Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tTyhpnjCzqwWTMpRnVkpdvi_gzk.roa
File: tTyhpnjCzqwWTMpRnVkpdvi_gzk.roa (raw, json)
Hash identifier: DCNCAVPBCDK4HxhNLVjW39GqdgVsotnbQQzM+sva8js=
Subject key identifier: B5:3C:A1:A6:78:C2:CE:AC:16:4C:CA:51:9D:59:29:76:F8:BF:83:39
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CD27F69EDA03B29D245660F2D2AD59BB2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tTyhpnjCzqwWTMpRnVkpdvi_gzk.roa
Signing time: Mon 09 Mar 2026 12:08:11 +0000
ROA not before: Mon 09 Mar 2026 12:08:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198883
IP address blocks: 163.5.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:7f:69:ed:a0:3b:29:d2:45:66:0f:2d:2a:d5:9b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 9 12:08:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b53ca1a678c2ceac164cca519d592976f8bf8339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:04:5f:32:48:6a:35:da:50:69:8e:ff:8d:
f0:07:9b:9e:63:b1:c6:b8:09:11:2a:6a:eb:17:87:
6c:22:fe:1d:af:38:60:81:c6:96:af:2d:ac:72:17:
e7:0c:82:ee:71:93:47:aa:82:51:3b:b0:38:81:fd:
e1:97:2f:bb:89:73:44:6c:af:e1:ea:b1:d4:9d:84:
0a:43:72:72:4f:00:a7:84:a0:65:b7:fe:b0:9a:10:
7b:3b:82:81:43:2c:27:a0:c8:10:33:3d:20:26:5d:
1c:7f:0b:b5:f2:0c:02:5c:25:b4:84:37:a0:b5:ca:
6a:2c:36:c0:80:e4:87:44:a9:1d:76:b4:d7:88:93:
39:96:f7:62:a4:f2:7a:03:0a:95:5c:87:55:34:01:
31:02:97:78:cd:60:31:64:61:80:0c:50:38:e6:4a:
89:3c:13:20:a8:d4:af:04:b6:27:86:0c:79:38:ab:
66:31:c0:9a:f1:7d:ca:51:b6:33:7c:f7:20:0b:a2:
64:dc:e1:54:5b:80:c8:20:ae:fa:15:45:64:24:57:
e1:ef:00:af:df:85:44:eb:bf:af:0e:91:95:de:94:
20:85:7b:ce:65:b2:31:99:f5:54:db:09:92:4d:c0:
da:81:b3:1f:23:11:06:18:13:53:df:8a:d3:e7:35:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3C:A1:A6:78:C2:CE:AC:16:4C:CA:51:9D:59:29:76:F8:BF:83:39
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tTyhpnjCzqwWTMpRnVkpdvi_gzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f9:95:03:94:66:e8:b8:c8:2d:0f:f6:5b:fc:2d:11:d4:80:
1f:19:94:d5:46:75:85:d1:be:f9:86:09:2c:97:50:ff:a9:67:
1a:da:a5:35:e1:e3:5f:00:eb:d8:88:68:60:3d:ef:82:c2:1f:
bc:36:ea:6d:6c:05:c0:0e:53:0a:af:71:28:50:2e:5c:84:fc:
1e:69:de:39:f8:bc:cf:2d:63:73:91:df:26:0c:6e:a7:d9:96:
05:14:b2:6b:84:d0:d0:c4:45:9b:ad:fa:97:11:fb:07:c5:0f:
e6:b5:3a:b8:54:19:4a:69:f1:6a:b6:fc:fc:8d:7a:9e:d9:a8:
e0:c3:67:ac:2e:ca:9c:8a:35:d1:59:a5:b6:0e:48:0c:e2:05:
03:4d:9d:20:46:cd:05:f1:f1:dd:ca:e8:08:4e:40:cb:9e:81:
0d:80:ff:90:7a:87:84:ba:af:71:f2:04:b8:2d:f6:cb:69:86:
e4:e0:d4:c1:76:38:98:03:0d:b2:b9:83:3f:05:fb:e9:9d:66:
27:42:f1:74:09:4d:ae:aa:ff:dd:91:11:95:a6:89:be:8a:39:
e4:f5:cc:97:9d:2d:fd:6d:20:a2:4a:60:43:18:fb:e8:8f:2d:
cd:a3:a3:84:c1:aa:dc:f1:41:c1:bb:28:35:c2:16:f2:9f:d1:
33:f7:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:22 2026 by rpki-client