Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/j7vWTvmtGTaS_llvwXjElbieoJs.roa
File: j7vWTvmtGTaS_llvwXjElbieoJs.roa (raw, json)
Hash identifier: muXCI7lCvGj2ioLtvy9ZDvCrLhL7T6Us3LRsNiwH9Vw=
Subject key identifier: 8F:BB:D6:4E:F9:AD:19:36:92:FE:59:6F:C1:78:C4:95:B8:9E:A0:9B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A11184E11718415168002A1395A5213A6D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/j7vWTvmtGTaS_llvwXjElbieoJs.roa
Signing time: Tue 06 Oct 2026 14:01:23 +0000
ROA not before: Tue 06 Oct 2026 14:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154950
IP address blocks: 163.5.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:e1:17:18:41:51:68:00:2a:13:95:a5:21:3a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 6 14:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fbbd64ef9ad193692fe596fc178c495b89ea09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:81:60:6e:2d:d5:cf:88:7e:d8:af:93:b3:
9d:18:26:60:37:c6:7b:60:b5:71:2a:a2:2a:26:70:
1e:ff:f5:a5:40:70:99:14:92:58:1d:f3:47:7a:33:
04:56:c3:74:2c:50:5a:60:91:d1:46:f0:a6:47:42:
92:58:b1:20:b5:24:fb:4d:fe:d8:30:6d:fe:f0:98:
24:0f:01:d1:61:cc:c2:2f:93:30:f7:6a:0d:31:bf:
a5:ec:8d:c1:cc:ba:0d:af:7d:38:a3:81:f3:db:0f:
4b:d9:a3:14:71:24:4b:db:8a:e2:aa:5c:3c:54:17:
b3:8e:d8:57:84:15:8a:ff:8c:5c:87:b7:03:35:6f:
4a:27:cc:58:22:ff:2c:f0:ed:fc:e2:a6:49:22:86:
e3:d4:2c:b9:22:15:d6:2d:17:b0:52:d1:f1:3f:7a:
39:00:69:97:c1:dc:1c:71:68:33:11:ea:0b:02:b4:
8a:76:58:39:d1:83:6a:a4:d7:b6:78:ae:9f:87:d1:
ba:73:90:dd:04:94:71:0d:bd:37:5b:e3:80:ef:54:
97:10:92:ce:0f:b9:b7:c0:2c:5f:7a:1c:5b:e7:8d:
a6:89:16:1a:a4:68:8e:e5:e5:d2:15:07:b3:41:50:
4c:f5:f5:85:a5:ba:d1:44:9d:58:ac:c7:62:06:0e:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:D6:4E:F9:AD:19:36:92:FE:59:6F:C1:78:C4:95:B8:9E:A0:9B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/j7vWTvmtGTaS_llvwXjElbieoJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
24:16:58:f5:fd:0d:c7:ba:8d:cd:0b:88:ab:ea:fa:13:4a:9f:
b5:8b:bd:0c:a5:26:03:68:d5:01:61:d5:c8:c9:49:e5:c1:e4:
20:b9:fe:cc:b0:da:c0:5e:95:56:08:03:d5:b4:42:19:4a:0b:
eb:82:53:6f:fb:ce:09:a2:de:11:4a:04:88:f7:bc:c5:16:cd:
36:12:68:24:ef:ed:e5:55:71:ec:67:82:8f:36:07:2a:6c:c7:
62:56:83:49:a6:e5:87:bb:2a:f8:ab:0a:26:6a:b9:3b:8b:23:
2e:da:6d:6d:ae:1b:13:cb:8e:77:b2:60:e9:84:ef:c2:78:f2:
c3:03:9c:c9:e7:7b:7e:eb:cd:cb:55:45:52:59:cb:c3:e1:2c:
60:2f:e2:be:e4:f9:9d:08:9a:d0:ca:43:aa:6a:4f:9c:8d:f9:
2f:69:5b:78:61:c6:c0:03:13:48:59:89:e4:fb:10:ff:58:2d:
91:13:3c:b8:45:20:7a:00:ed:0e:dc:c4:b7:3b:97:0d:00:1e:
2f:c2:19:85:3d:e2:20:47:81:5e:8e:cf:3f:38:f6:5a:e5:22:
92:d6:53:6f:be:bc:c7:d0:9b:4d:c1:6d:5e:46:2b:96:6b:c4:
51:32:1d:bd:c7:6c:51:6a:a5:9b:ed:b6:51:3c:d3:72:88:d0:
af:f3:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:21:42 2026 by rpki-client