Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/44fXrUbvgVfEqVqZnELT04Rhk6c.roa
File: 44fXrUbvgVfEqVqZnELT04Rhk6c.roa (raw, json)
Hash identifier: pi92YuPFMdv5cF2nMhZT+KNYujDcvCaGPUe776PeFSE=
Subject key identifier: E3:87:D7:AD:46:EF:81:57:C4:A9:5A:99:9C:42:D3:D3:84:61:93:A7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D0C0420E086F47C39B148BDAE4E189E54
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/44fXrUbvgVfEqVqZnELT04Rhk6c.roa
Signing time: Fri 20 Mar 2026 16:11:30 +0000
ROA not before: Fri 20 Mar 2026 16:11:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 163.5.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:04:20:e0:86:f4:7c:39:b1:48:bd:ae:4e:18:9e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 20 16:11:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e387d7ad46ef8157c4a95a999c42d3d3846193a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:fd:d9:34:1b:81:e9:a5:1e:6a:98:4c:b9:
0f:dd:33:60:60:92:87:21:26:c1:59:0b:d7:7d:08:
19:2e:9c:a7:85:09:b8:1b:2e:d8:fe:14:72:2b:90:
0c:38:61:c1:39:99:8d:51:3d:03:67:b0:30:1c:6e:
b2:3b:f7:d5:80:3a:8a:4f:2a:d0:b9:e2:b8:6f:86:
f9:7f:20:00:43:de:8b:e7:15:52:eb:a3:f3:5b:8f:
0b:4a:8a:54:c3:22:3e:26:32:f0:7e:54:f1:85:0d:
37:86:fc:43:fb:2f:ae:94:75:50:14:59:4a:19:66:
35:e3:a3:a8:b4:d5:0a:fb:32:33:f7:51:40:3a:c8:
3d:ca:1f:8f:e9:69:d5:8e:09:5a:55:04:45:fc:70:
25:e8:19:c5:18:18:03:b8:54:fe:6c:c7:23:e2:cb:
84:e4:56:48:a9:69:d1:ad:98:f2:cf:25:56:5f:a1:
17:f6:7f:2f:52:8b:8b:6e:cc:20:5b:86:9b:6a:0b:
aa:1b:cf:f0:32:33:76:0b:42:d2:d5:35:4e:cd:44:
b7:e4:6d:c8:8a:96:db:77:70:e4:df:d3:af:93:79:
5e:e6:c6:16:4e:e0:d9:24:11:96:57:0f:2b:fd:01:
f6:f2:6d:16:97:f7:74:d6:6b:ba:fa:96:64:06:04:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:D7:AD:46:EF:81:57:C4:A9:5A:99:9C:42:D3:D3:84:61:93:A7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/44fXrUbvgVfEqVqZnELT04Rhk6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.238.0/24
Signature Algorithm: sha256WithRSAEncryption
04:69:f1:d9:09:47:f5:1c:c5:00:e4:34:cc:a5:f9:40:5b:87:
9e:a5:e9:28:af:21:e7:9c:42:0e:14:f5:6a:bc:7d:36:0a:e9:
7e:e3:79:af:cc:10:b3:b0:b1:2b:a4:1b:55:55:b3:06:4f:d7:
73:f3:93:b3:37:82:be:a5:97:06:ef:27:11:8f:33:c6:1e:6f:
90:c1:5d:0c:29:25:f4:d2:4c:2b:e1:c0:ef:57:44:54:5d:3f:
36:c7:9e:0b:5c:3d:a4:c0:3c:b2:4a:4f:18:f3:3c:34:ef:f8:
5d:68:ef:58:26:e3:da:a7:cd:66:24:d9:e4:7a:00:35:9f:e9:
ae:42:16:26:c0:13:09:da:7d:54:4c:53:a1:8a:64:1b:05:36:
8d:56:b6:ac:9d:ca:1b:3d:3f:69:53:bd:cc:e9:e0:38:29:bb:
e4:a0:d4:dc:3a:65:cf:e2:e4:26:e1:4e:36:e8:11:d6:19:66:
bd:33:2a:dd:c5:58:cf:6e:df:6a:32:de:fc:44:f6:dd:d4:85:
e2:13:ba:8b:ea:f4:99:c6:43:01:e5:37:13:52:bb:bb:65:68:
cc:9a:0c:23:00:8d:3f:4f:00:75:99:85:f5:f0:13:69:ab:e4:
35:fd:c4:3b:ed:98:50:27:56:76:11:c8:91:96:03:26:d5:7b:
be:73:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:57 2026 by rpki-client