Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tIDgAZJlKxMCNccvtaF2b4dNJx4.roa
File: tIDgAZJlKxMCNccvtaF2b4dNJx4.roa (raw, json)
Hash identifier: 8NLZYkiXbDl4vFK7ia/ZP5w/yjazQyN2/1MzT7ouaws=
Subject key identifier: B4:80:E0:01:92:65:2B:13:02:35:C7:2F:B5:A1:76:6F:87:4D:27:1E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CD28054254EB122CDE5D2CD85FC21A593
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tIDgAZJlKxMCNccvtaF2b4dNJx4.roa
Signing time: Mon 09 Mar 2026 12:09:11 +0000
ROA not before: Mon 09 Mar 2026 12:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 163.5.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:80:54:25:4e:b1:22:cd:e5:d2:cd:85:fc:21:a5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 9 12:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b480e00192652b130235c72fb5a1766f874d271e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:7b:5e:ec:d3:49:9f:e7:a9:83:69:16:b6:
17:96:d9:22:8d:38:26:3e:72:bc:8a:ea:ee:b9:53:
0d:4b:b1:b5:99:31:ac:16:67:69:0b:0d:bf:e7:8f:
df:68:50:6e:3d:68:8d:13:67:fb:32:0d:33:d0:b6:
3b:dc:d0:ca:0f:01:0e:ce:6a:aa:94:78:0c:01:c9:
34:92:39:8a:3f:6c:32:5e:1f:2d:b5:56:f9:28:e8:
cd:6e:7e:fb:13:4d:87:fb:26:c5:65:6f:87:ce:45:
c6:c0:d4:55:7e:e9:85:e9:64:0b:3e:f3:d2:b4:55:
4d:36:58:8a:48:45:56:b8:1f:39:7f:8d:eb:83:a9:
12:09:eb:b4:02:49:a5:c0:ad:87:56:b4:c8:dd:5b:
e4:dc:f3:21:86:1b:33:cd:84:f7:09:be:1c:fd:36:
33:5f:e4:25:76:98:d4:89:4f:40:e4:fa:6f:74:83:
4b:c6:fe:e6:3d:46:e3:36:0c:d5:3b:c4:96:af:c5:
12:5b:42:b6:c5:39:54:9c:81:59:10:5b:61:ac:99:
55:2b:33:b6:e5:93:c2:40:6e:3c:62:2a:b0:e4:89:
dd:97:bc:66:db:bd:e4:8f:ff:83:b3:c4:0f:d1:f4:
cb:b7:1d:06:ee:0e:b3:2f:80:11:7a:22:3d:c5:c9:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:E0:01:92:65:2B:13:02:35:C7:2F:B5:A1:76:6F:87:4D:27:1E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tIDgAZJlKxMCNccvtaF2b4dNJx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:36:39:d1:8d:d1:ae:1d:1e:71:44:2e:53:06:fe:e1:78:65:
b9:a1:99:55:c0:bf:ae:61:c5:dc:88:4c:ae:8d:90:2c:d2:05:
2c:19:80:fc:29:c0:2c:64:be:dc:01:f9:b2:e6:97:d5:3b:44:
b5:5a:ff:95:49:5e:f5:e0:6b:9c:ec:62:4c:ac:e2:a3:d0:21:
50:90:40:dd:2f:04:ac:43:62:b1:cf:49:c7:83:22:71:19:39:
92:fa:36:6f:e0:7a:0d:0f:4a:35:39:2e:6b:2b:a7:d4:22:8d:
67:a8:5b:90:3d:e1:d0:87:b6:46:36:dd:11:06:0f:c0:63:0e:
70:34:04:39:af:50:f6:3a:a0:c6:1e:a2:15:99:0c:38:22:ea:
76:91:2b:57:8f:83:32:3b:1d:44:4f:f9:0b:2c:64:0c:90:40:
00:94:a3:c0:79:6d:04:69:ca:0e:7c:50:a9:81:e8:46:51:fd:
ce:09:1e:b5:4b:85:b7:16:56:0a:17:b3:76:4d:12:2a:46:ca:
bb:e3:5b:67:c0:f2:10:e5:49:eb:55:c5:5a:69:6b:27:37:09:
aa:c6:6c:a7:bb:6f:27:e7:e0:ad:d9:91:15:9e:20:d6:21:9a:
1c:9d:b3:4a:b1:8a:81:ae:ea:6a:93:86:e1:3a:f6:3f:36:37:
2f:a5:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:45:50 2026 by rpki-client