Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xNWOH-MLCFzexPi8OoiuYZC97Oo.roa
File: xNWOH-MLCFzexPi8OoiuYZC97Oo.roa (raw, json)
Hash identifier: rzq6wSyiVnJoYnrz6WteaVKXMYhe5+diwNCmTBlMvrc=
Subject key identifier: C4:D5:8E:1F:E3:0B:08:5C:DE:C4:F8:BC:3A:88:AE:61:90:BD:EC:EA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A1AC3431F86D924635538AB86C14F6963B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xNWOH-MLCFzexPi8OoiuYZC97Oo.roa
Signing time: Thu 05 Nov 2026 14:54:24 +0000
ROA not before: Thu 05 Nov 2026 14:54:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 163.5.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:34:31:f8:6d:92:46:35:53:8a:b8:6c:14:f6:96:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 5 14:54:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4d58e1fe30b085cdec4f8bc3a88ae6190bdecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:01:d7:ae:e4:60:77:2e:f4:09:5c:74:ca:
59:fa:75:5a:a1:8f:b6:99:5f:e2:00:d7:e7:93:26:
c1:e0:d9:47:02:7f:ff:d1:e8:c3:c9:ce:bf:c5:c7:
3d:6f:6c:b9:be:73:00:2d:7a:38:19:28:0b:a4:69:
81:d4:a1:74:45:4b:65:ec:33:7f:81:4e:57:eb:d5:
5f:1d:7e:c2:20:24:0d:38:2b:b2:ea:69:6b:af:76:
62:4b:32:d5:8a:bc:53:94:be:de:7d:49:4d:1c:71:
97:2e:f7:07:f7:9e:e2:ae:ad:5f:09:3d:14:24:5b:
80:f7:d0:df:3d:dc:4d:2d:9b:4a:6f:56:b2:cc:64:
f5:fd:60:34:50:e7:d4:06:86:6f:db:c9:74:af:80:
26:33:ee:9a:4f:c2:eb:6e:ae:48:30:53:78:6c:59:
a1:7f:78:78:36:6f:e7:c6:4c:a9:f2:63:ca:b2:46:
dc:aa:a4:88:60:ab:11:51:2b:59:7b:81:f0:10:28:
1e:54:11:d0:07:0a:5a:38:e8:42:f5:a1:ad:d2:c3:
7a:44:6a:74:67:93:ab:34:51:5b:7c:f2:75:a0:d6:
ed:71:d6:79:f3:02:6a:cb:be:fd:3d:e9:23:0d:b3:
82:95:ed:32:50:f4:18:44:e7:b4:7d:51:10:25:d9:
d6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:8E:1F:E3:0B:08:5C:DE:C4:F8:BC:3A:88:AE:61:90:BD:EC:EA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xNWOH-MLCFzexPi8OoiuYZC97Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:50:54:a8:27:53:8b:ab:3e:d9:e0:9b:af:30:0f:02:32:00:
fd:6f:34:60:c4:00:df:53:ba:a2:de:ac:40:53:72:16:2d:ea:
c3:25:4c:ae:3f:e3:51:85:32:1f:c2:fd:62:05:38:74:af:81:
da:a3:aa:1c:1c:df:48:59:05:e7:52:66:21:53:66:f2:cd:84:
19:f8:61:2a:c8:69:c0:ea:ac:ff:6b:51:b6:4d:a8:f0:77:2e:
e7:cc:cb:4f:67:fa:c4:43:9e:01:bd:3d:41:d0:ad:c2:e0:03:
3c:4b:22:5f:8a:d6:c8:bf:a8:3c:d5:07:f2:b4:33:ae:54:fb:
1f:c7:c8:a1:c0:e4:32:51:89:be:62:39:17:62:42:fd:dc:ba:
fd:23:60:2f:56:2e:df:cc:59:f1:85:cb:5e:fe:50:ca:22:2f:
26:37:58:cd:20:69:4a:5c:ac:0a:2a:eb:13:f7:e8:76:f1:10:
25:2e:dc:a4:90:0d:4d:da:81:22:bb:57:72:1b:1d:df:61:38:
70:3b:58:ee:ab:7f:3c:96:df:6a:84:fe:f7:0e:07:a9:6c:0d:
66:34:a4:55:30:12:9c:00:3d:41:e5:ef:1b:fa:6e:87:56:1b:
f4:61:ca:34:1b:b2:65:af:27:7c:48:68:92:4b:df:5f:49:42:
dd:04:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:20 2026 by rpki-client