Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8hMzmQWUV3gSpM5SamQCYPp5u8E.roa
File: 8hMzmQWUV3gSpM5SamQCYPp5u8E.roa (raw, json)
Hash identifier: aThURFcsrFgNH1fgE1MHE20HzhU37vDrASpngJaHgH4=
Subject key identifier: F2:13:33:99:05:94:57:78:12:A4:CE:52:6A:64:02:60:FA:79:BB:C1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E8835247883EFB93B85F8434EF4BB524E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8hMzmQWUV3gSpM5SamQCYPp5u8E.roa
Signing time: Tue 02 Jun 2026 12:00:44 +0000
ROA not before: Tue 02 Jun 2026 12:00:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132359
IP address blocks: 163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:35:24:78:83:ef:b9:3b:85:f8:43:4e:f4:bb:52:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 2 12:00:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f21333990594577812a4ce526a640260fa79bbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:ef:36:dd:e5:c6:33:f2:24:58:15:db:2e:
cd:73:45:c2:6c:ff:3b:86:65:59:1e:f8:2d:f6:7b:
ab:82:45:44:0c:91:21:66:25:d9:73:f4:b6:44:6c:
40:b0:fc:7a:04:1b:68:ae:b7:1c:8f:ac:ca:35:2a:
cd:d7:a8:ed:cc:07:da:bb:4f:ed:cf:fc:51:82:d2:
63:d7:97:0f:6e:7a:f4:37:f7:a6:30:e3:8e:f7:81:
64:fb:cc:59:47:e6:94:be:38:79:5a:29:69:36:51:
02:bb:fd:66:db:e6:d5:65:b1:88:68:2b:32:5f:0f:
7d:cb:00:aa:b7:d6:bc:98:d7:e9:37:41:9f:dc:f2:
3e:59:44:a1:58:b5:22:6c:05:b6:1d:4a:27:7d:ca:
e2:8c:57:e3:62:c1:f2:30:25:3e:dc:70:23:e9:fb:
d2:83:55:b7:19:87:89:04:0d:10:d2:b2:f0:a5:59:
3f:db:48:4c:c3:e6:f8:97:32:1c:51:74:4f:77:99:
4f:df:3f:f2:0b:eb:12:41:21:31:bc:e9:bc:2b:68:
35:37:60:87:10:3f:c0:bd:6e:da:84:c8:7f:05:22:
bf:2d:0f:a7:66:6f:03:14:16:cd:1b:aa:78:89:96:
0d:e5:dc:95:f9:a4:85:87:c5:bd:38:3e:78:f8:f0:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:33:99:05:94:57:78:12:A4:CE:52:6A:64:02:60:FA:79:BB:C1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8hMzmQWUV3gSpM5SamQCYPp5u8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:eb:fb:30:e7:e9:93:3c:fd:cc:36:dc:53:1e:7a:21:e3:6a:
46:cc:fa:16:90:99:95:21:bd:df:62:f0:a6:50:96:1b:8c:da:
a8:cc:59:93:8e:f6:97:cf:96:12:02:c4:e2:6c:62:cd:52:fb:
81:95:96:84:1b:64:d7:6b:ce:6d:b7:b4:e6:10:45:1e:18:64:
00:ad:e6:ec:7c:a2:5e:35:35:be:3b:47:f0:49:e6:49:3c:e7:
bd:c7:fb:0f:9b:f4:2f:1d:6e:36:1e:15:6a:8e:fa:76:29:d9:
31:7a:2a:71:11:0e:0d:24:0c:e7:86:33:0b:e6:d6:a3:05:48:
3b:49:28:91:30:1c:ae:3a:8b:f2:b4:93:65:09:cb:e5:42:30:
a0:bf:9e:7e:9f:60:fb:57:6c:85:29:ad:8e:ee:0b:7a:99:a5:
f4:d7:e0:62:0b:e7:62:97:ab:c3:54:8f:36:6b:d8:a8:4e:8f:
1c:e8:09:c0:b6:19:b8:2e:e7:fc:af:a2:f7:32:f4:1a:e5:b1:
57:7f:66:d0:83:7a:1d:1d:b4:a2:a0:a6:80:d4:e6:a8:d9:a2:
5b:3e:11:bc:5e:9b:1f:d8:c3:79:48:fd:26:d9:96:03:08:9d:
06:fb:0a:f9:67:5e:80:10:eb:fb:86:f2:d5:8d:81:07:f9:53:
5f:49:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:45:35 2026 by rpki-client