Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mIDkm2SZn2n-WEP9uHMXo0zo9K0.roa
File: mIDkm2SZn2n-WEP9uHMXo0zo9K0.roa (raw, json)
Hash identifier: CkQsjQsdufysYihjtbLLLJLTcE4LRAKMEl2SOum+QL4=
Subject key identifier: 98:80:E4:9B:64:99:9F:69:FE:58:43:FD:B8:73:17:A3:4C:E8:F4:AD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D25B47FD5D975233C59E23BD6229A0EDB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mIDkm2SZn2n-WEP9uHMXo0zo9K0.roa
Signing time: Wed 25 Mar 2026 15:54:39 +0000
ROA not before: Wed 25 Mar 2026 15:54:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 163.5.109.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b4:7f:d5:d9:75:23:3c:59:e2:3b:d6:22:9a:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 25 15:54:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9880e49b64999f69fe5843fdb87317a34ce8f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:46:ad:bc:0b:50:26:f4:6f:dd:67:b8:23:
38:a4:0a:fb:f9:91:8c:52:83:9c:cd:2d:1f:b5:fd:
5e:fe:10:d5:a1:57:16:c5:5d:cf:9a:a4:5a:bf:f9:
09:d4:60:05:4c:31:41:01:7b:14:ab:70:58:44:4d:
0b:c5:c1:b4:1b:b2:a6:46:a1:1a:69:ff:fd:76:8f:
93:23:9d:03:ca:e0:56:5b:91:67:74:9c:8e:9d:86:
3f:39:9b:e0:2e:56:54:f0:c1:7c:04:9d:85:ab:1d:
b1:59:97:60:20:b6:be:c7:78:3e:29:af:92:d8:7d:
53:bb:1b:49:90:34:66:cb:0f:13:95:87:02:07:b8:
5f:84:bc:25:40:cf:61:b7:7c:84:a9:ec:bc:48:90:
62:7b:4f:9e:9f:35:63:46:63:23:20:da:5a:50:fc:
c7:eb:e8:df:e2:22:26:ae:94:53:77:ad:b3:e6:26:
d9:e2:d9:e7:b1:eb:6d:81:59:66:e2:d0:52:fa:d8:
1c:7b:14:24:bb:f0:c9:48:cd:4c:78:c2:02:a9:b2:
96:4c:83:d6:96:ca:80:29:0b:69:d8:bf:27:c8:32:
13:4a:71:82:a4:81:6b:74:fd:27:bd:5d:09:fb:85:
f8:35:89:7a:47:0c:09:65:1b:ed:90:ec:90:b0:7e:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:80:E4:9B:64:99:9F:69:FE:58:43:FD:B8:73:17:A3:4C:E8:F4:AD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mIDkm2SZn2n-WEP9uHMXo0zo9K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.109.0/24
163.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4d:1b:0e:9d:49:50:55:ef:b6:6d:d1:6c:c5:65:81:17:48:
7a:27:d6:b0:10:1d:5b:28:a6:fc:fd:57:20:ab:7a:57:56:7a:
e8:55:66:f5:ff:0e:c4:d2:6c:c7:b5:13:a4:82:dc:26:e8:fa:
7b:80:82:4c:83:b3:d1:3a:96:93:27:be:3e:84:ef:e1:69:74:
e7:7d:9a:b2:fa:fa:79:8a:3e:24:64:4e:69:fc:1e:b1:2f:94:
84:5f:ba:4b:7b:56:9c:35:eb:1c:be:e4:df:fa:ea:50:45:f9:
96:2d:ff:2c:d4:11:49:7b:bd:a7:f5:02:4f:f4:bf:76:54:65:
33:40:e9:1f:b6:83:0c:e6:5f:02:03:c5:5d:ca:5b:25:53:aa:
a5:95:59:b8:67:31:ff:f7:39:99:8c:42:38:37:c3:21:d2:03:
82:68:62:49:e9:70:57:4c:0f:4d:04:98:1d:1b:90:61:00:d1:
ca:56:41:72:d7:e9:26:24:87:cc:94:fb:8b:b6:68:cd:61:1e:
24:67:82:67:bc:49:0a:cd:94:45:8a:94:bc:8f:7f:c8:a6:37:
4b:b8:6a:9f:ee:8c:e0:b7:1e:28:20:c1:24:1e:9c:f5:68:51:
2e:bb:84:25:b7:5e:16:ce:c6:12:35:68:a1:2f:9b:5a:70:f2:
02:b1:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:59:16 2026 by rpki-client