Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ee3IASpCakWQkZmQj4Mjph8jlGo.roa
File: Ee3IASpCakWQkZmQj4Mjph8jlGo.roa (raw, json)
Hash identifier: auhVGaE4ZQ0AutQabiZyJi+fEggRYxU0gvBL6sH5kx0=
Subject key identifier: 11:ED:C8:01:2A:42:6A:45:90:91:99:90:8F:83:23:A6:1F:23:94:6A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A159A73C2578D31A28FDE95F6BA247723B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ee3IASpCakWQkZmQj4Mjph8jlGo.roa
Signing time: Tue 20 Oct 2026 14:11:34 +0000
ROA not before: Tue 20 Oct 2026 14:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 163.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:a7:3c:25:78:d3:1a:28:fd:e9:5f:6b:a2:47:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 20 14:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11edc8012a426a45909199908f8323a61f23946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:d7:c2:78:74:65:00:c4:9b:bf:71:bf:63:
4c:d9:41:a7:73:0c:f3:e2:f6:be:09:cf:29:5c:5c:
6c:d6:de:6d:e3:a7:6b:4a:18:e8:41:20:f7:75:0c:
d3:1b:65:c5:cc:db:7c:c0:a7:db:79:75:51:b3:b5:
7d:48:5a:79:b8:a2:07:8d:7e:b7:6a:5e:91:4b:1a:
b7:2c:65:2e:eb:76:a4:25:56:54:8f:6d:46:d5:22:
32:0f:c3:d4:73:33:81:16:33:a3:9e:ee:a6:fc:ba:
90:36:68:db:cd:96:55:7e:6b:7a:b0:04:f3:0f:8a:
41:25:e7:f2:de:53:47:81:1d:17:62:70:41:12:9d:
03:5b:d3:29:6e:44:a6:ec:4e:62:e7:0d:e4:42:ac:
f6:d9:52:c2:4d:16:31:8e:0e:16:f4:97:eb:0c:64:
fc:96:ce:d6:dd:11:79:a2:01:37:49:d4:67:22:c3:
ac:33:32:7d:89:0f:55:5b:7e:2f:39:07:59:48:7e:
9c:72:dc:f0:4f:52:9e:55:49:d4:bb:91:1f:1a:15:
b8:2c:73:bc:79:7d:e3:02:e4:6c:71:fe:61:bc:2e:
d2:39:9a:e3:ac:73:b3:9a:25:4d:6e:d6:2c:ef:8e:
e0:20:25:c8:a3:6b:d7:20:62:c6:c3:e5:a0:57:8c:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:C8:01:2A:42:6A:45:90:91:99:90:8F:83:23:A6:1F:23:94:6A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ee3IASpCakWQkZmQj4Mjph8jlGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:28:b1:38:9e:66:af:1f:88:78:93:1c:60:04:7a:34:45:6f:
2e:76:c5:60:da:2d:0b:6f:dd:24:c0:b2:f1:5b:1a:19:be:45:
72:2c:a8:fc:09:00:8b:8b:6a:04:29:ce:ad:7f:1a:f4:06:31:
1b:f5:f0:79:3b:9b:14:45:ef:9c:4b:8e:5c:d4:d4:49:8d:16:
c6:f7:2b:c3:b8:63:93:7c:74:3c:fc:96:a7:d4:ff:75:f5:1f:
1c:55:81:bd:36:0c:f6:10:73:58:d4:af:7b:e6:00:af:72:1b:
69:28:b9:23:33:7f:5a:3e:4b:38:a5:c3:9a:55:90:ca:0a:50:
d7:90:3e:8a:45:83:f5:1b:2a:67:3d:3c:77:91:1f:8f:4c:bf:
c9:44:59:a3:35:cb:61:a9:4b:87:9b:2c:e3:15:0c:00:30:3e:
d7:19:11:fb:fa:4f:7b:ad:f8:8c:04:6e:69:65:99:99:db:74:
03:a8:c3:8d:d0:f5:c8:8c:5f:b4:bc:94:ce:00:91:72:2c:41:
9d:8a:cc:aa:64:5e:0a:22:0f:db:32:39:44:f2:14:af:c0:04:
f6:9c:f3:a3:ca:69:09:9e:11:30:5b:a7:e9:fe:f3:e8:4e:f4:
8c:f4:0d:45:a6:e2:82:a5:78:78:3e:26:cc:1c:8e:bb:9f:0c:
7f:9a:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:51 2026 by rpki-client