Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JQn2MZWHA90ae8sQuHfgQ7ZLvpk.roa
File: JQn2MZWHA90ae8sQuHfgQ7ZLvpk.roa (raw, json)
Hash identifier: mB660WheW4n79TIP0H2IZ/AL9zlNh228mA0xjEoT5N8=
Subject key identifier: 25:09:F6:31:95:87:03:DD:1A:7B:CB:10:B8:77:E0:43:B6:4B:BE:99
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E44553C7E799ED2698417AA69E3E72AE8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JQn2MZWHA90ae8sQuHfgQ7ZLvpk.roa
Signing time: Wed 20 May 2026 07:41:37 +0000
ROA not before: Wed 20 May 2026 07:41:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 163.5.13.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:55:3c:7e:79:9e:d2:69:84:17:aa:69:e3:e7:2a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 20 07:41:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2509f631958703dd1a7bcb10b877e043b64bbe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:6c:96:bf:a8:51:57:0d:ca:de:67:24:e8:
89:43:49:c3:af:11:65:ef:95:5c:05:83:19:92:5f:
83:3e:94:4a:09:94:01:1a:bc:7a:5d:9b:9d:08:dc:
bb:99:b2:b9:2a:60:e7:77:6b:04:45:e2:7c:3d:c8:
35:6b:4d:a1:3e:6e:97:69:1f:b4:39:2d:d9:15:a7:
6b:02:5e:98:55:b3:9f:1b:c6:f9:9c:5b:dd:52:8e:
6e:c1:2b:75:b3:f4:af:0d:06:4d:a1:1f:3e:98:9a:
4f:c4:b5:33:c7:a1:48:53:cf:6d:70:62:83:27:14:
11:1b:ae:10:e7:bd:51:cc:ff:56:26:cd:25:fb:55:
a3:e0:91:b9:8f:63:74:b1:63:86:39:e5:7c:ec:70:
53:ec:a6:4e:96:85:d5:b4:4a:e3:a7:f6:b6:01:ea:
84:48:72:67:5a:73:e8:ed:3d:78:cf:a1:66:8b:31:
e6:3a:ef:61:8f:9d:88:08:f4:e0:f5:5d:74:3b:a3:
26:8b:15:f3:3e:27:27:4e:d8:34:66:b2:f9:00:24:
8e:2b:86:89:f5:b0:59:66:d1:7c:1a:a1:b9:23:ae:
b3:f9:0a:71:b4:80:a1:56:ca:28:46:75:87:6f:c1:
23:fa:7a:d6:90:ad:f1:0a:86:f2:36:0a:d3:66:c2:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:09:F6:31:95:87:03:DD:1A:7B:CB:10:B8:77:E0:43:B6:4B:BE:99
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JQn2MZWHA90ae8sQuHfgQ7ZLvpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.13.0/24
163.5.91.0/24
163.5.109.0/24
163.5.127.0/24
163.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e1:d6:74:6e:3d:40:dc:81:df:2d:d8:4d:69:b2:1f:f4:36:
b8:ed:a4:b5:28:57:62:d4:d6:71:44:b1:4d:f5:44:e0:52:32:
13:d6:bb:24:52:0f:d8:68:88:67:c1:2d:cc:36:17:af:d3:5d:
49:e4:84:6b:7a:6a:cd:a2:de:9f:54:74:36:e1:9a:8b:f8:65:
01:3e:63:9a:5a:fa:97:18:56:c1:20:6d:1c:8d:88:be:c5:2b:
20:69:95:d2:fe:e6:62:1f:33:13:6a:aa:3c:32:96:31:3a:fb:
b5:93:2a:09:1e:d1:b1:31:07:5f:d9:2a:80:41:6f:80:9e:2b:
95:df:fc:c4:dd:a4:19:64:29:1d:7c:76:a9:ba:eb:15:6f:c3:
0b:77:ac:65:76:09:20:2d:57:6f:0a:46:b6:5b:20:cd:31:bf:
f7:29:f9:fa:a2:c8:6b:a6:b9:2d:f9:dd:39:bd:a4:fb:04:67:
f0:f2:0a:ae:7c:22:0e:17:f3:93:ce:19:18:58:71:63:fb:00:
16:95:e7:f0:7b:7d:92:48:60:15:f7:2c:22:9d:73:72:58:cd:
f0:62:8e:ab:89:70:cf:3c:9f:d5:28:81:01:1e:5a:9f:9f:7a:
23:78:26:39:7e:70:08:37:1c:9f:fc:03:b9:40:0c:ec:d6:18:
6b:ac:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:18 2026 by rpki-client