Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FkCzAj9DApj-ZMyCQ6JSMZQVYZ4.roa
File: FkCzAj9DApj-ZMyCQ6JSMZQVYZ4.roa (raw, json)
Hash identifier: fxbLIi3dSEFa6LSfbBjchYI+WOT5tNW+HZxwG+qCOCc=
Subject key identifier: 16:40:B3:02:3F:43:02:98:FE:64:CC:82:43:A2:52:31:94:15:61:9E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DFE32ECC2E0B23B97C8044FB7C3BFFF39
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FkCzAj9DApj-ZMyCQ6JSMZQVYZ4.roa
Signing time: Wed 06 May 2026 16:50:43 +0000
ROA not before: Wed 06 May 2026 16:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:32:ec:c2:e0:b2:3b:97:c8:04:4f:b7:c3:bf:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 6 16:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1640b3023f430298fe64cc8243a252319415619e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:dd:2a:88:dd:34:ed:2b:38:36:a5:f5:5a:
37:4d:ef:51:65:a4:b5:64:11:0b:02:cc:22:31:5a:
a3:c9:81:83:2e:bf:2e:a8:10:f4:a2:74:be:03:18:
34:9b:4a:c8:a8:f6:43:4e:d8:c8:8a:d1:5f:fc:68:
69:f4:5c:e5:5e:2e:1e:88:70:79:a8:04:9b:f4:dc:
f5:2b:72:8a:56:4b:d3:f5:ab:b9:fe:a9:5f:cd:20:
90:e2:eb:56:52:ad:c1:46:a0:dc:10:a9:54:53:99:
74:8f:71:92:6d:57:80:b5:97:15:cf:d3:c7:ce:d4:
8b:67:d7:93:be:52:f6:10:c3:61:f8:64:11:63:a0:
6e:20:c4:78:98:e5:ae:c5:b0:8d:a0:be:7f:44:cc:
5f:7a:d1:51:40:35:de:f3:bc:d7:cf:32:10:1d:e9:
1a:bb:69:c2:ff:1b:de:00:c8:45:f1:5b:de:8c:d8:
43:cf:f5:4d:e8:0a:f2:f8:7c:2d:03:7a:8d:ad:92:
9b:fc:a7:b2:cc:83:bb:6c:52:c1:3a:24:23:4f:94:
e2:c4:05:41:2d:6e:ce:48:cf:29:33:da:c6:01:55:
d4:8c:37:4f:44:8a:79:4e:22:a2:46:bc:27:64:f3:
61:9d:6e:6f:62:ae:02:24:fb:31:99:95:f9:f5:72:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:B3:02:3F:43:02:98:FE:64:CC:82:43:A2:52:31:94:15:61:9E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FkCzAj9DApj-ZMyCQ6JSMZQVYZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.136.0/24
163.5.161.0/24
Signature Algorithm: sha256WithRSAEncryption
06:bd:e4:03:df:da:3e:fb:c7:5e:e6:79:b1:61:9e:3a:0b:3e:
0c:02:2a:81:36:cd:5e:e4:58:47:b9:b1:5c:cb:9c:aa:9d:67:
cc:1a:d1:15:ec:40:d3:d7:e2:43:73:d5:d9:5b:38:c2:e6:a9:
a9:e9:f1:34:28:3f:e6:f5:35:36:e0:e7:86:b5:d3:9a:96:71:
b2:27:56:1b:f0:30:c1:e7:c1:3b:a1:74:f3:a6:79:d7:8f:32:
ae:b6:e9:c3:33:02:27:18:82:5a:55:b8:99:0a:5a:eb:e0:25:
28:9a:e3:68:dc:85:6b:1f:1b:d8:a4:76:d7:2e:cf:80:f0:a9:
42:46:5a:8d:3d:ae:28:3d:7b:53:57:2e:b1:45:c3:24:ff:dd:
e2:13:66:45:7b:64:4f:94:a8:0a:99:e0:ab:cb:c5:ec:d2:75:
d1:4b:3e:8d:b3:fc:ca:55:c7:62:9d:69:5b:69:e8:86:58:2d:
2d:0a:3f:6b:45:ea:b9:c4:fe:4c:fa:19:8e:4b:3a:8e:73:47:
db:c6:ce:5e:e9:67:0c:0a:33:81:44:7e:0d:1d:27:86:49:3e:
45:62:65:db:9d:6e:e0:81:f2:d6:c4:30:19:85:ae:f2:b6:25:
fc:7b:28:8b:ae:b3:88:53:01:da:b5:f3:4c:d0:96:1d:7c:3b:
43:ba:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:41 2026 by rpki-client