Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F2ww93ujZJLyXO6RX9YuH5Lm9tU.roa
File: F2ww93ujZJLyXO6RX9YuH5Lm9tU.roa (raw, json)
Hash identifier: GYnanILOB+CvkigPGF/z/D5QI/MCcRhQKj2OxxPYeRw=
Subject key identifier: 17:6C:30:F7:7B:A3:64:92:F2:5C:EE:91:5F:D6:2E:1F:92:E6:F6:D5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DB5CDA8EE592AD85251D2A5705B736017
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F2ww93ujZJLyXO6RX9YuH5Lm9tU.roa
Signing time: Wed 22 Apr 2026 15:27:27 +0000
ROA not before: Wed 22 Apr 2026 15:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214668
IP address blocks: 163.5.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:cd:a8:ee:59:2a:d8:52:51:d2:a5:70:5b:73:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 22 15:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=176c30f77ba36492f25cee915fd62e1f92e6f6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:c6:a2:bf:99:2d:7b:5a:20:88:b0:b3:43:
9a:8e:bf:c1:4c:66:1d:4f:9b:3d:27:62:26:03:d0:
de:2c:b2:19:09:98:89:0e:1e:fd:0e:fa:f5:96:a5:
f0:fc:b9:2c:b2:a5:52:89:3b:7b:02:d9:2d:93:13:
6c:6d:9c:39:df:8a:49:e7:03:cc:f2:f4:75:9c:8e:
80:8e:75:20:cf:79:c4:35:2a:67:82:65:60:3a:96:
b7:52:a1:c9:a3:11:4e:b1:e3:20:2a:39:e0:19:15:
44:28:bc:34:04:85:90:c2:d4:ba:96:ef:d7:76:2b:
b8:89:70:35:3a:05:14:37:c0:cd:08:66:a1:33:95:
7a:fd:84:cb:1c:9f:74:96:87:ee:91:b2:57:9d:c5:
02:c6:49:c5:ff:a5:fe:1b:a6:8b:10:bd:9d:60:8a:
f0:3d:db:91:b5:2d:d6:f3:ac:22:a9:7f:ed:e8:8a:
16:bc:2f:25:fa:0b:d2:1b:c6:62:d5:79:ad:3f:fb:
cf:7b:26:e2:c9:da:57:c2:3c:23:22:8b:dd:05:59:
f0:d9:9a:67:31:7c:0b:d7:61:42:32:7f:ea:55:a1:
0a:b5:4c:92:52:70:e3:aa:fc:16:80:bc:01:ab:db:
57:eb:3c:ff:1c:22:cd:11:35:31:4e:46:70:f3:4f:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:30:F7:7B:A3:64:92:F2:5C:EE:91:5F:D6:2E:1F:92:E6:F6:D5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F2ww93ujZJLyXO6RX9YuH5Lm9tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.238.0/24
Signature Algorithm: sha256WithRSAEncryption
26:33:41:cb:67:ee:11:7d:0f:c9:a1:32:1b:0b:a1:a6:ff:dd:
0a:45:e7:6b:9c:ab:cb:46:6c:17:09:d5:aa:af:4d:05:1e:f2:
c1:50:45:6b:3b:92:88:e8:82:02:a6:f5:e1:de:d0:be:7c:c3:
3e:a9:85:6b:f0:c9:93:09:d8:90:ad:56:c1:22:fa:7e:de:dc:
df:d0:56:c8:54:bd:a6:de:7a:96:b5:f5:96:8d:3f:91:29:fe:
08:b2:c1:bb:df:dc:47:09:60:40:e4:9a:63:d6:a8:93:8c:88:
11:10:62:c8:4c:cf:6a:29:29:1c:c6:e6:86:4f:f4:85:dc:6c:
92:9c:d0:91:68:df:3a:8e:67:5c:29:15:ab:55:dc:80:7a:9b:
b8:2d:45:bd:37:71:79:d5:41:68:57:57:4a:89:54:1c:78:ee:
24:a6:f2:01:be:b9:e6:6f:d7:b6:79:aa:e7:33:3a:d1:cc:4a:
f2:75:aa:69:bd:f4:ff:32:5b:0d:c8:e3:f6:73:be:60:b6:9a:
4d:f2:6d:14:9b:e6:75:5b:00:71:11:fb:ae:a7:65:9d:52:ac:
69:6d:06:6a:ef:15:d1:4f:59:b9:79:15:45:bf:14:12:d6:40:
30:d7:80:97:aa:cc:e2:e2:66:fc:c1:78:3a:c7:52:1e:5a:d8:
07:af:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:28 2026 by rpki-client