Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1HUGfj25NbtZjATBAO3tPxxIKgc.roa
File: 1HUGfj25NbtZjATBAO3tPxxIKgc.roa (raw, json)
Hash identifier: s5jSS+nPzE6kQHkQ3I5RE49ntSszih45guU2tAVam3Y=
Subject key identifier: D4:75:06:7E:3D:B9:35:BB:59:8C:04:C1:00:ED:ED:3F:1C:48:2A:07
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C1EACB2CB610440CAD1AE232E7FEC7BD1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1HUGfj25NbtZjATBAO3tPxxIKgc.roa
Signing time: Mon 02 Feb 2026 14:06:00 +0000
ROA not before: Mon 02 Feb 2026 14:06:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154408
IP address blocks: 163.5.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 15:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:ac:b2:cb:61:04:40:ca:d1:ae:23:2e:7f:ec:7b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 2 14:06:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d475067e3db935bb598c04c100eded3f1c482a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:a0:7a:46:2e:87:17:00:5a:b7:2c:72:66:
da:e2:3c:89:2c:2a:d4:f4:26:a0:74:33:eb:44:27:
46:08:dd:68:ec:0d:37:0a:93:c6:f3:58:c6:eb:f6:
ff:a3:c9:65:c9:1c:83:5a:a4:f9:44:b0:78:14:39:
fd:b4:c2:b0:e5:15:6e:75:01:84:57:da:f6:87:f8:
b0:81:50:bf:18:2b:b1:dd:6d:fe:d4:83:28:a2:f0:
ca:5b:ca:2d:8f:d1:a6:90:3c:de:d1:a7:16:64:6b:
dd:43:3c:e3:a6:67:ad:ab:5c:1b:31:6c:5f:74:2f:
38:46:e4:03:3f:18:4c:9d:23:b6:a5:28:c4:fe:36:
92:02:e5:ec:db:49:48:19:44:e5:a1:7d:aa:d7:06:
95:a1:eb:40:33:8c:4e:c7:9c:80:15:5e:f4:66:51:
29:2b:a3:28:3e:31:05:17:85:4c:20:ca:ca:a7:35:
1d:fe:5f:b1:14:10:ca:79:2d:4f:a5:ec:7a:ba:48:
9f:21:a5:56:13:ab:19:60:d5:38:2e:7e:79:c7:00:
9d:c4:eb:0a:12:ec:5b:1b:5a:91:07:d9:78:4b:15:
4a:a4:f0:64:32:8c:55:a5:83:df:6c:b2:8e:0f:a7:
d8:f9:47:a2:ac:b8:74:86:0e:f8:87:f1:04:8a:53:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:75:06:7E:3D:B9:35:BB:59:8C:04:C1:00:ED:ED:3F:1C:48:2A:07
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1HUGfj25NbtZjATBAO3tPxxIKgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e0:d2:d0:98:69:18:76:13:73:e9:e6:c8:55:d3:da:f5:7a:
47:61:35:bc:0a:07:e1:96:75:1f:67:96:c8:97:08:bf:00:fa:
9d:5d:ee:2a:11:25:94:56:6f:a8:c5:c6:3d:0b:53:5f:0a:88:
35:4b:3d:7a:b8:b9:95:7b:8d:ef:29:09:85:7d:97:86:16:c2:
98:a9:9d:2d:2b:ea:1b:9e:a4:43:c8:81:82:98:b8:19:7d:dc:
16:13:46:a7:ec:0d:7c:b0:3f:53:2f:1f:67:c1:e7:dc:e9:ba:
77:7f:76:2d:73:26:ef:ee:01:60:ee:45:0d:2e:21:48:09:73:
f6:67:a8:74:ce:d0:0a:06:e2:bd:ed:69:f8:ed:ad:ba:2c:b2:
11:65:e3:b0:f0:48:ed:be:da:88:dd:8e:fc:d7:55:f6:63:96:
b9:65:ae:42:3f:74:c5:30:af:16:1c:a2:75:a6:2f:72:f7:c3:
59:c8:a2:e9:d7:07:ea:e2:f5:1c:4a:e7:52:29:e7:d6:42:64:
71:55:a9:a6:77:08:e9:72:0b:67:74:2d:0a:5a:51:52:25:36:
06:68:8a:d7:1e:ad:42:6a:1c:0f:ac:21:05:d8:1f:06:6b:7f:
d2:43:b3:63:2b:f4:0b:1c:5e:a4:29:1e:78:e3:f3:e0:a0:dd:
a9:7b:de:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 01:01:00 2026 by rpki-client