Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Emk2K3iZ7A7GZe7A_3JrsUwxwBE.roa
File: Emk2K3iZ7A7GZe7A_3JrsUwxwBE.roa (raw, json)
Hash identifier: GSwZOzezXyfvzkBduwjT397gR7/S7aL8btssc/4stqU=
Subject key identifier: 12:69:36:2B:78:99:EC:0E:C6:65:EE:C0:FF:72:6B:B1:4C:31:C0:11
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A037E5255AF311552BE01DB86AF83AF6C7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Emk2K3iZ7A7GZe7A_3JrsUwxwBE.roa
Signing time: Tue 25 Aug 2026 07:49:19 +0000
ROA not before: Tue 25 Aug 2026 07:49:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213323
IP address blocks: 163.5.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:e5:25:5a:f3:11:55:2b:e0:1d:b8:6a:f8:3a:f6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 25 07:49:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1269362b7899ec0ec665eec0ff726bb14c31c011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:62:30:17:c6:ed:25:05:93:2b:60:92:25:
a4:f9:8d:8e:94:e6:37:15:65:36:f1:ee:61:35:9d:
91:4c:70:7d:39:9f:b0:88:5f:66:98:7f:7b:71:2a:
8c:41:eb:d7:c3:7e:7b:f9:a3:c7:bd:13:9a:b5:3c:
f6:52:93:f1:1c:22:32:82:8e:50:54:cf:6e:1e:57:
50:de:34:be:05:ff:aa:98:88:cb:8c:86:43:9c:69:
18:9a:cf:89:d6:26:e0:ce:88:0a:5f:78:33:25:37:
8f:87:14:f4:3e:bf:83:98:62:55:bf:cb:77:19:c9:
d8:ec:e0:fb:96:ca:66:40:a1:e9:83:9a:c3:22:f7:
5e:b9:19:30:9b:60:fa:9b:c7:ae:3d:5e:19:10:ae:
7d:45:a9:2c:76:a2:ac:5c:83:e0:83:68:7e:17:4a:
6c:da:01:71:1f:42:51:c5:b6:7f:c2:52:55:3c:e7:
7f:e9:67:f1:cd:fe:92:ae:b3:89:4c:a2:10:20:b4:
26:f9:30:92:0f:c4:a9:c0:66:98:7d:06:9f:c9:7b:
5c:d4:e9:67:2d:49:b6:9f:0c:ca:25:f6:17:81:ef:
a6:02:e9:38:fc:81:c2:ab:11:9e:bc:1a:08:1e:50:
30:48:77:5d:6b:c4:f4:9d:51:52:c7:d9:91:c6:e4:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:69:36:2B:78:99:EC:0E:C6:65:EE:C0:FF:72:6B:B1:4C:31:C0:11
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Emk2K3iZ7A7GZe7A_3JrsUwxwBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.192.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7b:5a:63:20:c3:23:d3:d5:7e:7a:61:99:c4:3a:d4:7b:4c:
ea:d9:f9:90:5e:2a:26:be:63:4b:73:f4:19:eb:20:38:36:33:
8d:68:cc:9f:c2:54:71:37:8b:02:f6:09:c1:1e:62:20:2e:07:
2d:d4:59:19:ef:d7:74:5c:25:c7:ee:1f:e6:20:6b:7e:a9:c2:
e9:c9:dc:5f:1a:bf:16:74:9c:0f:4c:a9:76:37:17:9c:55:71:
a1:e4:43:2d:39:ea:06:02:27:15:a3:f9:c6:ec:f0:da:0b:cd:
bb:38:f0:70:c2:75:9d:1c:db:7a:34:35:b4:2f:50:95:5f:24:
e4:96:a0:42:9a:02:7d:36:c5:03:39:5d:5e:83:4f:73:e3:82:
6a:2f:92:c9:b5:0f:6e:d1:be:e9:c6:86:a5:d8:7d:e9:80:ee:
ec:7a:e5:9f:12:76:70:7a:9e:9d:f0:2b:de:ba:b5:af:85:32:
f2:6e:0a:c1:93:a9:42:64:31:ff:45:45:6d:03:cb:c3:68:db:
cb:ac:42:9a:9f:8b:12:d0:0d:4a:f4:b3:79:6d:8f:a2:b4:02:
8f:15:f7:2a:7e:e8:58:e0:23:0f:df:cf:39:ea:c8:24:9e:2a:
bd:5f:f3:5c:ee:e9:1a:66:2e:08:52:50:ff:fa:44:82:2a:9d:
33:23:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:39 2026 by rpki-client