Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PbQEnY1UYo4pYUnzQsxz7-9CMCY.roa
File: PbQEnY1UYo4pYUnzQsxz7-9CMCY.roa (raw, json)
Hash identifier: ktE4vysBgsOUK6NV6+q9npCUJFIHURltMePIWXs3i7Y=
Subject key identifier: 3D:B4:04:9D:8D:54:62:8E:29:61:49:F3:42:CC:73:EF:EF:42:30:26
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E0346E2954780E2E45A6C25A81F4C1C85
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PbQEnY1UYo4pYUnzQsxz7-9CMCY.roa
Signing time: Thu 07 May 2026 16:30:37 +0000
ROA not before: Thu 07 May 2026 16:30:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 163.5.13.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:46:e2:95:47:80:e2:e4:5a:6c:25:a8:1f:4c:1c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 7 16:30:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3db4049d8d54628e296149f342cc73efef423026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:b8:8b:6d:65:92:c7:e8:e4:b6:17:59:30:
9a:12:12:60:3a:3c:b9:e0:e7:a8:a2:d7:83:a6:53:
91:8f:0c:89:af:bf:97:c9:36:8b:c2:1d:9e:2d:ef:
19:e9:d3:78:b9:c6:09:b5:fe:ed:28:e8:de:5f:26:
36:1a:f4:1d:c5:5c:a4:4a:dd:16:da:56:5e:87:9b:
78:41:ef:6d:6b:bf:91:68:13:a3:6f:c7:b6:d7:89:
24:b2:89:f4:fc:25:67:6f:ea:c6:98:04:43:3e:97:
bc:da:3c:fd:cf:7f:e4:f9:e8:ca:0b:98:7f:c9:cf:
98:90:14:bd:7c:41:b9:2f:aa:86:ba:1b:28:45:ba:
ed:06:af:bb:6a:c7:c4:0e:fc:71:1a:94:e2:b1:a0:
0f:07:a5:12:52:06:c5:40:5a:da:de:61:1d:77:2c:
34:c4:18:ee:2a:9f:6c:df:32:99:b8:8a:80:3f:9c:
e0:82:0f:0e:c5:d4:e3:ec:0e:30:60:86:46:c8:f5:
1d:d4:9a:e5:ef:d2:aa:af:e4:3a:49:83:ce:c3:ac:
08:89:a7:b1:37:c5:d7:42:74:9d:64:c1:2d:4b:ac:
e7:ae:2c:91:d8:05:ab:cd:ea:a0:3c:df:ee:64:7a:
38:6c:eb:04:c9:0b:52:ae:37:e2:86:ca:36:b4:d3:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:04:9D:8D:54:62:8E:29:61:49:F3:42:CC:73:EF:EF:42:30:26
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PbQEnY1UYo4pYUnzQsxz7-9CMCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.13.0/24
163.5.109.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cd:b3:42:92:28:a4:db:4f:5c:e5:4d:ba:a0:f4:6d:a0:85:
e0:0d:d0:01:3d:49:7e:9a:11:90:b0:e3:ff:00:6c:3e:59:e3:
41:6f:77:5f:fd:a1:33:db:e7:29:4e:9e:ba:b3:5f:8c:b2:36:
80:40:0b:b4:78:86:95:dd:3d:d8:e6:2a:4c:64:03:87:1d:4f:
26:9d:3e:3e:97:70:f5:86:a3:e6:60:d2:9b:9f:97:09:58:cd:
28:91:96:36:01:c7:8c:1b:1d:a7:ae:9e:b2:a8:31:27:23:39:
f9:e1:46:5b:16:84:6a:0e:dd:8b:da:c9:c6:a3:23:e4:02:5a:
e6:89:7a:e2:05:57:d2:8a:9e:a5:7f:e1:ef:e1:c6:ae:6c:88:
d4:35:93:2a:06:54:bd:d1:8a:58:dc:e0:79:e6:fa:eb:9b:cf:
b0:f2:1b:7e:a5:a6:44:df:ff:a2:dc:23:07:42:7f:b7:4c:1b:
db:a6:90:d3:f8:9a:b4:b5:33:1c:83:e9:fe:9e:42:da:e8:56:
60:bf:c5:79:bf:2b:44:f3:6d:6d:23:1f:1b:8e:df:7b:00:77:
29:aa:a2:ee:68:f6:8c:18:00:4c:18:2f:75:20:7b:cd:8b:63:
55:59:f5:40:a7:b9:5a:65:90:ea:8e:f7:ff:29:bc:3a:0c:5b:
07:b9:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:40 2026 by rpki-client