Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CFTHiZihHy_17uWYqrZCSk9A7lk.roa
File: CFTHiZihHy_17uWYqrZCSk9A7lk.roa (raw, json)
Hash identifier: vARu7r/0FwsXE+fO8+8wQKBsj5mrknSrH+zeAZkoiP0=
Subject key identifier: 08:54:C7:89:98:A1:1F:2F:F5:EE:E5:98:AA:B6:42:4A:4F:40:EE:59
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FF4D95576B97AE24CDF899E1E359120F7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CFTHiZihHy_17uWYqrZCSk9A7lk.roa
Signing time: Wed 12 Aug 2026 07:21:51 +0000
ROA not before: Wed 12 Aug 2026 07:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 163.5.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:d9:55:76:b9:7a:e2:4c:df:89:9e:1e:35:91:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 12 07:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0854c78998a11f2ff5eee598aab6424a4f40ee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:3e:a6:bc:0b:54:ab:f2:f3:45:f7:ff:f8:
7e:09:97:17:94:1c:68:a4:2d:f8:b7:7e:57:71:24:
c9:6d:e9:5b:0a:72:40:6b:b6:3b:fd:43:32:ed:9a:
99:9f:32:31:d9:d2:14:0f:d0:88:84:b8:2b:a3:e2:
ea:8c:c5:37:95:e0:49:d8:9a:3d:33:39:b5:ac:00:
4c:ef:45:b2:b1:7a:32:db:88:0d:c2:f0:b2:f0:98:
a2:15:d8:82:f5:db:8a:6a:3b:2d:3f:8b:c3:11:1b:
55:28:d7:e9:75:e8:3c:94:cc:9b:0f:58:c2:35:01:
b3:f1:8a:cb:cf:3d:1e:60:62:e5:31:db:77:5d:81:
ab:12:f0:5c:6d:70:8c:64:df:52:0c:15:ee:4b:46:
e9:7e:32:c8:ba:83:1d:d6:42:d8:94:ae:49:85:fc:
83:22:78:60:bf:65:3f:0b:9e:a4:ab:bc:ac:a3:82:
59:90:fb:24:2d:80:cf:b3:cf:9f:0f:61:28:1b:e3:
74:fa:b7:29:0e:a4:ba:c1:9c:ef:07:43:34:70:ab:
a5:0c:bf:88:39:a2:0e:25:fa:e9:44:fe:01:6c:53:
b1:22:1d:a0:94:cc:2a:df:e4:17:1f:63:a3:20:7d:
b0:93:ee:09:55:89:58:dc:80:99:b7:f7:3b:b8:11:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:C7:89:98:A1:1F:2F:F5:EE:E5:98:AA:B6:42:4A:4F:40:EE:59
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CFTHiZihHy_17uWYqrZCSk9A7lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bd:73:0e:f7:49:dd:b1:fe:d1:1a:b9:50:f1:bd:9d:53:37:
d6:d3:07:8a:f3:d7:06:db:20:3c:51:df:6d:8f:9d:bc:9d:38:
72:d1:7a:13:77:20:07:a9:da:39:d9:3b:1b:08:4a:ab:a6:4d:
82:13:e6:f9:d0:e2:bc:53:25:dc:73:13:f0:07:b8:ee:f2:bb:
49:1f:76:50:fc:23:7f:b6:a2:09:01:dd:c4:73:3c:87:ae:0d:
2a:59:c0:1e:9a:d0:a7:d9:b4:56:98:93:3f:36:0e:d3:10:7d:
d9:e9:f2:23:ae:5f:e4:ce:0e:d1:96:8e:8f:56:f9:06:85:8c:
3a:d1:3d:4b:38:71:11:38:9a:60:69:4c:ba:a1:9c:ad:53:48:
f0:96:5b:3a:82:f0:e7:c3:2a:55:8b:1d:8a:22:09:77:9f:3b:
82:95:05:83:b3:04:ec:31:00:d9:cf:1b:f2:bf:8d:da:e6:5c:
18:41:80:f3:f4:85:5a:b3:a9:ef:9f:14:e9:20:5c:e5:64:20:
24:6f:47:93:1a:16:0b:c5:b8:10:12:6d:9b:2f:3b:7a:7c:60:
86:55:eb:52:f2:10:f2:f4:b8:89:3d:be:5f:ae:a9:26:67:d6:
9c:23:73:15:a1:fe:db:06:ec:75:94:28:b9:f9:27:54:1e:d9:
6e:29:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:08 2026 by rpki-client