Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lf1GyN8uZ7INc7TkzSaW-UGZEBQ.roa
File: Lf1GyN8uZ7INc7TkzSaW-UGZEBQ.roa (raw, json)
Hash identifier: QfJPfxcug+ioOF91PU32uabzVXZER/CZV/Nr+IOOuMo=
Subject key identifier: 2D:FD:46:C8:DF:2E:67:B2:0D:73:B4:E4:CD:26:96:F9:41:99:10:14
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F3BAFCA0499FF325B78FFAC49A28021F9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lf1GyN8uZ7INc7TkzSaW-UGZEBQ.roa
Signing time: Tue 07 Jul 2026 08:26:43 +0000
ROA not before: Tue 07 Jul 2026 08:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:af:ca:04:99:ff:32:5b:78:ff:ac:49:a2:80:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 7 08:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2dfd46c8df2e67b20d73b4e4cd2696f941991014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:3a:c1:b9:09:cd:0c:43:07:fb:4e:3a:bb:
0c:36:65:79:ca:05:cf:4c:c0:4a:e5:a3:37:19:c0:
29:29:da:5e:b8:64:e9:69:7c:58:fe:01:c3:a5:cd:
9b:fc:75:d9:a6:f0:25:0f:68:23:ca:54:49:99:4a:
e3:ad:8b:e0:5c:81:d2:43:3a:96:ec:62:3c:9f:80:
36:f5:fb:e2:1a:4b:03:8e:a4:d8:dc:c7:32:9e:d9:
b9:85:81:53:f3:7c:a1:38:a9:e1:0a:e5:f8:c8:f9:
c9:ce:8e:a3:8b:90:8f:74:9e:47:fa:6b:f4:70:95:
02:7d:56:d3:3a:b3:55:a7:bd:8a:1c:9a:6e:fe:1a:
ac:be:0c:d8:65:39:c1:29:82:1d:04:89:98:a5:16:
f8:b3:ad:8d:af:24:06:95:76:0e:df:f6:e2:87:10:
a7:1a:42:f2:65:e0:06:eb:aa:24:13:a1:6e:b2:8f:
10:1c:95:5b:1c:ad:d9:50:f2:d4:67:51:b5:98:f9:
bb:06:67:3e:43:fc:1c:1f:56:95:fc:a5:c7:4b:d5:
ac:81:9a:10:b7:5f:77:9e:d9:08:82:cc:0f:3e:a2:
15:f4:f5:e0:88:c3:2c:fa:92:0c:34:8d:c0:cc:8d:
17:48:03:11:e9:6f:9d:b0:93:bf:31:c9:0e:55:bb:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:46:C8:DF:2E:67:B2:0D:73:B4:E4:CD:26:96:F9:41:99:10:14
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Lf1GyN8uZ7INc7TkzSaW-UGZEBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.18.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b8:a1:2c:46:7c:3a:aa:7b:ae:89:be:86:97:fa:2f:26:94:
25:ef:d6:3a:70:37:45:f1:7d:8f:8e:97:d7:bd:29:ec:ab:6d:
50:9f:4f:68:7a:ce:9f:06:29:d9:9d:11:51:1a:f5:b7:6f:1c:
70:81:35:26:68:23:84:5b:7e:69:08:35:cc:7b:f7:c0:7d:0e:
e7:10:96:44:87:96:cb:50:c8:61:bf:b6:b7:6c:1d:f3:5b:24:
14:46:45:c3:9f:3f:b7:3e:27:fe:72:31:46:42:ed:94:50:6e:
83:6e:4a:4a:8a:34:b0:df:8c:8c:6b:dd:75:8b:86:3f:c8:cd:
8c:09:0a:63:27:cb:5d:f1:3b:97:91:55:47:00:13:4e:19:d9:
46:36:81:68:3a:61:54:ab:31:88:63:a0:53:9c:5b:d2:dd:f4:
57:b4:79:bb:ed:b2:27:4c:d9:64:0f:a0:95:30:61:75:f4:bd:
07:28:f9:73:35:d9:2e:5e:9d:c4:8c:1b:41:a1:d7:57:5e:15:
9c:99:56:af:5e:38:b3:de:8b:35:71:a8:9e:e0:44:db:86:d2:
0a:a0:5e:1e:81:9e:b5:8b:68:ae:ab:95:d6:78:6f:05:21:c1:
23:95:02:c9:fb:8c:98:dc:65:b9:eb:7d:b4:bf:64:82:22:0b:
01:60:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:09:58 2026 by rpki-client