Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gF1wxwSkk3UKs-RG7iIVEyXKG0Q.roa
File: gF1wxwSkk3UKs-RG7iIVEyXKG0Q.roa (raw, json)
Hash identifier: Th/UQvkDFw0NzDJMY/85FIVdpLuRj+eRwvwgb6g3kVQ=
Subject key identifier: 80:5D:70:C7:04:A4:93:75:0A:B3:E4:46:EE:22:15:13:25:CA:1B:44
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DF440F000FD6D7B89763A7E126CFDB055
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gF1wxwSkk3UKs-RG7iIVEyXKG0Q.roa
Signing time: Mon 04 May 2026 18:29:49 +0000
ROA not before: Mon 04 May 2026 18:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 163.5.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:40:f0:00:fd:6d:7b:89:76:3a:7e:12:6c:fd:b0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 4 18:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=805d70c704a493750ab3e446ee22151325ca1b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:36:52:8d:79:cd:e7:22:29:05:de:6e:78:
87:39:0d:f9:4a:05:03:29:32:40:2c:77:21:2b:f4:
bd:4c:ab:20:0b:9d:b5:f4:13:26:08:7b:c5:c5:b8:
08:1f:38:93:dd:7e:02:c0:76:65:23:15:0f:cc:b2:
e5:38:ac:4e:8a:64:e1:15:f5:8e:bf:82:e6:d6:f6:
51:0b:b3:1b:5c:cf:d8:95:de:5d:2d:49:e9:62:cd:
f2:2f:6b:a3:25:e3:7c:5a:c1:87:ca:d3:ff:7f:f0:
2d:f9:a6:44:86:93:45:b6:8f:23:01:a3:3e:6a:ba:
92:06:22:b8:b5:d6:a5:b6:99:fd:4c:dc:3c:d5:57:
d9:71:a2:22:a6:a9:c9:c2:e0:38:28:8b:d3:93:98:
3e:43:91:ee:ec:4c:20:d1:24:e3:3d:ec:02:98:aa:
26:e7:f0:1c:6f:9b:e2:f7:b4:0f:e7:30:7b:8e:87:
01:15:bb:22:6d:cc:af:c7:b8:d3:3d:e8:87:4a:91:
c5:14:43:97:54:88:e1:98:fd:83:f0:0a:55:0f:cc:
0d:80:65:f7:93:db:e4:39:60:b2:be:0d:e8:0a:19:
5b:c0:91:9d:78:c1:f6:6b:86:7f:29:dd:fd:31:0e:
fe:8e:d1:34:ec:02:03:7b:1b:a8:92:37:2f:2e:96:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:70:C7:04:A4:93:75:0A:B3:E4:46:EE:22:15:13:25:CA:1B:44
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gF1wxwSkk3UKs-RG7iIVEyXKG0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bb:8d:8e:55:c9:e6:64:65:16:c5:8f:cb:3c:a1:37:a8:2f:
d4:a9:bc:dd:03:7c:8b:e8:a5:7a:34:52:87:1e:95:a4:07:9a:
ac:9c:67:92:b3:b7:e1:6b:e4:d9:76:f8:cc:c2:e1:26:7e:b4:
74:56:f4:18:e0:b5:b0:29:85:5c:ac:a4:9b:e3:cc:9a:c5:76:
ce:c0:0c:6b:eb:66:c8:05:b6:31:8b:94:5f:a9:b4:a7:ea:f7:
43:80:9f:b7:9c:be:ce:a1:ee:e9:12:ec:67:8e:06:a1:c8:30:
a8:f5:c0:1b:cc:92:31:65:b1:bf:13:eb:49:4b:70:ce:47:90:
b6:5a:c8:0e:42:99:03:5e:f4:8e:f8:98:cc:a4:97:4e:26:6a:
ba:29:3b:60:7a:f1:93:7d:1e:58:55:cc:04:96:b0:fe:6b:9f:
58:ab:81:58:e7:00:71:fc:7b:5b:1c:4d:bb:f9:5c:87:c2:8a:
12:5d:38:0e:e7:a0:71:9d:ca:cb:cd:50:cc:85:46:c6:79:e3:
24:63:2a:64:4a:5d:7d:7d:7a:7c:53:61:af:a6:f9:6f:0d:2d:
74:b8:7e:c3:95:b6:d3:ed:9b:59:c4:b7:ea:5c:99:f1:80:06:
dc:2c:af:88:cd:bd:1a:6c:7a:25:4b:b6:e8:1e:cd:f9:13:27:
d8:54:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:07 2026 by rpki-client