Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JxiBv_1ST1fH6Oqh3eW3QL0z_ig.roa
File: JxiBv_1ST1fH6Oqh3eW3QL0z_ig.roa (raw, json)
Hash identifier: dz1XNGTijWj33JouLrWGFwCk7MRqJsdieQx/ZZInO3Q=
Subject key identifier: 27:18:81:BF:FD:52:4F:57:C7:E8:EA:A1:DD:E5:B7:40:BD:33:FE:28
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A159A73C963EDF953B47DD82171AD9676F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JxiBv_1ST1fH6Oqh3eW3QL0z_ig.roa
Signing time: Tue 20 Oct 2026 14:11:34 +0000
ROA not before: Tue 20 Oct 2026 14:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 163.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:a7:3c:96:3e:df:95:3b:47:dd:82:17:1a:d9:67:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 20 14:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=271881bffd524f57c7e8eaa1dde5b740bd33fe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:bb:1f:12:dc:2b:e0:4d:20:ad:c0:3f:d9:
07:e2:06:75:0a:6c:44:0e:00:2d:e5:a2:16:77:e2:
03:3c:85:d6:60:d0:2d:b6:fe:d1:4e:fb:bc:c8:53:
63:d6:0c:66:20:ff:37:ed:26:8f:c8:91:9f:32:14:
4c:4a:cf:a2:f1:7c:e2:ac:6e:0f:74:f1:f0:23:c7:
c6:4d:63:0c:11:2c:c9:1d:c1:6f:c1:98:06:9e:35:
61:17:b2:45:77:84:0e:f4:cf:15:89:56:56:bf:1e:
1e:84:8f:b6:ca:0e:04:98:dc:7b:fe:bc:4f:d1:c2:
50:30:01:13:ee:55:b9:d1:ce:63:13:40:e9:f5:09:
30:2c:56:b3:17:a5:33:78:46:ad:b1:79:46:2a:87:
c0:31:98:f0:63:0e:dc:1d:c7:cc:44:17:af:87:8e:
6b:90:df:57:c1:60:a5:38:dd:ef:59:6f:ae:bf:8b:
97:a6:44:08:5e:b8:91:70:22:c9:7e:57:79:65:9a:
9c:94:f7:6c:12:6e:9c:25:94:41:fd:36:ec:0a:72:
09:48:5c:11:b9:7c:be:ec:9e:37:4b:99:d1:23:fa:
4f:38:64:53:a6:e9:cb:54:44:26:22:77:4e:bc:98:
fa:00:3f:b7:e8:90:a5:85:76:a6:f7:50:4f:fe:25:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:81:BF:FD:52:4F:57:C7:E8:EA:A1:DD:E5:B7:40:BD:33:FE:28
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JxiBv_1ST1fH6Oqh3eW3QL0z_ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fb:0d:fc:cf:c8:cd:9c:d2:27:59:4d:ed:2e:b3:7d:6d:30:
dd:56:a4:46:59:87:3c:4b:61:ee:8d:02:33:4f:6b:00:80:8e:
b1:91:cc:e8:27:fc:18:c3:ff:ce:e6:a1:2b:7b:b6:34:78:b6:
3e:0d:b3:fe:23:55:0d:b2:55:19:49:27:9a:88:85:31:67:6d:
4d:07:5f:80:1b:d3:08:80:61:89:39:2d:2a:de:76:8b:0a:00:
e4:0a:ef:8f:b4:8a:b2:10:d9:54:fd:70:58:89:52:fa:bb:bf:
e7:87:83:d9:0c:9e:c6:b2:b9:56:08:6a:11:f0:70:7e:a8:95:
a2:84:4e:76:5a:12:6c:12:d2:08:0b:86:d9:6d:42:8c:8c:0a:
96:4d:40:39:d4:b8:27:b1:b1:51:ff:9a:4c:e7:cb:aa:a5:72:
76:0d:02:ce:b8:c1:85:c3:48:a7:85:d5:3a:56:2f:6a:bb:5c:
72:f7:03:b2:fa:18:68:44:c8:5b:e0:6f:ba:40:87:7e:13:46:
02:29:43:12:54:f7:07:86:7d:cb:d4:32:5a:5c:ca:e6:d2:2c:
67:57:be:4b:e2:0c:2c:54:ec:3e:20:e3:dd:ad:3d:fd:3f:2b:
3b:e2:2b:1c:26:b2:0a:21:5b:2c:94:58:72:d2:64:e0:7d:73:
a2:57:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:07 2026 by rpki-client