Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TC-5YVCl5ZIvptN7eBgXpIkxEeM.roa
File: TC-5YVCl5ZIvptN7eBgXpIkxEeM.roa (raw, json)
Hash identifier: TxdhUw/M2ScP9Y4HnywNsAnGjNmgsSrdWQlT0u7xj2M=
Subject key identifier: 4C:2F:B9:61:50:A5:E5:92:2F:A6:D3:7B:78:18:17:A4:89:31:11:E3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE2488C942A0308389AD92059A462073C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TC-5YVCl5ZIvptN7eBgXpIkxEeM.roa
Signing time: Thu 12 Mar 2026 13:42:11 +0000
ROA not before: Thu 12 Mar 2026 13:42:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 163.5.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:48:8c:94:2a:03:08:38:9a:d9:20:59:a4:62:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 12 13:42:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c2fb96150a5e5922fa6d37b781817a4893111e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:ac:a4:8f:cd:38:aa:7a:81:0e:8b:de:bf:
74:58:31:13:5c:94:2d:67:7b:1c:8c:4c:a8:1b:75:
bd:2f:1f:bf:82:06:f1:6f:be:04:a6:ba:2c:fe:e9:
31:e7:d1:2e:c0:12:69:64:02:de:ad:17:23:2b:48:
c7:3d:6d:d1:30:70:66:ba:01:53:ab:39:54:10:5c:
86:7a:11:8c:a8:fe:3b:c3:55:03:74:aa:be:86:df:
e2:1a:c2:1e:8b:2c:b1:4f:48:62:af:00:31:c2:3b:
ab:1c:6b:11:5c:c7:7f:72:8e:2b:8d:62:c2:f7:3c:
aa:30:f2:90:f2:3e:c7:86:57:1d:31:09:7f:6b:2b:
e3:f2:f8:1a:7e:c2:92:c2:0a:8a:25:b0:4a:c3:ea:
26:a9:f7:1a:9f:0f:e4:7b:79:e1:a5:a7:ac:40:17:
8e:3e:33:a8:0b:76:61:6f:3b:12:99:75:d5:a8:96:
03:b1:2e:b3:2d:90:0d:bb:ba:2d:99:13:37:9a:5e:
e1:0a:1d:16:6c:bb:2a:ba:fd:0c:c1:7d:2c:ca:e7:
cb:47:d1:a7:da:92:97:04:cc:2f:49:85:fb:f8:e1:
10:c0:96:52:0c:58:ff:d4:99:df:38:29:99:b4:7e:
e4:d4:c8:72:e3:68:8d:e7:f8:fd:31:9d:74:02:19:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2F:B9:61:50:A5:E5:92:2F:A6:D3:7B:78:18:17:A4:89:31:11:E3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TC-5YVCl5ZIvptN7eBgXpIkxEeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3d:2b:a8:e2:d0:42:98:25:cf:e5:05:b8:31:90:45:7c:ce:
c3:43:28:9e:c6:4a:d5:10:d7:0a:a8:13:24:97:24:82:ca:d5:
86:7e:fe:cb:58:a4:33:db:f5:06:47:4d:97:55:d2:ad:32:f7:
3c:2d:f8:dc:57:02:d0:65:32:30:0b:00:d8:59:7a:6b:03:d9:
56:04:c9:e6:32:77:93:8b:e0:34:52:af:19:c7:e2:07:5e:8d:
fe:7b:5e:e6:2b:2e:6e:db:e6:18:30:c2:8a:c8:be:61:ea:10:
9e:0c:2f:f0:ea:cf:93:d4:a9:4c:f5:d6:97:f5:23:e6:47:d3:
f6:1c:57:b8:c3:66:6f:e7:88:04:3e:9e:ba:f4:0b:99:1a:8d:
6d:99:be:10:3d:b5:24:c0:5d:44:37:e9:73:a6:c5:ec:15:cc:
81:35:a0:1a:d5:75:b7:2e:4b:3c:5a:13:24:69:50:c3:1d:aa:
8b:6e:0e:06:08:48:ba:ce:67:e4:d9:6b:fa:2e:29:b0:8e:af:
de:43:6a:80:38:38:c1:3b:03:44:54:63:62:f8:60:62:b3:4c:
90:27:d2:b6:4a:44:2e:64:55:be:fd:6d:29:32:e4:46:ec:66:
27:ea:7f:7f:32:97:ea:82:28:72:42:f3:7e:8a:c1:ee:9a:8b:
9f:98:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:23 2026 by rpki-client