Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NAF01HMME5RmCL4qYk_Z1hOEVsQ.roa
File: NAF01HMME5RmCL4qYk_Z1hOEVsQ.roa (raw, json)
Hash identifier: ElxrqF+vYkFn96IdqlogCojH92idHw9dG+WOo7/nXIY=
Subject key identifier: 34:01:74:D4:73:0C:13:94:66:08:BE:2A:62:4F:D9:D6:13:84:56:C4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E53ABEF723D3D197BEE144C5917CD7D81
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NAF01HMME5RmCL4qYk_Z1hOEVsQ.roa
Signing time: Sat 23 May 2026 07:10:37 +0000
ROA not before: Sat 23 May 2026 07:10:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 163.5.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:53:ab:ef:72:3d:3d:19:7b:ee:14:4c:59:17:cd:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 23 07:10:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=340174d4730c13946608be2a624fd9d6138456c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:07:a9:a9:06:40:a0:a6:29:99:62:c1:d7:
ae:ed:47:b7:ef:2b:43:a3:f1:91:10:b2:0c:93:5a:
a5:bc:6f:96:12:66:13:da:f6:bb:1f:06:46:c6:7c:
47:cf:cb:4e:ff:db:fa:54:49:4c:55:0b:08:78:8c:
7e:30:6c:00:a4:34:bd:f5:30:09:65:da:1f:81:15:
e4:50:24:0c:f6:4d:fa:24:d2:0c:9e:d0:90:cb:fc:
ac:d5:49:3f:d4:77:8b:33:7b:8e:d4:82:a6:6b:7e:
34:49:be:3e:3b:ca:c5:fa:a3:09:1b:a1:14:df:76:
f4:43:a6:44:50:64:49:b1:2d:f3:8e:1c:97:4d:1a:
aa:d2:a8:66:86:f6:9c:71:2e:fd:ee:92:a3:ae:44:
0f:1e:6b:af:4e:e9:da:e4:28:26:69:5d:89:02:1b:
74:48:21:53:d6:36:71:79:cd:2c:fc:a1:98:b4:07:
97:c8:15:ff:53:25:1a:f6:c6:4c:6f:cf:c4:a0:59:
4b:a2:12:cf:7b:ef:e4:d1:64:e2:07:71:6a:37:18:
d6:1f:4e:d1:7f:38:65:fc:89:aa:38:2f:0e:b1:93:
99:46:e5:7a:99:21:76:dc:67:57:e4:99:cc:b0:e2:
0b:8a:74:e5:21:80:21:30:9d:1a:79:89:e9:91:77:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:01:74:D4:73:0C:13:94:66:08:BE:2A:62:4F:D9:D6:13:84:56:C4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NAF01HMME5RmCL4qYk_Z1hOEVsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:07:6e:c2:ec:48:1f:b0:eb:96:91:a8:c5:3b:db:8d:74:05:
1e:d1:70:16:b0:8d:1a:cb:93:44:6d:5c:fb:ed:e8:bd:c5:0e:
dd:65:a9:2d:9d:d7:c2:8c:7a:99:f9:15:28:cf:4b:4f:3a:eb:
8c:e3:44:fc:9b:12:cf:6d:99:0a:32:b7:3a:cf:2b:a3:46:04:
87:b2:00:db:3c:66:94:ac:32:08:09:0b:33:25:0d:f7:2b:da:
b5:27:f8:c3:7d:0b:86:17:5d:d1:bc:42:0c:b4:1b:80:a0:b2:
b7:f3:71:9b:5b:de:f2:c1:98:37:35:f6:f8:dd:6f:5c:9e:2f:
3f:16:f8:f6:15:51:83:db:51:49:68:7b:8f:29:46:30:63:e9:
29:f8:2f:04:9f:85:ea:be:33:45:bd:a6:c1:5d:dc:63:89:ad:
94:fe:78:6d:47:7f:cc:ac:55:78:84:27:72:e7:54:0b:27:3f:
ca:73:87:20:5c:c9:ae:db:95:53:7c:7e:3b:2e:87:6c:79:17:
ab:1e:e2:fb:33:09:fa:71:d7:65:e7:5e:29:6d:a3:33:a4:3f:
6a:61:f9:81:0f:80:96:59:f7:fd:29:dc:ee:78:9f:11:6b:1c:
71:2d:fb:b2:a2:ee:be:46:63:04:5c:de:f5:5a:4d:fa:bd:99:
a7:f9:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:26 2026 by rpki-client