Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YVwuqZ6hjv8nWKT_2S5YZue1Oq8.roa
File: YVwuqZ6hjv8nWKT_2S5YZue1Oq8.roa (raw, json)
Hash identifier: UypxS8wpZmhYqyg3/4DYKCRhmT5BwZBiY5V11yw/AcE=
Subject key identifier: 61:5C:2E:A9:9E:A1:8E:FF:27:58:A4:FF:D9:2E:58:66:E7:B5:3A:AF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0CD6A407135AFA3CE702C441F30325DB7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YVwuqZ6hjv8nWKT_2S5YZue1Oq8.roa
Signing time: Wed 23 Sep 2026 08:38:07 +0000
ROA not before: Wed 23 Sep 2026 08:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 163.5.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:6a:40:71:35:af:a3:ce:70:2c:44:1f:30:32:5d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 08:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615c2ea99ea18eff2758a4ffd92e5866e7b53aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:3f:84:db:3b:80:80:15:7f:18:7f:38:0d:
51:09:9b:90:a7:09:a1:da:9b:5b:fb:b6:0d:f6:d3:
05:75:05:d1:50:1b:49:66:42:6b:94:57:03:62:42:
27:c4:fc:44:c8:b4:63:47:34:14:95:04:6f:e1:19:
51:f4:9a:73:72:12:4c:be:82:cd:21:1a:dd:b1:da:
b7:5d:a6:7b:cd:02:53:ae:fa:65:fa:56:6f:60:85:
95:9d:0c:78:55:11:3d:9e:05:db:c3:10:66:d3:f6:
1b:32:45:68:46:f2:79:9e:09:42:82:f1:d3:68:77:
cf:d9:56:78:81:7e:7a:b4:10:57:8c:7b:48:c5:ac:
5a:3e:57:1b:52:56:e9:a7:e1:53:7f:02:0e:1c:3a:
d7:7b:92:0c:53:04:62:4d:de:1b:d4:0b:4d:4d:c1:
54:90:d1:2f:26:f2:43:52:fc:4f:85:04:d1:7d:cc:
66:fb:a8:9c:57:c0:d4:08:c6:90:98:3b:66:3d:46:
63:77:d6:98:d4:87:5f:70:71:9f:0b:6a:b9:26:07:
d1:f5:6a:bc:57:d9:46:0a:d9:2f:a3:48:83:ca:dc:
a7:4c:70:84:2b:68:43:5f:7a:bf:05:b6:f7:71:ae:
20:bf:9d:4d:33:27:56:c0:bd:97:93:48:58:f0:90:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5C:2E:A9:9E:A1:8E:FF:27:58:A4:FF:D9:2E:58:66:E7:B5:3A:AF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YVwuqZ6hjv8nWKT_2S5YZue1Oq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7d:42:fe:64:6f:79:2b:77:4b:17:2e:fe:4c:37:25:b5:ae:
9e:80:47:bb:b5:f2:1f:42:5e:1f:8d:65:b1:11:e2:07:a2:d0:
2a:ce:e8:44:12:24:84:4b:3e:b4:87:72:8e:5e:1f:5c:33:6d:
d9:96:3a:1d:57:6b:34:ec:5d:5e:75:ca:47:a1:26:e6:5d:3e:
06:fc:db:e7:4d:72:3a:d2:4a:3b:ba:a2:95:0a:e8:d9:f9:05:
56:1e:b7:1b:8e:f9:54:9e:66:57:29:92:16:dd:91:f5:f2:ce:
e5:ad:2e:25:94:41:44:30:b8:e7:d5:ef:18:5d:e6:17:2e:d8:
b9:b1:4d:bc:e2:08:95:9b:cc:2a:56:a5:68:e7:40:c2:02:61:
a8:1f:00:da:12:91:fc:e9:a7:02:68:fc:fc:5f:19:14:9f:12:
f3:4a:53:fe:d7:ed:9c:55:6a:66:f8:2d:a4:b1:d6:37:fe:18:
3b:31:4d:b1:4b:c7:6a:2a:11:dd:28:2d:73:c5:1f:ad:1d:da:
42:c9:e5:ab:16:27:fa:48:ae:e4:26:73:25:16:24:27:30:b0:
f5:73:9b:e6:18:71:8c:3a:35:8f:6b:82:98:b6:cc:68:0f:c6:
55:1b:17:64:89:63:6a:8d:1d:c6:70:55:f5:4f:cb:e2:8b:37:
6d:63:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:34:21 2026 by rpki-client