Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2335mXik8DfYvDMLxDywWUHBmhE.roa
File: 2335mXik8DfYvDMLxDywWUHBmhE.roa (raw, json)
Hash identifier: bRXHKQFZwEQuMZEhWd9Vb080TyXVMmwQG4Chr7diWHI=
Subject key identifier: DB:7D:F9:99:78:A4:F0:37:D8:BC:33:0B:C4:3C:B0:59:41:C1:9A:11
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C765AE225543460F181F6ECA3DDCAEE82
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2335mXik8DfYvDMLxDywWUHBmhE.roa
Signing time: Thu 19 Feb 2026 14:43:13 +0000
ROA not before: Thu 19 Feb 2026 14:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198883
IP address blocks: 163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:5a:e2:25:54:34:60:f1:81:f6:ec:a3:dd:ca:ee:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 19 14:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db7df99978a4f037d8bc330bc43cb05941c19a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:e2:80:c9:76:93:8b:83:63:17:b5:f7:35:
65:fd:53:ec:b5:86:b1:e4:64:e6:d9:91:2a:5d:9e:
46:e3:f8:49:88:1e:b3:32:8c:8c:ce:09:0c:79:9a:
fe:c2:c8:cd:c8:19:52:47:b8:21:d4:9f:c3:8b:56:
e0:22:87:2a:47:80:c6:4b:ae:e1:5b:2d:72:e1:34:
5c:62:48:ee:0e:0f:64:74:47:4b:74:59:a5:f4:bc:
3d:61:4d:1b:c5:99:63:4c:01:fd:38:21:54:ad:99:
7f:70:5e:30:68:7a:e7:6e:b8:14:b1:ae:00:e8:d7:
e3:9b:de:ba:dd:f7:dc:ae:b3:c6:ac:de:f3:b4:82:
c2:5f:49:c8:03:83:ea:3a:69:f1:e1:a7:99:65:79:
6c:60:e2:62:b8:4c:1f:47:66:e9:24:75:c4:13:2a:
90:b8:77:f5:77:3b:11:f1:7c:30:ed:2d:b4:21:60:
55:0f:ab:37:e1:43:a7:5e:49:cb:e2:ce:bc:ad:9c:
44:f8:d0:bd:7a:d6:22:fe:0a:41:4a:f5:c1:b2:08:
ef:e6:78:bb:9b:d7:b6:6d:e5:7e:d7:ea:5b:5d:88:
a6:69:3c:bb:cd:d8:02:56:95:06:a5:85:32:a9:20:
ae:f1:a8:52:fd:4b:01:12:f2:80:18:7a:35:00:c6:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:F9:99:78:A4:F0:37:D8:BC:33:0B:C4:3C:B0:59:41:C1:9A:11
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2335mXik8DfYvDMLxDywWUHBmhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.193.0/24
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d8:4e:c0:4e:bd:55:17:5f:b6:84:68:65:02:22:2f:3d:0a:
5d:c9:e7:2e:52:e2:97:63:6e:89:0a:7b:41:1d:bb:0c:01:bd:
8d:12:9a:62:95:7c:15:34:c9:22:55:49:c1:90:91:4c:88:4d:
18:81:2d:93:45:3b:00:74:cd:a0:f0:9c:87:ec:36:9f:28:77:
ac:cf:87:3b:0b:42:c0:2a:86:82:33:54:a4:d5:81:da:99:51:
b3:8a:02:82:d3:5c:1e:a5:7a:ae:6b:36:6c:c3:bb:8c:33:0b:
43:e9:bb:9d:14:b8:64:70:c4:18:f2:cf:83:b3:93:b3:6c:90:
47:79:8c:e0:65:db:d0:96:49:bb:d4:31:a8:91:3a:69:33:67:
a0:67:9a:e1:69:09:17:2a:4f:44:f0:4c:ad:b4:2b:97:f2:a6:
21:0d:d4:b1:b5:1b:2d:fb:a5:74:f4:fd:e6:a6:b7:91:e8:26:
3b:12:86:1e:b9:bf:c7:24:e1:8f:78:9b:d7:5b:3c:56:cb:c0:
bd:50:ef:b8:5d:c2:10:c3:47:4c:06:20:db:bb:65:c0:b2:6f:
0a:54:27:87:8c:54:20:05:11:5c:a2:e2:53:68:78:40:69:b6:
af:7a:66:bc:a6:19:2e:51:32:07:4e:16:22:ff:90:d8:23:91:
b9:3f:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:12:01 2026 by rpki-client