Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7xjcKdDzfB8dBe2lGnjWyJkYmcs.roa
File: 7xjcKdDzfB8dBe2lGnjWyJkYmcs.roa (raw, json)
Hash identifier: AXUTfbuopTV7GiNyemfRXxPE2FBZKVBSwqSM8EtpOnc=
Subject key identifier: EF:18:DC:29:D0:F3:7C:1F:1D:05:ED:A5:1A:78:D6:C8:99:18:99:CB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A01EB0A50D996B72BFE594F046AEA8CA44
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7xjcKdDzfB8dBe2lGnjWyJkYmcs.roa
Signing time: Thu 20 Aug 2026 10:21:28 +0000
ROA not before: Thu 20 Aug 2026 10:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219010
IP address blocks: 163.5.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:b0:a5:0d:99:6b:72:bf:e5:94:f0:46:ae:a8:ca:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 20 10:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef18dc29d0f37c1f1d05eda51a78d6c8991899cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:d5:9b:10:b3:79:91:8f:e9:b6:1b:fe:a4:
88:eb:63:e2:67:72:76:e2:53:53:f6:77:1d:71:e8:
55:f6:6a:d6:3b:c9:43:8c:c0:a0:5a:99:75:cc:dc:
80:32:e1:d6:b2:6f:41:48:86:02:66:9d:ff:b3:b6:
a6:8f:a8:5d:67:f2:63:78:ec:d8:91:7c:10:48:af:
53:de:a9:5b:d5:fa:06:9b:d1:db:ec:73:79:a1:6f:
77:a8:85:ec:08:f4:e8:4e:30:0e:08:34:05:77:76:
c3:b7:1e:18:4b:a1:1a:ef:21:7e:e3:ff:06:7e:89:
44:a9:90:48:30:0a:a5:9e:4b:a3:6b:d5:6d:47:a3:
cc:81:22:5c:f6:26:78:f4:8c:26:a5:52:ad:85:a2:
e8:34:33:e3:1e:ba:9b:d8:e6:f9:44:17:67:75:3e:
82:74:80:ee:08:61:63:45:d2:eb:55:17:08:cf:b7:
a1:e4:fb:20:4c:39:ad:10:e4:76:9d:0b:1d:30:fa:
b0:34:2f:99:61:54:29:11:2e:31:b8:8f:04:c4:4b:
f7:dd:b7:25:2e:11:f7:d3:2e:95:90:9e:2d:96:fb:
a0:9f:42:a5:bd:67:68:a6:27:02:59:de:6e:02:3a:
f7:f7:05:32:a8:7f:4c:bf:c8:c7:84:b3:cd:e3:a6:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:DC:29:D0:F3:7C:1F:1D:05:ED:A5:1A:78:D6:C8:99:18:99:CB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7xjcKdDzfB8dBe2lGnjWyJkYmcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.119.0/24
Signature Algorithm: sha256WithRSAEncryption
61:25:d2:94:32:ae:25:ce:4f:21:8b:62:06:50:7f:5d:20:f0:
ad:ac:1b:02:2e:cd:01:8a:fc:42:cf:91:ce:fc:bf:fd:27:c6:
cd:b6:1b:0d:36:c2:9f:a2:96:b5:12:41:8b:4f:58:0e:77:93:
b5:a2:c0:66:82:24:af:07:98:d6:04:8a:de:1e:80:36:b6:3d:
e4:6f:db:38:57:56:c1:92:0b:f9:7a:59:fe:73:83:64:90:fe:
94:51:21:2c:d2:68:1d:e1:82:9b:ad:57:7a:49:73:89:0d:29:
59:5e:44:c1:25:db:0d:a3:30:8c:d9:22:10:ec:3e:61:08:ab:
cb:d6:89:89:f0:d7:0d:ae:e5:81:ad:14:99:f2:17:45:a9:9d:
37:b0:51:20:de:44:fa:e8:1a:3c:15:52:3c:61:f2:65:d5:67:
93:3c:34:dd:a6:da:3c:d7:86:a2:89:65:32:86:75:fd:94:01:
03:4f:08:cf:d2:d6:93:92:75:da:f8:e5:46:7b:2c:49:e6:4c:
fb:8b:41:d3:71:2f:ea:be:0e:99:d5:0d:61:33:46:05:73:32:
7a:f6:82:73:1a:74:14:00:00:1a:b5:1c:ba:d3:c3:67:28:ae:
4a:97:63:7d:64:d2:15:4c:74:fa:d3:07:c1:14:c2:78:c5:f3:
c9:fa:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:51 2026 by rpki-client