Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BDQQM5sMJUu2SYh5Wu8cJ-0ifTA.roa
File: BDQQM5sMJUu2SYh5Wu8cJ-0ifTA.roa (raw, json)
Hash identifier: VqgPJFzRfrrRSqh6uHBJEO1StJDKg0eEJU+i/onezXs=
Subject key identifier: 04:34:10:33:9B:0C:25:4B:B6:49:88:79:5A:EF:1C:27:ED:22:7D:30
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D20128BF2DFF0282E43EE90609356BEFE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BDQQM5sMJUu2SYh5Wu8cJ-0ifTA.roa
Signing time: Tue 24 Mar 2026 13:39:39 +0000
ROA not before: Tue 24 Mar 2026 13:39:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 163.5.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:12:8b:f2:df:f0:28:2e:43:ee:90:60:93:56:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 24 13:39:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=043410339b0c254bb64988795aef1c27ed227d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:88:ad:f2:10:a7:f4:6b:dd:a6:72:ff:3b:
56:7c:da:9b:70:8c:7a:fd:44:15:f2:54:09:b3:58:
64:da:73:70:a5:c0:b6:58:0f:9e:0f:28:ac:e2:f1:
f0:5c:f4:e5:73:33:ca:32:6c:08:6a:dd:ff:fb:78:
14:8a:08:f1:43:d8:fc:f9:59:d3:bc:88:11:3f:72:
e7:c8:3f:87:76:80:41:b1:8a:1c:26:24:30:ea:ef:
0b:9a:4f:fe:10:c7:87:b3:c9:88:c2:3c:a2:83:1e:
46:fb:a8:e0:cf:5e:1d:7a:cb:33:cd:20:7c:5a:e3:
cc:fc:2c:33:37:e0:a3:c1:88:86:bb:81:63:0f:1e:
27:6d:9e:17:85:cb:b8:06:82:b8:37:4f:38:a3:82:
d1:c0:de:5e:b6:5d:b7:72:28:bd:a4:25:05:b5:e7:
88:58:8a:63:d7:e0:1a:e0:f1:69:18:2f:bc:90:45:
d3:25:78:05:55:1f:59:f5:ce:db:29:25:e4:1c:08:
76:37:af:a8:8c:ba:c7:90:d7:c0:23:cf:ca:01:02:
86:3e:ca:86:79:96:84:57:e4:7a:38:aa:b0:89:26:
4c:2a:2e:ad:ff:d8:96:47:e6:41:b4:b0:f0:d1:b7:
87:9e:44:eb:01:ae:87:88:90:e4:73:64:47:07:7c:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:10:33:9B:0C:25:4B:B6:49:88:79:5A:EF:1C:27:ED:22:7D:30
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BDQQM5sMJUu2SYh5Wu8cJ-0ifTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.41.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cb:78:e4:e2:76:e1:74:95:87:9a:53:fd:2a:16:7f:e5:76:
85:3f:6f:dc:52:7c:9c:42:1d:d9:04:4e:3d:23:53:af:ca:2d:
b9:05:72:ab:b7:c8:58:1f:28:fe:7b:3c:ce:d5:ce:16:14:62:
10:06:7b:4d:2e:14:21:78:97:f7:26:9f:a6:6d:51:43:32:ef:
76:1c:c6:df:5b:42:f9:a1:87:9a:dc:2e:c9:c9:f5:ac:7d:c7:
da:fa:a1:56:63:14:01:e0:d5:0b:cf:1c:ff:99:b0:01:d3:7f:
da:a4:e2:a0:15:72:5d:03:fb:7b:87:73:f1:33:17:1f:1f:db:
40:e0:5b:c1:36:c8:24:16:9f:8e:b8:de:a0:a2:4b:5e:d4:8c:
81:6d:a5:57:c8:ff:76:0b:4b:61:a3:fc:57:ff:38:b2:0b:77:
20:1a:b4:61:29:44:e2:b2:14:af:98:a3:95:71:0f:31:84:c7:
12:29:2a:4f:8d:be:0b:0d:56:50:4d:32:ff:4e:dd:4c:a5:61:
96:19:71:07:21:69:13:de:c4:fe:80:b4:0d:a5:c7:37:ab:b6:
54:1e:2e:b9:62:d5:6b:cb:70:c5:87:7e:f5:a0:c6:e2:f1:14:
53:5d:73:c8:f1:8b:40:39:75:e3:50:ff:04:55:a5:cb:1a:ac:
d8:47:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:53 2026 by rpki-client