Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iMFDL6wWYyqgHlK6rMnrpn6pJd4.roa
File: iMFDL6wWYyqgHlK6rMnrpn6pJd4.roa (raw, json)
Hash identifier: dghY6e/bGGe2iVuAyDiRXXaq1dVucVzkpNmRPF9YRtw=
Subject key identifier: 88:C1:43:2F:AC:16:63:2A:A0:1E:52:BA:AC:C9:EB:A6:7E:A9:25:DE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E0DE16ACA88B64D26C4449E298C3D1ECD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iMFDL6wWYyqgHlK6rMnrpn6pJd4.roa
Signing time: Sat 09 May 2026 17:55:37 +0000
ROA not before: Sat 09 May 2026 17:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:e1:6a:ca:88:b6:4d:26:c4:44:9e:29:8c:3d:1e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 9 17:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88c1432fac16632aa01e52baacc9eba67ea925de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:90:4f:6c:8b:29:17:ce:4d:50:22:f6:37:
fd:60:6e:d1:69:fb:44:21:1c:a9:13:7a:d2:ed:ec:
03:3e:2b:4e:14:78:4c:de:77:b0:25:61:a6:73:80:
c1:15:f1:80:6e:9b:25:4c:83:e5:8f:38:c7:bf:f9:
76:72:08:4f:5a:17:20:4c:cd:23:0a:82:cb:20:86:
6d:d2:01:f4:85:30:44:57:04:22:8b:85:af:60:22:
e6:3e:46:7d:4a:a7:b3:d2:f6:9d:9a:01:86:22:d2:
81:a9:d1:8f:d8:90:1f:87:99:df:85:63:38:a5:fe:
96:3e:2e:34:d6:36:2d:5d:07:2a:8f:37:5d:a5:92:
eb:a6:aa:cd:99:e4:29:c1:2c:8f:d6:8b:63:8d:fe:
1c:6e:a4:01:93:2f:94:26:1e:24:b4:32:bf:d5:88:
0e:b0:3a:39:57:a4:c2:f8:38:bb:b9:dd:45:e3:67:
db:58:73:54:98:43:a0:b8:1f:13:6e:1a:12:28:f4:
6f:6b:7d:0a:8a:1a:10:57:83:ae:b9:95:19:63:0b:
f9:b1:3c:de:98:d8:66:04:3a:21:f2:18:40:11:b4:
06:b0:7c:f0:45:78:db:05:64:2f:f4:b3:87:19:e6:
e9:89:ab:ca:53:ea:7f:b1:90:76:3e:91:ae:ff:6d:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:43:2F:AC:16:63:2A:A0:1E:52:BA:AC:C9:EB:A6:7E:A9:25:DE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iMFDL6wWYyqgHlK6rMnrpn6pJd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d9:97:55:20:36:10:bc:d7:82:40:81:2e:6c:c0:aa:32:cc:
ce:c5:fd:e0:a0:d5:df:ba:55:8a:7c:40:53:fa:7c:e1:b3:97:
37:e5:54:3f:c0:81:25:07:82:ae:db:9b:4f:1d:e0:c2:d0:0f:
38:a3:42:ee:19:6f:fd:c2:f8:7d:4d:14:ae:39:6f:4a:94:90:
b2:d0:97:9c:84:7b:ce:ce:6d:43:74:3b:2d:cd:14:20:25:ec:
a5:f2:4c:72:fb:c6:e9:99:02:4d:67:1a:29:12:8c:af:c9:8a:
10:13:c8:93:02:89:25:4f:81:6f:0d:37:a6:57:11:a9:9b:bc:
25:d2:09:36:fc:91:53:b0:64:c2:5b:7d:5d:83:4d:02:1e:8a:
16:67:3c:df:07:4f:9c:4d:bb:d1:7b:02:33:48:1b:4b:73:be:
58:8c:46:da:77:93:70:37:b9:5f:63:8d:57:12:db:8f:10:de:
97:b8:71:22:1a:4e:16:6c:fe:89:ab:a2:aa:92:94:4e:15:6c:
d3:d2:2c:c2:5f:eb:8f:d6:0f:47:62:c2:c0:1f:9b:70:d4:6b:
f2:40:f9:3f:36:66:65:91:6b:eb:65:7a:02:06:3b:f0:fd:8a:
31:7d:89:3a:65:d7:7b:5e:61:64:f8:e0:db:46:6d:3b:29:35:
b5:bc:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:54 2026 by rpki-client