Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1HltyC0WypaJs9r1HZx69VzAG1E.roa
File: 1HltyC0WypaJs9r1HZx69VzAG1E.roa (raw, json)
Hash identifier: 9ET8a5BLzA4K0JBor794eULXwUxHwVUcVvIeUfgV9Sc=
Subject key identifier: D4:79:6D:C8:2D:16:CA:96:89:B3:DA:F5:1D:9C:7A:F5:5C:C0:1B:51
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019EDA171DE01FFC5C138BEEEB4577D20DA3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1HltyC0WypaJs9r1HZx69VzAG1E.roa
Signing time: Thu 18 Jun 2026 09:36:48 +0000
ROA not before: Thu 18 Jun 2026 09:36:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212306
IP address blocks: 163.5.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:17:1d:e0:1f:fc:5c:13:8b:ee:eb:45:77:d2:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 18 09:36:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4796dc82d16ca9689b3daf51d9c7af55cc01b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6a:fb:25:ec:59:50:99:92:27:7f:56:1c:ca:
ec:0a:d6:b1:b8:08:24:0d:a8:0a:f5:c9:6b:23:0d:
8b:9f:3f:d6:34:d3:38:24:0a:78:c9:61:47:b3:10:
90:eb:6c:1d:8d:34:51:e2:9c:76:53:b3:38:60:e2:
6a:31:6a:07:cc:08:8c:c1:f8:b6:c3:3b:b2:a2:9f:
ac:82:ac:11:ee:e6:35:89:a4:47:01:3d:cc:12:7e:
3f:24:7b:e0:8c:32:7c:65:da:d5:5a:b0:0c:67:b9:
26:54:cf:2b:f9:c7:69:47:4a:97:ac:6a:af:2a:c9:
51:61:c0:ba:2b:3f:87:45:1e:5a:9d:49:f3:74:d4:
81:64:f0:df:3a:06:de:3c:c1:36:10:c5:9c:2d:75:
16:30:4d:9f:24:57:94:9b:a2:d0:11:e7:8b:e4:a4:
67:4b:80:7f:0d:b2:e8:b3:be:25:f0:bf:9c:fb:cf:
df:4b:13:17:7d:63:f6:e4:70:b2:c5:34:37:86:13:
9e:d4:35:e1:21:c7:54:15:aa:cc:55:ef:0b:00:57:
d6:74:c8:41:ce:dd:41:08:81:78:e4:ca:71:45:7d:
28:ec:ad:d1:7b:66:3c:f1:05:ed:87:58:ba:b3:93:
7e:34:db:0b:37:7c:50:e1:92:1c:b9:43:29:32:f0:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:6D:C8:2D:16:CA:96:89:B3:DA:F5:1D:9C:7A:F5:5C:C0:1B:51
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1HltyC0WypaJs9r1HZx69VzAG1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f6:75:f3:9c:43:2c:fe:2b:b9:63:51:69:4a:42:f5:56:14:
1e:be:26:32:32:f4:e3:7e:94:02:05:ee:0e:8d:5f:90:aa:60:
42:24:8d:2e:7c:92:8a:15:b7:12:74:9e:03:56:59:8d:0a:c4:
5c:b6:34:74:a9:ea:83:94:b1:05:03:da:0c:c4:f4:c5:61:79:
7c:cc:04:af:99:c4:f2:be:9b:27:56:0a:fb:ff:11:5e:1f:5f:
97:1a:73:7b:cd:f0:08:02:0e:1e:ef:c7:20:26:fa:ef:dd:ec:
c9:22:4d:b5:6a:73:e6:32:c8:75:7e:fe:1b:e4:a5:fe:0c:18:
fe:e9:bc:04:64:01:58:54:34:c5:97:8b:1a:78:c8:78:9d:6f:
b6:b9:4b:36:b4:0d:29:ab:be:3f:4b:5e:7d:a0:e7:c1:3c:24:
9b:20:88:1e:90:01:01:aa:b4:97:c0:1d:dc:7a:a6:2e:35:53:
14:bd:72:c6:a5:99:6f:45:4d:dc:f5:86:54:e6:e3:da:21:20:
73:00:a9:af:19:bc:8f:e2:ba:78:c8:f7:ad:42:06:26:7d:0a:
9f:5c:35:7e:9f:67:52:8c:ea:46:ff:35:28:0c:bd:11:35:87:
5d:f0:78:d5:05:08:7f:f1:44:d5:8f:4d:98:de:64:83:f7:67:
2b:80:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client