Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UBInqy6vffcUhYc9ciWTwcKUDtI.roa
File: UBInqy6vffcUhYc9ciWTwcKUDtI.roa (raw, json)
Hash identifier: EDnI4ok4PrJMFZ+YeUiF8Wws4P2AtEnNHpBzUt9BRWI=
Subject key identifier: 50:12:27:AB:2E:AF:7D:F7:14:85:87:3D:72:25:93:C1:C2:94:0E:D2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A1B283DEEFA73D1F081EFD9BE69CCCFB1C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UBInqy6vffcUhYc9ciWTwcKUDtI.roa
Signing time: Fri 06 Nov 2026 20:19:08 +0000
ROA not before: Fri 06 Nov 2026 20:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 163.5.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:83:de:ef:a7:3d:1f:08:1e:fd:9b:e6:9c:cc:fb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 6 20:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501227ab2eaf7df71485873d722593c1c2940ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:6d:6e:b9:7b:e0:31:c5:cf:9c:67:fa:da:
f0:a4:92:a5:f5:07:b1:38:05:26:d9:37:08:b2:d4:
8a:4b:26:86:1d:05:19:6f:28:fc:3f:65:db:6c:8a:
27:03:4e:9d:ba:c2:ee:9b:53:16:93:bd:58:c6:f8:
d8:70:3e:a3:e2:e2:8b:d5:bb:97:4d:a0:75:d0:3f:
ba:2e:33:8c:71:b8:89:8d:08:cf:e9:05:9a:fb:25:
54:1c:e5:94:87:2d:b3:d5:ad:9b:65:87:94:ce:0c:
c5:68:b9:f0:c0:73:34:49:9b:2e:cf:7d:2c:87:06:
0b:37:d6:fd:32:b4:6d:45:60:98:45:0b:4c:bb:50:
c9:e4:fe:9f:17:4a:aa:33:90:78:62:a7:b0:0c:c2:
f0:f5:ab:a8:93:59:fa:2b:ef:36:98:d8:6d:24:34:
53:b1:e8:48:2e:34:e9:dc:11:d4:8b:9b:95:36:b8:
1d:13:24:1c:7b:69:1b:0f:92:f5:5e:ec:ec:ce:25:
74:2a:0d:d6:98:5a:02:96:e3:9f:41:ba:80:2b:9c:
75:00:c1:46:bd:b1:c8:66:3a:42:fb:48:08:76:2c:
71:54:86:1e:ad:b1:06:0f:a5:33:29:e8:93:61:57:
a6:da:8b:85:b8:90:92:3b:67:ce:f5:61:f3:70:cd:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:12:27:AB:2E:AF:7D:F7:14:85:87:3D:72:25:93:C1:C2:94:0E:D2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UBInqy6vffcUhYc9ciWTwcKUDtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.229.0/24
Signature Algorithm: sha256WithRSAEncryption
72:05:f8:61:35:02:c5:c9:84:54:b7:a8:61:a6:45:e8:e2:ab:
22:c1:19:c1:ca:25:56:c6:76:a6:9c:ab:16:f6:d8:02:d7:83:
a2:14:8a:86:a3:9c:e7:fb:c2:49:39:6f:2e:74:5d:2a:87:11:
ee:1b:27:ee:e1:4e:c3:d0:62:24:1c:d5:55:34:25:d8:2e:a5:
99:b3:e1:9a:b9:4d:27:90:0e:34:71:37:c4:8a:4e:88:69:c5:
1e:c4:c9:29:84:70:92:77:44:eb:a6:f1:76:a6:e0:91:2f:77:
d3:fd:49:d7:7e:d8:8a:23:ef:3b:ae:b6:63:08:c2:03:9e:5f:
d4:c1:cd:09:27:c5:cb:96:d0:92:6b:df:2d:9d:8e:95:7a:5c:
0a:6b:1e:60:2a:31:89:3f:5c:fb:6c:49:21:5c:c4:7f:00:6e:
5a:27:80:29:b1:62:4d:83:7d:3c:23:8c:e2:60:af:08:25:04:
28:00:fd:68:c5:9d:53:6a:12:64:51:1d:ae:9b:40:12:db:f0:
ce:0a:f3:7c:91:c5:b8:d7:67:22:d2:a4:00:b6:de:49:a6:95:
42:4c:39:55:fa:80:52:5c:a1:09:93:6c:c7:0f:c8:44:7b:c0:
0c:87:bb:81:0a:a1:6e:57:ef:e0:35:29:81:25:bc:9a:e2:74:
cb:5b:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:51:21 2026 by rpki-client