Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KkE8iURXJ97EnxqYIbTNBK2ohDs.roa
File: KkE8iURXJ97EnxqYIbTNBK2ohDs.roa (raw, json)
Hash identifier: HsTKHwZM3pVdNSE79hUniAWjU9K476qA0EDxaSdFsMQ=
Subject key identifier: 2A:41:3C:89:44:57:27:DE:C4:9F:1A:98:21:B4:CD:04:AD:A8:84:3B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F7ED80720F4A29733A6E6BF1A3AD78679
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KkE8iURXJ97EnxqYIbTNBK2ohDs.roa
Signing time: Mon 20 Jul 2026 09:25:14 +0000
ROA not before: Mon 20 Jul 2026 09:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 163.5.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:d8:07:20:f4:a2:97:33:a6:e6:bf:1a:3a:d7:86:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 20 09:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a413c89445727dec49f1a9821b4cd04ada8843b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:6d:b3:38:96:e5:c5:01:b7:7e:e8:30:3f:
1b:64:d1:13:ab:f1:cb:e1:0c:15:8b:83:14:e5:a0:
e1:99:0a:5e:05:85:48:a0:9f:c5:6a:2a:0a:35:cb:
45:02:94:58:f0:93:c6:8f:e1:a9:2f:08:34:54:10:
90:50:84:38:19:d8:c1:f9:41:7d:07:69:a8:59:12:
42:2b:86:8c:d9:80:8b:99:12:95:6f:50:88:e7:9f:
63:43:2a:e5:56:9b:0a:40:de:06:2c:b2:ea:f6:fc:
cb:be:29:c3:fe:89:88:7d:ba:9d:50:76:52:1e:39:
5b:36:5c:82:bd:10:c5:1a:b3:e5:f6:f5:c8:36:25:
99:32:45:f0:8f:e8:c9:4e:ba:52:ad:e8:70:ba:b9:
06:16:bf:96:8c:96:21:06:42:83:0c:7d:8b:15:1d:
0d:bf:c4:1b:09:92:0f:9c:c1:d4:60:b9:4e:5d:35:
c1:97:eb:0e:d4:74:30:53:44:fe:3e:96:17:7d:68:
5a:a6:5f:3d:7a:31:a5:af:cf:91:f4:3c:44:e6:f9:
0a:c5:4d:b0:3f:97:bd:e8:7f:b1:c6:d5:a8:c8:3e:
81:01:5a:da:59:e6:02:e4:37:75:f2:69:a4:db:4c:
f0:f1:24:40:5a:26:cd:29:99:d8:12:36:bd:59:ac:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:3C:89:44:57:27:DE:C4:9F:1A:98:21:B4:CD:04:AD:A8:84:3B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KkE8iURXJ97EnxqYIbTNBK2ohDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.53.0/24
Signature Algorithm: sha256WithRSAEncryption
36:2e:b2:78:d0:0a:03:37:90:5d:33:d1:2c:06:c1:36:07:36:
95:79:68:fd:1e:e6:c7:50:22:08:79:4b:0e:d1:10:41:c7:27:
08:ac:cb:42:d5:89:cf:70:3f:a4:83:6e:f7:c4:25:13:8e:ee:
b6:74:1f:cb:81:34:6b:c0:d0:a1:b5:0b:1a:2e:00:5b:8d:d3:
23:67:e7:87:61:a1:4c:4f:d6:b4:dd:80:a8:e0:fe:51:47:3f:
bb:06:65:93:1e:2e:99:37:97:7d:de:6b:08:66:74:50:37:a9:
8a:f2:13:f6:aa:4c:2b:15:2b:b6:b6:e6:49:0a:cc:15:4d:6a:
92:56:4a:31:ae:36:cf:b3:5c:01:57:87:17:c8:fe:01:64:3c:
e6:83:dc:c5:8a:24:6a:d1:dd:c9:67:6b:4e:84:dd:16:40:c4:
55:6a:48:bd:56:e8:71:ad:db:87:4a:4d:e4:9c:98:23:f7:c1:
31:ec:5c:bc:a0:42:09:f1:18:1c:25:df:26:44:26:a5:57:54:
30:64:19:4b:fc:c2:c6:6e:f4:b1:c1:46:1d:f5:a8:9b:7b:b6:
ee:ce:a1:b7:70:a8:24:7c:c7:9b:56:3b:98:f2:df:36:07:ba:
6f:8e:e1:0e:59:a8:c0:b9:bb:7e:d1:e7:8c:2b:32:65:ce:00:
1e:d2:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:59 2026 by rpki-client