Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FTEzLb3aZR3v84Q2fnO2tOMf_5M.roa
File: FTEzLb3aZR3v84Q2fnO2tOMf_5M.roa (raw, json)
Hash identifier: 65CKVxXZSQEpfX1KCixqhp3hcLZbH7AZB9Y12iOH9zo=
Subject key identifier: 15:31:33:2D:BD:DA:65:1D:EF:F3:84:36:7E:73:B6:B4:E3:1F:FF:93
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE5EE63F3D8D7D41858A1B539BD7D3943
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FTEzLb3aZR3v84Q2fnO2tOMf_5M.roa
Signing time: Fri 13 Mar 2026 06:42:11 +0000
ROA not before: Fri 13 Mar 2026 06:42:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201131
IP address blocks: 163.5.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ee:63:f3:d8:d7:d4:18:58:a1:b5:39:bd:7d:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 06:42:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1531332dbdda651deff384367e73b6b4e31fff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:8b:74:fd:10:ff:ef:0c:81:a9:0e:db:59:
17:49:21:25:a3:74:2e:10:c4:79:6d:e8:d7:29:20:
cb:b2:91:45:36:f4:58:f9:dd:1a:bb:4c:07:ce:bb:
af:c6:7a:5c:b0:7a:70:ed:f8:7c:36:70:81:38:03:
8e:0c:bb:8e:79:1f:09:48:ff:a7:89:0b:a4:8b:de:
03:d1:48:57:84:25:28:90:72:a1:34:a1:5d:d6:a2:
87:3c:f9:83:d4:3d:8f:5b:dc:85:1c:fd:88:22:2c:
63:36:78:fa:f2:5b:2b:97:2e:7b:32:e7:2b:65:06:
15:b6:9d:12:7f:88:2f:5c:b2:45:56:dc:d0:05:c6:
ef:89:4e:2f:71:21:3e:4c:a8:68:49:d3:83:78:80:
5e:8b:6e:e6:17:41:6d:2a:6f:ef:9f:0f:e2:4e:83:
62:21:f4:92:d3:c8:d2:8a:d3:a2:a1:fb:d4:13:5d:
c1:82:db:3c:3d:82:b5:a3:fe:57:62:57:5c:a1:36:
49:22:4b:25:7b:b0:6e:07:3a:d8:17:21:95:71:d9:
25:4b:47:6d:f0:20:44:c4:70:1d:56:c0:49:14:77:
a6:79:95:a9:cc:df:6b:dc:b1:0d:9c:ff:44:e9:40:
03:c8:0c:f5:37:41:1b:03:83:89:92:1a:3a:8b:45:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:33:2D:BD:DA:65:1D:EF:F3:84:36:7E:73:B6:B4:E3:1F:FF:93
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FTEzLb3aZR3v84Q2fnO2tOMf_5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.26.0/24
Signature Algorithm: sha256WithRSAEncryption
78:23:19:7f:99:2c:a0:1e:fa:e9:6f:23:b7:73:2c:af:36:e8:
e5:11:c5:a9:cc:fb:9c:3b:33:37:59:4a:a0:1b:3c:ee:26:3f:
24:1c:6d:3c:ac:76:be:ee:85:31:d2:60:59:79:28:98:f9:e5:
84:86:f0:dd:86:25:55:f8:ee:e7:25:97:54:11:cc:e2:03:f4:
e6:78:7e:15:00:c0:77:5c:c9:36:f2:f9:fc:a8:1c:ed:b6:b9:
22:44:3d:c2:cf:88:2f:21:1c:e8:7d:12:be:61:d9:c3:38:e5:
4a:77:8b:75:6a:78:74:f0:1e:1d:ba:b8:48:22:08:b5:9b:14:
34:af:22:d9:c4:58:f0:37:ed:b6:41:42:a0:b8:ce:21:7e:69:
ea:c3:c9:75:7a:37:78:5d:34:b6:06:13:fb:c9:75:89:fb:57:
13:79:d1:6a:30:eb:d9:81:93:df:fd:b0:01:13:1b:ba:92:a6:
28:1a:e3:b5:b4:d3:34:e3:34:9a:23:04:da:f3:5c:ac:e9:a8:
93:34:b1:08:de:72:af:77:9f:30:69:98:54:ee:fc:ab:07:a3:
96:f7:98:74:f9:91:92:de:63:35:d1:fd:20:0f:57:3e:81:3e:
b9:43:06:e6:39:32:c1:21:3d:d8:74:27:46:63:96:a2:c7:3b:
b5:9b:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 11:22:03 2026 by rpki-client