Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/seY14jIlxFAS4bNWwTuX_CjbBpE.roa
File: seY14jIlxFAS4bNWwTuX_CjbBpE.roa (raw, json)
Hash identifier: gq3LdirJ/bxSDktzsLqHMWrVom5OaGIE/LbhBeKOLPE=
Subject key identifier: B1:E6:35:E2:32:25:C4:50:12:E1:B3:56:C1:3B:97:FC:28:DB:06:91
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D25B2AA896BB5216EC883ED696696B9F4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/seY14jIlxFAS4bNWwTuX_CjbBpE.roa
Signing time: Wed 25 Mar 2026 15:52:39 +0000
ROA not before: Wed 25 Mar 2026 15:52:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42960
IP address blocks: 163.5.58.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:b2:aa:89:6b:b5:21:6e:c8:83:ed:69:66:96:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 25 15:52:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e635e23225c45012e1b356c13b97fc28db0691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:e6:45:a0:11:11:bf:da:2e:b1:48:4b:e4:
fc:f5:51:40:f5:82:c4:67:84:04:d5:27:72:24:e0:
8c:f7:95:ad:5a:f5:36:e8:0f:6a:13:dd:19:3f:a4:
c0:df:a6:94:01:f4:05:e2:74:1f:3a:1d:14:ff:6a:
f8:5e:4c:11:30:20:bb:7a:2b:e8:20:58:ca:1e:fa:
39:66:4a:e0:ed:d9:94:8a:c0:24:dd:ae:b3:f7:1a:
ed:5b:42:83:48:51:c8:14:5c:3d:96:76:02:b9:9d:
bc:a0:61:10:5e:b6:96:cf:ad:d4:e9:0f:1c:fc:a1:
d1:9e:31:3a:30:d5:77:55:25:c4:99:6e:51:30:31:
26:95:94:ce:71:77:b0:de:d9:21:94:c3:7e:94:10:
5f:d1:2f:14:7f:78:e5:a8:d2:0b:1a:db:ed:0f:38:
aa:21:4a:46:0a:69:85:fe:ba:80:10:46:45:c3:fa:
9a:b7:f7:b8:0f:8f:9d:00:df:bc:fe:8b:ae:e4:00:
bb:46:b8:78:2c:3a:8e:96:db:a3:28:6e:0d:ae:01:
f0:92:f6:13:72:8f:f8:7b:d1:22:6f:64:f6:da:08:
05:a4:22:fc:52:0d:21:35:17:6e:13:2c:29:1f:02:
06:ac:54:70:05:ea:00:fd:67:8d:d9:3a:56:e7:46:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E6:35:E2:32:25:C4:50:12:E1:B3:56:C1:3B:97:FC:28:DB:06:91
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/seY14jIlxFAS4bNWwTuX_CjbBpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c9:24:ea:ae:30:74:68:3f:5d:45:58:91:3d:e0:02:a3:e3:
9a:bd:93:d7:4e:04:62:28:6d:30:3b:8f:27:be:7e:15:a7:83:
24:3e:a5:80:1f:b6:b0:88:25:c9:66:d9:f6:ee:0e:1c:3f:a6:
13:59:47:4f:38:83:f8:cd:a1:e1:6c:42:b9:d2:eb:d8:32:22:
8e:22:7b:75:c6:f7:28:cf:44:44:3c:fe:ef:d0:9c:de:1b:a8:
4f:1e:e3:10:26:d8:12:a9:fd:8d:a4:c3:9f:66:bf:ac:e8:2d:
15:0a:19:14:e8:2e:85:3e:89:d4:7a:7c:18:28:3d:97:7b:19:
9b:60:46:ba:a2:bc:80:7c:c3:3e:4a:d3:81:06:22:2e:51:41:
0c:c3:bf:8b:b5:11:02:61:1c:15:be:f5:ad:83:cc:25:50:cc:
b2:21:89:2a:32:eb:2c:5c:d3:21:93:d5:6b:87:a4:fb:85:72:
c5:d6:c0:e9:8a:25:36:41:f7:ca:42:49:f1:3e:37:ae:fd:88:
c9:21:dc:ab:a3:06:4b:d0:ba:4f:bf:07:79:f9:de:ad:ee:fb:
06:ff:be:11:fd:72:02:8b:74:76:2a:fc:b6:2f:c1:03:ff:97:
14:20:f3:c7:f9:2b:6d:f7:3e:57:17:71:85:59:a2:35:d7:cf:
5f:42:47:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:31 2026 by rpki-client