Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HDFQiP49o9wrr3xltcQpWVybmPk.roa
File: HDFQiP49o9wrr3xltcQpWVybmPk.roa (raw, json)
Hash identifier: uutw8Mrf8UBuCbAxpk9yvxSsNoUam6pNyb2oX7JXuQU=
Subject key identifier: 1C:31:50:88:FE:3D:A3:DC:2B:AF:7C:65:B5:C4:29:59:5C:9B:98:F9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DB459F467AC620D94A411199276AE31F5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HDFQiP49o9wrr3xltcQpWVybmPk.roa
Signing time: Wed 22 Apr 2026 08:41:27 +0000
ROA not before: Wed 22 Apr 2026 08:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401856
IP address blocks: 163.5.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:59:f4:67:ac:62:0d:94:a4:11:19:92:76:ae:31:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 22 08:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c315088fe3da3dc2baf7c65b5c429595c9b98f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:3e:69:09:39:b8:51:6f:e9:dd:8c:59:b0:
a9:9f:13:6f:c6:0e:6f:b0:af:6b:c1:63:7e:ad:a9:
c1:d7:97:d8:3a:c6:a0:36:8f:57:cc:fa:34:6b:dc:
a6:fa:ef:d0:f1:a8:86:50:5e:be:bd:c0:33:37:2b:
09:28:c7:32:fe:5d:1d:48:68:9c:ae:62:14:27:24:
6f:6f:43:55:69:d8:c5:14:33:fc:87:6f:9d:69:fb:
be:35:33:bf:7d:27:7c:23:b6:f6:4e:b2:af:f6:ea:
28:b3:4f:de:ae:d4:15:66:14:79:07:22:c8:85:ef:
89:4e:7a:c3:49:a0:b7:5e:65:1e:20:4e:c0:bc:d5:
dd:8b:25:d9:b8:ca:c9:ed:18:fd:28:dd:a7:e9:e7:
d0:09:ed:01:72:c0:a7:e1:0a:39:8b:6b:f2:ea:52:
f2:76:06:9c:68:f9:f2:5c:3a:35:fd:39:66:99:c2:
6e:2d:fc:48:4a:3f:a9:ec:44:7e:31:3a:9d:d6:59:
4d:41:2d:5f:9f:82:00:1e:ba:8a:c6:7a:1c:cc:00:
53:70:7d:20:ca:72:3c:6b:9c:7c:20:40:d0:ec:7f:
7c:f9:dc:4f:72:f3:b2:1f:f0:54:08:71:f4:cf:40:
77:16:a9:69:3f:02:70:9e:0b:50:60:2d:58:c1:73:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:50:88:FE:3D:A3:DC:2B:AF:7C:65:B5:C4:29:59:5C:9B:98:F9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HDFQiP49o9wrr3xltcQpWVybmPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.237.0/24
Signature Algorithm: sha256WithRSAEncryption
41:54:d3:0a:27:d9:60:7c:89:62:0a:35:af:83:f2:12:28:ee:
79:16:f6:ab:e5:5f:9a:5f:38:39:7f:89:f3:8c:0f:31:42:58:
8d:d5:54:f2:98:8f:c8:e1:0b:30:e1:21:29:9d:fc:c3:9b:09:
25:cc:89:1d:13:fd:fb:68:70:6f:76:b6:47:03:52:93:f2:8e:
e3:b5:32:c4:2f:44:2a:69:a5:ef:f1:74:7f:db:1c:75:51:ba:
9f:59:f5:48:20:74:ed:50:0d:81:33:88:bc:fb:d2:cf:02:84:
78:16:90:a4:e8:90:cf:8c:47:f9:f5:52:6b:21:59:44:54:4a:
90:5a:13:09:ae:f7:35:43:d9:b9:df:b5:3e:3b:30:26:c9:8b:
23:47:5d:7c:32:f0:b8:6f:b6:eb:87:59:34:a4:c4:99:f3:8c:
e4:d5:08:1b:db:0b:e6:0b:ed:1f:e2:81:27:6c:15:da:e5:fc:
9e:4c:b5:db:dd:db:a8:1b:90:b4:39:c7:6c:20:ae:f6:a3:04:
86:f8:b1:9b:52:1d:30:cb:f6:98:57:5a:ff:1b:cd:13:6d:6a:
70:ea:c5:73:b0:c8:ce:44:9e:e4:ef:7e:6f:f4:3c:aa:19:f7:
07:c7:19:98:19:fa:97:22:1c:ed:5a:7d:8b:52:bd:a1:94:b5:
ff:79:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:40 2026 by rpki-client