Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uEFysp47GExX1Irbg1GUbjPITSU.roa
File: uEFysp47GExX1Irbg1GUbjPITSU.roa (raw, json)
Hash identifier: Et1GdIM1NU8VfhDLFYggt4snK1/ZJphzWnBzjsFdQlw=
Subject key identifier: B8:41:72:B2:9E:3B:18:4C:57:D4:8A:DB:83:51:94:6E:33:C8:4D:25
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A158DCE69DEC0BC8EACE80A66934BDEA95
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uEFysp47GExX1Irbg1GUbjPITSU.roa
Signing time: Tue 20 Oct 2026 10:30:34 +0000
ROA not before: Tue 20 Oct 2026 10:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 163.5.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:dc:e6:9d:ec:0b:c8:ea:ce:80:a6:69:34:bd:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 20 10:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84172b29e3b184c57d48adb8351946e33c84d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:af:62:0f:9a:74:a9:d8:9e:f8:11:d7:9f:
f4:2f:10:35:65:79:1d:7d:33:33:44:c1:6f:ac:e2:
15:30:52:1d:aa:03:db:83:0a:28:d8:66:d4:29:10:
c5:64:6a:9b:bd:98:ba:5c:5f:45:ec:9a:ff:27:b7:
72:0a:fa:2b:f9:95:f0:b4:b4:29:f8:cd:53:3a:c4:
10:ab:0b:df:a2:b5:04:a8:6f:64:02:83:8d:27:89:
11:df:37:48:f2:9c:15:41:b8:de:33:be:29:45:b8:
ff:97:f1:53:62:81:bb:e7:60:84:5a:ce:01:88:35:
7f:b6:0c:ce:b7:ec:b8:62:46:46:05:a5:98:2d:c2:
13:c7:16:f8:d8:8e:81:fd:df:65:32:58:ff:f0:ae:
81:d9:93:cb:06:0e:9f:cd:aa:28:f6:af:44:f9:13:
b2:c2:28:2e:c0:ab:ac:21:91:2e:ad:69:e9:4d:0a:
55:d5:4e:80:1c:e0:32:d3:67:5d:4a:fd:ab:65:d5:
45:b7:8e:db:77:3d:3a:ba:e9:97:df:60:e2:ae:a0:
17:ca:8d:3c:5f:16:2a:bb:99:fd:db:d6:69:02:a1:
85:80:76:89:17:46:fc:38:6b:32:e9:22:0a:eb:44:
84:ee:73:45:ff:88:3b:2c:a8:04:4e:47:14:0a:1b:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:41:72:B2:9E:3B:18:4C:57:D4:8A:DB:83:51:94:6E:33:C8:4D:25
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uEFysp47GExX1Irbg1GUbjPITSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d3:17:0c:da:e4:6e:6c:11:93:ae:d9:82:51:69:db:31:89:
7d:40:20:37:cd:d3:a1:06:c8:ab:65:1e:c6:cd:ef:78:5e:a3:
3a:2f:e6:2b:64:ce:9e:27:43:ad:79:3b:e4:eb:7f:64:0a:07:
e5:36:c3:da:39:da:61:44:68:ca:73:14:98:53:2c:18:a1:dd:
b4:81:19:08:72:71:a7:30:60:84:04:f6:f9:fc:37:b9:1f:f6:
4c:2a:f7:f7:a5:3d:10:4a:f8:aa:e3:20:c2:a6:25:eb:1a:11:
a9:5b:ac:4b:20:60:ea:36:77:93:80:6b:8d:0d:18:65:bd:fb:
0f:6c:ea:80:06:0b:6e:aa:7d:37:62:ed:1f:8c:c9:21:19:bd:
c8:41:17:7f:64:14:fa:00:57:ee:90:a1:52:79:68:5c:28:a9:
95:eb:45:8f:99:aa:ed:bb:de:87:87:41:97:8f:5f:5d:8b:c0:
ed:39:7e:f1:90:7b:30:48:c5:a3:e8:b5:13:3f:23:15:cc:05:
10:94:21:3a:af:c8:07:3a:90:4f:c0:04:06:d6:67:77:9b:16:
3d:8b:67:7d:b1:a5:a0:72:ac:ce:de:4d:2c:61:45:db:83:74:
7a:05:b4:7f:cf:e5:9e:67:58:4b:d1:02:d3:d7:d4:62:a8:0b:
78:2a:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:56 2026 by rpki-client