Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OUS_VO2hJ7o9mU_n5mrLd-KGVHc.roa
File: OUS_VO2hJ7o9mU_n5mrLd-KGVHc.roa (raw, json)
Hash identifier: KBdfjA1Sh+t5zOt2HpO4tbLXWoNVyPe+NM4O0jBrcoA=
Subject key identifier: 39:44:BF:54:ED:A1:27:BA:3D:99:4F:E7:E6:6A:CB:77:E2:86:54:77
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE6DEA19372058698B078B4706473AEE5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OUS_VO2hJ7o9mU_n5mrLd-KGVHc.roa
Signing time: Fri 13 Mar 2026 11:04:35 +0000
ROA not before: Fri 13 Mar 2026 11:04:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 163.5.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:de:a1:93:72:05:86:98:b0:78:b4:70:64:73:ae:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 11:04:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3944bf54eda127ba3d994fe7e66acb77e2865477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:03:34:e3:20:a0:19:c4:7f:30:05:7e:fa:
e0:0e:8f:5d:27:f3:d0:f9:d6:cc:a6:5f:d2:c3:27:
52:6d:6a:b0:eb:d2:36:20:31:38:23:31:49:81:66:
9e:c5:36:3e:be:2b:17:61:a5:d3:42:b2:b0:c4:86:
63:5f:f7:33:75:cb:21:92:5d:0e:16:44:13:06:f3:
87:15:1e:90:b1:95:65:4e:1d:94:59:0a:72:d3:ef:
61:42:c5:3e:17:d9:a4:d1:0f:78:8a:bc:72:ca:ef:
89:bc:d1:a7:cf:b2:4e:83:2c:84:02:2f:12:61:29:
49:83:2d:7a:68:55:91:36:2b:d7:90:0f:33:00:b3:
a7:61:e1:39:e1:e4:a6:cb:29:28:67:32:37:f6:51:
4e:3a:13:2b:eb:0c:aa:81:29:db:f7:08:ca:37:ba:
ab:3c:d2:be:5b:0e:bf:29:bb:90:b6:ce:d5:c8:ae:
82:9c:aa:a0:c8:1a:fa:bf:2e:e1:84:94:2a:54:75:
b3:42:bc:d6:03:6b:a6:70:4f:bc:38:51:f7:50:d0:
50:4d:ec:27:72:87:e6:51:b0:61:fb:da:2b:4a:40:
8c:b8:2f:6c:22:2e:cf:c9:8c:e2:2a:65:20:ad:8a:
65:97:6f:2c:c2:02:cc:da:b6:be:a2:ae:d5:ff:26:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:44:BF:54:ED:A1:27:BA:3D:99:4F:E7:E6:6A:CB:77:E2:86:54:77
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OUS_VO2hJ7o9mU_n5mrLd-KGVHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.193.0/24
Signature Algorithm: sha256WithRSAEncryption
36:26:4e:fe:4c:b2:7f:f2:03:52:9c:14:63:7d:53:a0:a3:38:
80:59:6f:1d:63:d7:dc:39:52:14:53:13:b9:0e:8e:f4:f1:58:
6a:d1:98:a2:24:21:d8:35:9d:ff:55:68:20:52:4c:d3:d1:ce:
79:50:2a:24:01:01:22:1b:12:7c:ac:b1:7d:30:cb:1c:15:a9:
ad:d8:2a:e8:7b:4d:6d:5f:ec:64:95:05:a1:92:aa:60:65:fe:
f9:16:83:b4:82:fb:a2:ab:7c:a4:f3:e6:15:ff:f4:98:81:56:
e9:5c:e1:20:03:f6:6d:5b:8a:4e:2b:60:bd:e7:d1:38:3f:de:
3d:cb:1d:a3:2d:39:0f:27:c1:72:db:6a:09:9b:49:0c:65:aa:
25:9f:f7:33:75:17:95:92:9b:6c:8d:7c:55:c3:5c:53:ce:db:
00:92:cc:57:2c:cb:68:77:56:3a:85:a9:61:3e:a2:b5:40:ca:
f6:19:28:88:a6:48:10:c9:87:c3:28:57:5a:7f:76:51:69:c5:
30:47:d0:28:ed:b2:bc:cb:6d:1f:e9:f8:d6:b0:14:5a:6e:02:
3a:af:76:10:f7:e5:03:4e:b9:c3:09:ae:b8:7c:3d:9f:02:16:
13:65:bb:ac:86:16:bd:b1:bc:96:72:fd:ef:e1:01:fb:53:f8:
c6:92:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:10:07 2026 by rpki-client