Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dAR94UXxGh0sv5A7W2Ri3TYmiIc.roa
File: dAR94UXxGh0sv5A7W2Ri3TYmiIc.roa (raw, json)
Hash identifier: VffK4+4/2C9uQ7hlqkwD8Ky6GTa5R+G0yleZP+LfkPU=
Subject key identifier: 74:04:7D:E1:45:F1:1A:1D:2C:BF:90:3B:5B:64:62:DD:36:26:88:87
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CFB6FBE144E284C229CF53DEDEA20C67D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dAR94UXxGh0sv5A7W2Ri3TYmiIc.roa
Signing time: Tue 17 Mar 2026 10:55:30 +0000
ROA not before: Tue 17 Mar 2026 10:55:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152918
IP address blocks: 163.5.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:6f:be:14:4e:28:4c:22:9c:f5:3d:ed:ea:20:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 17 10:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74047de145f11a1d2cbf903b5b6462dd36268887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:f8:4c:07:62:a6:3c:a6:12:e7:f4:dc:f4:
87:50:a0:cc:49:b7:05:8b:df:3e:15:19:79:16:51:
9f:f5:a4:29:69:8d:2f:e4:e0:2b:12:48:f2:aa:d0:
6b:0e:3d:24:c3:98:62:0c:26:34:1a:e2:33:9c:81:
08:5c:66:16:8d:8a:49:77:22:34:b2:a6:40:9a:a7:
a1:99:52:ef:34:58:f9:22:a7:6a:6c:6f:cb:37:c7:
5f:b1:1d:31:f2:fe:15:cb:44:3d:28:7d:ed:80:39:
07:19:77:5b:d8:27:c8:73:71:1b:25:e7:d4:69:5d:
fd:78:6e:90:0b:36:88:0b:ad:f9:2e:32:7f:e9:71:
5d:b8:76:42:21:37:c5:04:3c:2f:f8:eb:41:fc:84:
1c:6b:27:3c:19:74:c0:44:b9:06:84:19:21:33:c8:
9c:09:57:06:66:75:72:77:ba:6f:a8:30:c6:dd:f1:
0b:22:53:b0:11:5e:98:65:f9:5f:ca:ac:53:27:19:
0c:c0:95:55:4f:28:cd:f6:ac:97:83:e1:e9:71:03:
b7:f1:81:8e:ff:c0:9d:c1:cf:c0:76:f3:70:99:9f:
7c:7e:57:5e:fb:a2:9b:50:5b:8b:0f:d3:0a:3c:c1:
bf:51:30:5d:c6:e3:7c:6f:d3:dd:1c:85:eb:bf:90:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:7D:E1:45:F1:1A:1D:2C:BF:90:3B:5B:64:62:DD:36:26:88:87
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dAR94UXxGh0sv5A7W2Ri3TYmiIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e0:34:38:dd:a5:1c:10:c4:59:f8:84:4b:10:96:92:c9:9d:
e1:1f:c7:d5:a2:9a:0b:aa:e8:95:f2:09:85:de:e6:ab:a8:d3:
88:39:f4:63:5a:ba:c9:d2:39:32:f5:b9:ed:0b:85:66:8a:eb:
c6:24:30:6c:35:bb:b6:a8:7c:ad:43:9a:28:25:96:cd:27:d7:
93:f4:40:3d:e0:53:7b:72:8b:2c:b7:a0:9a:7b:74:c7:fe:3c:
89:a7:1e:f4:41:5c:d8:87:22:ff:b4:06:db:ef:de:66:1b:39:
ae:72:82:67:40:73:98:6d:f0:91:4c:5e:45:23:5b:8d:c9:85:
20:7b:98:77:40:e3:2a:1a:91:46:36:81:e4:f2:c2:40:48:e1:
e0:10:b9:8f:e2:55:14:5b:84:38:fd:5b:17:fd:6f:46:78:1f:
c6:33:73:58:c8:26:4b:3b:df:2b:cf:c2:be:64:c3:b6:01:7a:
f3:62:dd:6b:21:91:05:ab:91:80:4c:9d:55:39:d2:6a:68:e1:
97:c8:f6:08:02:1a:98:90:2f:83:04:c8:93:c0:11:99:93:7e:
06:b3:d5:60:1c:6c:85:f0:ce:c4:f2:e0:77:64:4b:a3:d5:55:
ff:d9:1f:e4:e8:ba:61:89:6b:fd:10:a4:2e:bc:36:c1:e6:4e:
f6:1d:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:45:50 2026 by rpki-client