Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iJR4ryX8ENNiOj30rgbOYQXPFuY.roa
File: iJR4ryX8ENNiOj30rgbOYQXPFuY.roa (raw, json)
Hash identifier: aPErMbLPjKsFV3yz7LSZ3ZEfB2Z0y97l5KFeSs3xFGU=
Subject key identifier: 88:94:78:AF:25:FC:10:D3:62:3A:3D:F4:AE:06:CE:61:05:CF:16:E6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CF1CE395CC0D3B2585F0F6794D4CA827A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iJR4ryX8ENNiOj30rgbOYQXPFuY.roa
Signing time: Sun 15 Mar 2026 14:02:30 +0000
ROA not before: Sun 15 Mar 2026 14:02:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206675
IP address blocks: 163.5.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:ce:39:5c:c0:d3:b2:58:5f:0f:67:94:d4:ca:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 15 14:02:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=889478af25fc10d3623a3df4ae06ce6105cf16e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:48:5a:9c:86:71:52:90:5a:40:db:c0:30:12:
b6:6a:76:53:23:9d:50:47:ef:a7:c4:36:33:d0:53:
74:e4:8c:3c:58:a5:da:12:60:73:67:f1:2f:08:0c:
7e:d9:6e:24:fe:6f:3d:60:5d:1e:d0:92:6a:bc:67:
9b:7a:74:71:e0:c0:7a:14:1f:c1:ea:92:a6:c8:19:
a8:d3:f1:37:43:21:3b:13:e5:cf:8e:f6:ef:fd:7a:
32:03:e4:b1:52:a3:a9:a7:3e:76:d4:7d:7a:8e:c4:
28:4a:e9:3a:82:e5:bd:95:cb:dc:9b:6d:c5:84:3e:
3b:06:10:27:ea:ec:b1:49:2d:38:71:63:04:a0:72:
1d:4b:12:9e:23:8e:5b:a9:95:e3:bf:7d:ea:d9:5a:
4f:67:2a:64:f4:87:9e:f0:28:55:fb:60:af:d1:3b:
ce:0c:f6:a3:5b:4a:e0:1a:2e:0a:74:59:16:52:ba:
1f:e3:5c:c2:d1:65:c9:e5:03:cc:81:c2:55:96:35:
92:64:65:06:81:fe:8e:a5:fb:90:23:38:04:bf:4c:
81:5d:00:20:4d:29:a3:9c:53:6d:a1:5a:e6:21:22:
f5:fe:c8:23:d5:82:d7:83:b4:4c:e9:bd:4a:57:46:
45:89:eb:a9:e9:e3:5e:08:3d:d9:47:3d:8e:c6:9c:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:78:AF:25:FC:10:D3:62:3A:3D:F4:AE:06:CE:61:05:CF:16:E6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iJR4ryX8ENNiOj30rgbOYQXPFuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.104.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0b:af:99:1f:2a:67:52:e1:b0:34:dc:1d:c0:60:30:66:74:
8a:08:fa:dc:48:a7:31:9a:f6:86:b0:a5:c1:e7:ff:bd:45:b0:
9b:6e:c1:3b:f3:1e:a8:3b:0c:06:25:01:ce:4a:1b:bf:ec:e7:
c0:05:90:49:32:3e:b3:d8:90:35:ed:49:1d:81:40:78:b2:7a:
cf:3e:ad:85:75:09:e9:96:b3:d4:35:51:9b:83:3a:90:d5:93:
a9:16:71:c8:77:52:de:c1:cb:9a:97:97:8a:61:b8:79:ff:40:
32:90:74:a6:fe:c7:15:bc:8f:ba:c9:cf:b9:1c:52:c8:a8:a6:
06:24:a3:7e:6f:4f:f8:c2:2e:55:f0:94:ea:89:d4:b4:3e:9a:
a0:9d:d3:99:4e:5d:a4:69:00:66:54:31:6a:1f:1e:de:be:8b:
cf:3a:d5:69:f9:ad:f0:26:f8:b7:20:44:cc:f2:f0:0b:8c:22:
0c:70:9d:77:d7:b9:6d:72:9d:36:e9:f2:83:0a:bc:05:05:f6:
c1:41:db:b1:e7:ea:42:de:32:07:f7:7e:7b:b8:84:5b:f7:0e:
15:de:5f:30:63:c3:0e:48:d4:1e:cf:03:4f:da:dd:63:63:13:
74:a9:56:37:a0:03:6e:19:6c:cf:29:70:1d:ce:31:9c:4a:cc:
e1:ee:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:28 2026 by rpki-client