Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OnjjUDAh8n7TWKlWhc9UrTZivi8.roa
File: OnjjUDAh8n7TWKlWhc9UrTZivi8.roa (raw, json)
Hash identifier: zJ1bMyTQVwrF9+pVVMO8p/PggfLxxCAesdhI3YlstdY=
Subject key identifier: 3A:78:E3:50:30:21:F2:7E:D3:58:A9:56:85:CF:54:AD:36:62:BE:2F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE89D5193DF65FCB405ED034502D27D35
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OnjjUDAh8n7TWKlWhc9UrTZivi8.roa
Signing time: Fri 13 Mar 2026 19:12:30 +0000
ROA not before: Fri 13 Mar 2026 19:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203054
IP address blocks: 163.5.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:9d:51:93:df:65:fc:b4:05:ed:03:45:02:d2:7d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 19:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a78e3503021f27ed358a95685cf54ad3662be2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:81:51:fd:65:0e:b4:cd:38:e3:ba:4f:67:
36:2a:cf:7c:07:47:05:2c:69:3f:1a:8f:29:70:6a:
b4:0a:a2:d2:71:77:76:72:31:1d:67:ae:6b:60:79:
2f:3c:b7:0b:88:6d:af:cb:ba:ab:ac:71:cf:6e:f9:
1d:d3:bc:ee:48:26:81:28:e5:cc:01:2d:fa:d5:f9:
6c:98:92:81:37:7f:51:0c:d4:e5:f1:47:1b:75:c1:
b4:9c:e7:1f:fb:b3:38:f7:0f:c5:bc:e3:19:a2:eb:
7a:c2:3a:c0:5c:c3:24:85:ac:0c:d0:aa:08:26:7b:
47:43:73:79:eb:6d:00:68:f9:29:63:2d:cf:dc:e7:
39:75:06:9b:ff:8c:5d:aa:5d:75:2b:fd:c7:51:62:
46:f5:11:29:12:9a:c6:e8:e2:54:52:1a:f8:48:98:
6f:13:89:8d:a0:24:9e:5b:15:61:cc:8c:c0:41:68:
54:81:ba:f3:26:61:ec:97:9a:d5:79:88:68:48:28:
d7:f8:2c:e1:b0:fe:67:6a:61:84:4a:ff:fb:37:b9:
53:83:cf:57:04:2b:1b:f5:c1:b6:dd:68:5a:30:7a:
63:a8:47:12:87:92:c7:69:d1:96:22:c6:a8:b9:ab:
cd:e6:54:e7:3c:ec:89:5e:89:d6:cf:c1:61:a3:80:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:E3:50:30:21:F2:7E:D3:58:A9:56:85:CF:54:AD:36:62:BE:2F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OnjjUDAh8n7TWKlWhc9UrTZivi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.54.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9b:26:0c:46:1c:4d:67:12:d3:62:3b:bb:4c:2e:7a:29:c6:
95:9b:83:83:b7:08:84:41:c3:ac:d3:0d:68:8d:b4:ca:0d:96:
fc:60:0e:88:f2:0f:80:87:07:38:27:8a:f7:81:0d:5c:5e:db:
8f:6f:54:bf:79:95:f4:c4:4e:a7:07:00:65:c6:76:62:fb:4e:
07:fb:ef:f5:79:cd:b1:9e:d7:61:3d:36:6f:77:96:52:cc:d4:
cd:46:9d:90:02:40:33:ba:1d:a6:89:4d:a1:4d:2b:b6:6f:75:
17:59:91:08:af:02:67:3b:68:3b:47:d3:2a:8c:e6:d0:42:ac:
00:a8:c1:2f:a3:1d:f5:0e:3e:34:69:ec:81:4c:26:74:88:db:
06:42:66:b0:8c:43:34:38:a4:13:e0:95:c0:14:78:76:ac:40:
a0:0b:04:00:f1:1c:f7:58:2e:4f:8b:70:17:57:a8:48:43:1a:
70:22:29:12:0a:70:c9:90:f6:b8:ef:33:fd:96:e4:18:f4:ba:
73:d7:cc:11:e8:c4:74:b1:f9:2b:10:a9:d7:00:21:c1:6c:8d:
57:84:c7:9a:58:7c:df:ce:b8:e6:61:fe:b9:bf:bb:75:cb:92:
3d:58:9c:87:ae:15:5f:20:16:fb:97:68:7a:b1:8f:7b:50:9e:
2d:0b:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:08 2026 by rpki-client