2a:63:
28:16:aa:e2:80:af:ae:ad:b9:28:57:80:da:c7:f3:
3e:67:ca:4e:24:94:e0:b5:48:a8:c8:24:af:60:dc:
42:83:f6:24:8c:17:b1:38:a4:90:fa:69:0d:cd:c6:
96:ff:45:7b:71:c0:8e:94:3e:5a:71:5a:9b:19:51:
8c:47:a3:24:1c:9e:ac:13:fb:cd:a5:60:42:03:b0:
48:55:fa:f5:6a:34:9c:c0:b0:86:cc:01:5c:25:e3:
5b:e3:18:ac:c8:89:e2:17:27:00:50:e3:b4:35:c0:
9d:87:68:7c:a4:60:02:c2:54:30:97:8a:8d:54:dc:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:DE:CE:B8:BB:20:47:F3:DE:82:77:EE:1B:E1:61:74:63:DA:BE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0c_ezri7IEfz3oJ37hvhYXRj2r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.44.0/24
Signature Algorithm: sha256WithRSAEncryption
67:65:08:d6:fe:da:d0:69:cb:b4:93:94:a6:1c:52:d4:47:40:
62:8b:4f:6c:97:08:ca:91:bf:2b:70:58:09:28:86:3d:aa:40:
4c:4a:80:4f:f8:7c:d2:2b:0a:e0:cd:1d:3a:6e:77:9f:b9:4d:
d8:70:be:f2:30:13:56:74:8d:e0:2d:2d:7f:78:28:d4:4c:8f:
a9:bb:a5:1d:f6:39:20:92:e6:2a:a6:33:3e:8b:e6:e0:f5:61:
22:4a:a5:e8:cb:96:74:f6:e8:51:b5:02:45:30:d8:e0:41:d7:
4c:6c:a3:71:7b:5c:de:63:3f:25:3f:4b:d6:68:bd:7f:f9:9c:
f0:56:76:7d:a5:50:98:b0:58:ea:f1:ac:2b:2b:64:03:18:bc:
fc:d2:c8:59:3c:95:93:45:4d:e3:54:d4:a5:63:67:b5:14:2f:
f5:56:94:03:36:ea:2b:71:5c:9b:55:8a:66:89:3a:25:cd:ae:
32:42:d2:6f:bc:18:50:ae:75:d9:ca:c7:ce:a8:ea:2d:91:d2:
c0:ba:22:24:90:95:d6:ee:cb:7a:74:8a:61:10:98:a1:db:8e:
ac:ad:b9:50:d3:32:ba:90:77:ad:34:93:bb:d4:56:c5:56:e8:
2d:ff:0b:63:70:b8:f8:4f:45:4c:0e:70:87:76:7b:51:7f:58:
9f:d0:f6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:17 2026 by rpki-client