Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SQ0yAv3Av8WSL8rd_Z5GftO0-N8.roa
File: SQ0yAv3Av8WSL8rd_Z5GftO0-N8.roa (raw, json)
Hash identifier: eLMc1pVlLpw3rC2a4c9+rw7vprvd9ze2rKX7RTtyG2U=
Subject key identifier: 49:0D:32:02:FD:C0:BF:C5:92:2F:CA:DD:FD:9E:46:7E:D3:B4:F8:DF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D1ABA9BF1D7DC84E15317F4B7E88E3DF4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SQ0yAv3Av8WSL8rd_Z5GftO0-N8.roa
Signing time: Mon 23 Mar 2026 12:45:30 +0000
ROA not before: Mon 23 Mar 2026 12:45:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209274
IP address blocks: 163.5.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:ba:9b:f1:d7:dc:84:e1:53:17:f4:b7:e8:8e:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 23 12:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=490d3202fdc0bfc5922fcaddfd9e467ed3b4f8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:8c:d9:9d:dd:1f:74:88:4b:13:78:df:29:
72:40:93:b6:18:f6:d2:31:d1:51:f5:09:01:24:eb:
f0:c9:94:2f:b3:22:a5:14:16:49:50:6e:d3:5c:1f:
23:1d:72:58:78:53:77:07:f2:e9:d8:f3:01:c0:1f:
4b:41:ca:3f:be:99:8f:96:e6:11:5d:dc:7a:d4:b0:
25:e6:66:cd:e7:ed:bd:de:ac:32:a4:46:cc:af:45:
36:e6:be:bd:39:1b:4d:3c:37:0b:51:d7:94:7a:d0:
be:19:40:f3:23:71:d4:bc:12:ce:16:48:cb:aa:a9:
06:b5:ed:db:02:18:3d:3e:8b:0f:37:3a:29:25:ae:
fa:96:d6:dd:30:0e:93:1e:3e:42:79:90:ec:1e:6c:
64:95:6d:14:56:b4:45:27:38:15:dd:f5:14:df:1b:
81:c2:c7:ae:5e:4e:df:b5:35:7c:57:87:56:fc:08:
8a:d7:35:cb:b3:48:f7:12:35:2c:a3:c0:e6:00:4a:
56:76:7d:b5:27:63:0d:40:9d:63:bd:36:10:a9:c4:
e5:7d:1b:e3:3c:92:60:65:b1:07:0d:e0:e4:e6:95:
34:d2:4c:9a:66:17:6f:88:0e:b4:14:11:eb:fd:e9:
01:f4:a7:d9:3d:f2:0f:b1:cc:c6:dd:df:4b:54:66:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:32:02:FD:C0:BF:C5:92:2F:CA:DD:FD:9E:46:7E:D3:B4:F8:DF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SQ0yAv3Av8WSL8rd_Z5GftO0-N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.102.0/24
Signature Algorithm: sha256WithRSAEncryption
73:9c:f3:67:2c:4a:2e:41:0e:04:97:65:37:3e:48:fe:80:e2:
14:7f:87:16:97:34:1a:fb:3d:8b:c2:a1:df:e7:ae:48:0d:a3:
09:2d:ce:0f:e5:7d:ab:13:f9:57:fa:63:a7:f5:ee:12:36:9a:
a3:0a:25:18:23:6a:69:73:f9:b5:88:ca:66:62:da:c2:41:20:
ab:1e:27:f9:ee:63:65:ba:68:1e:f6:13:7d:c3:76:e9:9d:d4:
f1:e5:7e:10:01:53:bf:f9:e6:19:4b:4b:b2:d9:ec:f8:30:73:
0d:14:77:4b:7f:62:10:47:87:de:c1:fa:17:d4:e4:05:59:d9:
65:ff:6d:3b:b5:08:59:61:3f:2f:05:4d:bf:34:75:07:d7:87:
c7:28:4c:41:89:19:cd:2b:d0:12:be:c7:33:8d:d5:9c:0b:58:
47:b7:d9:59:9e:c6:90:dc:6e:29:02:7b:d8:46:3c:68:00:f3:
fb:20:bf:90:ae:d5:e9:63:24:23:88:85:19:6f:6a:ae:a1:09:
0f:36:56:31:e6:c4:73:10:04:7f:13:e9:bf:ae:3c:ae:ef:7f:
c4:bf:40:15:5b:b9:27:58:17:da:1b:d0:78:bc:31:9b:ce:b0:
4a:88:56:75:c5:b6:21:26:23:d2:a5:95:fd:76:2e:81:c7:bc:
f6:a6:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:56 2026 by rpki-client