Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kzxJ3tUY2vMdZfhl3C60gOTkBqI.roa
File: kzxJ3tUY2vMdZfhl3C60gOTkBqI.roa (raw, json)
Hash identifier: syUniLEMPPH+lqy4pRyruj4Emf22KywpotqgwmV9bo0=
Subject key identifier: 93:3C:49:DE:D5:18:DA:F3:1D:65:F8:65:DC:2E:B4:80:E4:E4:06:A2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CF74F3AFBCBBFBD0820211DD9B466E91F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kzxJ3tUY2vMdZfhl3C60gOTkBqI.roa
Signing time: Mon 16 Mar 2026 15:41:30 +0000
ROA not before: Mon 16 Mar 2026 15:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401824
IP address blocks: 163.5.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:4f:3a:fb:cb:bf:bd:08:20:21:1d:d9:b4:66:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 16 15:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=933c49ded518daf31d65f865dc2eb480e4e406a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:37:ba:18:1b:49:4e:08:d8:ab:9f:d0:7b:
c3:cb:9f:83:74:1a:7c:ea:0c:8c:cf:8b:ac:97:5c:
cb:12:ce:a2:34:3f:b7:29:9f:45:7c:b9:81:ee:42:
9d:40:80:00:0c:de:b8:78:9a:1a:46:bc:f3:71:41:
d5:1e:4a:42:8a:03:82:19:de:bc:56:03:11:ff:4b:
c1:8c:b0:fb:75:fc:e5:21:9a:8e:9c:df:71:a6:e6:
f3:25:f7:9f:d6:84:36:d6:7a:ae:36:a6:83:8a:75:
4b:fa:48:63:54:bd:1a:44:52:ae:66:29:25:ee:86:
f0:75:3c:14:16:64:98:92:8c:39:bd:0d:05:52:70:
99:c6:c2:75:54:e3:a4:95:ed:1c:1a:7c:aa:3c:b8:
8f:85:ae:da:39:4b:76:c3:5e:48:c0:36:cb:a3:56:
a7:26:11:e2:72:7a:18:04:5c:2b:93:d4:3b:fa:df:
05:34:c8:86:31:f8:06:df:f3:7d:6f:f0:af:05:a1:
26:e1:2d:07:3f:2c:1a:59:b6:ec:ba:2c:af:d2:94:
62:80:1a:8b:25:6d:8d:e4:31:9f:19:fb:be:4d:ed:
ad:0d:e9:59:ad:a4:d7:1f:4b:f6:a7:17:fb:53:f9:
b9:76:dc:1e:b8:68:17:59:f1:d9:33:97:91:3b:92:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3C:49:DE:D5:18:DA:F3:1D:65:F8:65:DC:2E:B4:80:E4:E4:06:A2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kzxJ3tUY2vMdZfhl3C60gOTkBqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.201.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f9:63:97:1e:d7:14:5b:da:0b:79:b5:9f:1a:05:a9:9d:d8:
1a:bf:a4:52:28:72:2a:49:a6:4e:cc:71:5c:ee:da:18:7d:4b:
e3:71:2f:12:28:66:55:3e:24:36:2c:e2:50:63:74:6a:31:ca:
05:bc:38:43:65:59:57:6b:ec:a0:40:0b:a6:64:23:0a:74:56:
37:3f:82:91:92:d5:3d:98:46:4a:45:21:71:fe:39:9a:8f:3b:
4b:a6:c0:39:cc:7b:cc:0b:5a:2b:9d:15:06:eb:d9:b0:68:2c:
1e:19:63:57:f4:a0:1d:61:a1:2e:9e:ae:1d:be:9b:53:2c:ae:
6f:8e:e9:f2:14:e4:b0:ce:d8:9a:70:66:ba:ef:9a:0f:64:99:
38:07:73:db:cb:52:4f:3a:91:4f:ad:37:6f:d9:36:8b:63:b0:
0c:bd:30:a5:9f:d7:4b:88:7c:82:98:60:9e:05:d9:76:2a:5b:
a8:ec:ef:c8:b0:38:ae:09:6b:50:79:2f:71:46:f2:95:9e:48:
75:92:ba:54:0c:6d:e5:96:44:01:92:40:c9:8d:18:88:b8:ad:
bd:bc:d3:17:3d:87:a6:ac:fd:04:5d:70:06:15:82:f4:fb:7c:
fd:8d:48:92:b6:28:e5:9d:64:80:c5:f2:cf:81:a3:9c:f4:84:
ad:6f:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:12 2026 by rpki-client