Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N5K0UBnPzT1KLHdi3dyAifa7CLE.roa
File: N5K0UBnPzT1KLHdi3dyAifa7CLE.roa (raw, json)
Hash identifier: zEf5Lw7ZWKOdgo7PMwWDyc1eOGeB+1FNR+H8XE7H054=
Subject key identifier: 37:92:B4:50:19:CF:CD:3D:4A:2C:77:62:DD:DC:80:89:F6:BB:08:B1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E1AFBE97C59BA4D1E6FB6A0EAAAF02CBE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N5K0UBnPzT1KLHdi3dyAifa7CLE.roa
Signing time: Tue 12 May 2026 06:59:37 +0000
ROA not before: Tue 12 May 2026 06:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209104
IP address blocks: 163.5.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:fb:e9:7c:59:ba:4d:1e:6f:b6:a0:ea:aa:f0:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 12 06:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3792b45019cfcd3d4a2c7762dddc8089f6bb08b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:36:5c:02:bb:ba:10:bf:8c:24:c0:49:13:
ba:89:08:35:2e:fb:57:6d:e5:c2:49:2a:d3:e3:bf:
89:1d:91:51:08:3e:48:8d:04:5d:0f:a2:9e:b5:a9:
42:3a:07:f3:e1:98:11:98:03:83:e4:ca:c8:d3:65:
e4:d4:c2:27:3a:43:af:ce:47:28:91:e9:50:c1:e4:
0f:48:b9:6d:b6:0b:73:e5:18:84:98:70:90:5b:4e:
37:7e:f8:b1:90:b6:71:b2:d8:32:0d:b9:75:d8:20:
c5:84:9f:3d:a1:d0:85:21:ee:d7:93:5d:1f:cf:87:
55:e9:22:fa:0d:0f:e7:e8:aa:dc:34:ce:f0:d4:a5:
0e:3b:7c:13:ab:a1:5b:e9:25:f5:3b:ad:c5:4d:7c:
a5:05:98:f2:e2:f0:85:ff:b6:f4:0f:b6:12:5c:2d:
a6:3b:48:07:77:32:4a:66:a0:76:ad:53:2a:91:76:
58:20:3e:03:c2:54:7d:b5:6a:83:ba:c3:4e:63:84:
c9:71:fe:2a:14:17:9a:d5:22:40:6a:5f:be:95:bc:
24:b2:c8:1f:38:3e:19:89:7e:8a:80:f0:06:93:81:
eb:68:d7:bd:6e:c1:b7:b2:5a:a4:17:51:84:55:6c:
f1:68:ce:2a:20:a5:01:f3:5e:96:a9:dd:99:e5:2d:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:92:B4:50:19:CF:CD:3D:4A:2C:77:62:DD:DC:80:89:F6:BB:08:B1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N5K0UBnPzT1KLHdi3dyAifa7CLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
15:36:dc:43:b2:44:11:a9:96:cd:e5:a8:14:8a:08:3f:d4:16:
32:bb:1c:91:87:03:7c:52:9c:3b:ea:0d:99:29:96:aa:cc:51:
66:1a:97:15:96:d7:df:da:20:af:21:ad:63:69:78:2e:83:d3:
06:be:71:27:1d:76:82:69:84:e6:e4:e3:58:26:ac:e0:ce:e6:
ab:ea:b8:f0:b5:63:46:c9:9b:01:73:03:3b:2b:43:6b:78:81:
6d:d4:cb:97:89:9d:ff:b1:f3:d7:22:3f:a7:ab:74:72:ea:95:
1d:87:df:a4:af:6f:f9:6e:8a:a9:65:de:03:93:81:a9:9c:40:
9b:2c:c9:8c:20:d6:49:5b:87:c6:3c:fd:fe:50:02:f5:68:02:
17:d2:e8:01:4d:d5:1f:db:7e:de:4d:f9:da:15:c3:4e:4f:69:
a0:9f:d5:e8:7c:53:f5:7c:a7:ab:16:b6:e3:eb:12:d1:fb:fc:
14:e4:a8:58:11:5a:4c:90:98:f5:0c:da:7d:b1:21:c8:71:8c:
57:d0:e7:04:ce:71:1f:7e:f3:38:07:93:6e:cd:9f:bf:ac:ce:
f4:17:b9:43:5c:ce:5d:61:17:3b:07:c4:8b:9b:a0:3c:5f:ca:
87:46:a0:b3:d9:81:38:01:83:3e:d9:3c:cf:3b:9a:28:81:ee:
7f:28:33:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4a++l8WbpNHm+2oOqq8Cy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNTEyMDY1OTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzkyYjQ1MDE5Y2ZjZDNkNGEyYzc3NjJkZGRjODA4OWY2YmIwOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqw2XAK7uhC/jCTASRO6iQg1LvtX
beXCSSrT47+JHZFRCD5IjQRdD6KetalCOgfz4ZgRmAOD5MrI02Xk1MInOkOvzkco
kelQweQPSLlttgtz5RiEmHCQW043fvixkLZxstgyDbl12CDFhJ89odCFIe7Xk10f
z4dV6SL6DQ/n6KrcNM7w1KUOO3wTq6Fb6SX1O63FTXylBZjy4vCF/7b0D7YSXC2m
O0gHdzJKZqB2rVMqkXZYID4DwlR9tWqDusNOY4TJcf4qFBea1SJAal++lbwkssgf
OD4ZiX6KgPAGk4HraNe9bsG3slqkF1GEVWzxaM4qIKUB816Wqd2Z5S0q7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDeStFAZz809Six3Yt3cgIn2uwixMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTjVLMFVCblB6VDFLTEhkaTNkeUFpZmE3Q0xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXXMA0G
CSqGSIb3DQEBCwUAA4IBAQAVNtxDskQRqZbN5agUigg/1BYyuxyRhwN8Upw76g2Z
KZaqzFFmGpcVltff2iCvIa1jaXgug9MGvnEnHXaCaYTm5ONYJqzgzuar6rjwtWNG
yZsBcwM7K0NreIFt1MuXiZ3/sfPXIj+nq3Ry6pUdh9+kr2/5boqpZd4Dk4GpnECb
LMmMINZJW4fGPP3+UAL1aAIX0ugBTdUf237eTfnaFcNOT2mgn9XofFP1fKerFrbj
6xLR+/wU5KhYEVpMkJj1DNp9sSHIcYxX0OcEznEffvM4B5NuzZ+/rM70F7lDXM5d
YRc7B8SLm6A8X8qHRqCz2YE4AYM+2TzPO5ooge5/KDNg
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:04 2026 by rpki-client