Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T7247JFEkNsRda9gacn2ID9K1_Q.roa
File: T7247JFEkNsRda9gacn2ID9K1_Q.roa (raw, json)
Hash identifier: xulJC4le8VEBhflIZCixPw8hOH3+6TGhMgHUqJ/EcKQ=
Subject key identifier: 4F:BD:B8:EC:91:44:90:DB:11:75:AF:60:69:C9:F6:20:3F:4A:D7:F4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DDAA5C2919CBCD0E180CE71811769FCE1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T7247JFEkNsRda9gacn2ID9K1_Q.roa
Signing time: Wed 29 Apr 2026 19:09:49 +0000
ROA not before: Wed 29 Apr 2026 19:09:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32418
IP address blocks: 163.5.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:a5:c2:91:9c:bc:d0:e1:80:ce:71:81:17:69:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 29 19:09:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fbdb8ec914490db1175af6069c9f6203f4ad7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:87:f3:db:3b:01:92:86:b9:d6:37:6e:54:ea:
62:e2:b6:6c:d1:94:06:62:95:3a:18:37:0c:40:9d:
d5:5a:48:4d:1d:f3:f5:34:18:c3:5c:1c:f4:8e:05:
6b:3b:a1:e9:64:46:bd:88:a7:c8:ae:4b:bd:5f:86:
43:bc:e7:26:28:53:ce:55:8e:53:43:57:75:83:0f:
83:05:68:2e:f3:d0:33:51:7a:ea:42:99:38:6c:e5:
a2:64:ca:de:e3:88:08:44:b5:32:25:90:10:8f:40:
4f:78:43:ec:8d:25:45:c8:62:9d:e5:25:40:98:25:
55:db:d9:b9:84:7d:ed:c3:04:97:bf:67:9e:49:ed:
1e:d3:8b:3c:28:7e:fb:08:9c:76:8e:36:a4:6b:29:
3f:3d:a0:2c:17:23:74:2b:68:c6:12:f5:11:9d:b7:
ef:1c:cb:ae:25:8d:ad:dd:04:10:ea:da:41:f1:36:
17:c6:fb:ae:9a:9f:0b:f7:db:34:d9:91:ed:48:88:
52:48:71:88:38:22:c5:0d:16:bb:6a:75:2e:7e:3d:
5b:d8:16:52:56:04:f6:b7:4e:6c:5a:1e:63:c9:bb:
9f:b8:48:42:68:26:a1:44:37:31:5a:c6:bf:64:e9:
6c:ce:33:de:b0:3e:5e:6a:c6:08:c9:12:e3:62:35:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BD:B8:EC:91:44:90:DB:11:75:AF:60:69:C9:F6:20:3F:4A:D7:F4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T7247JFEkNsRda9gacn2ID9K1_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.164.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a9:c2:0e:3e:eb:94:aa:21:65:c7:20:c2:fe:ba:50:aa:a8:
0c:fc:8e:03:b9:22:d3:74:c1:58:dc:6f:8b:99:d8:a7:b4:77:
8d:55:0e:b4:8e:ec:2c:a7:d0:2a:d7:b0:56:5a:55:7b:3e:42:
fb:f9:8b:94:c6:52:29:90:b0:c5:0e:9c:37:87:79:7d:71:6c:
f5:53:ab:fb:f2:3a:54:ee:26:c7:9f:bc:e7:90:91:ea:08:72:
ba:8d:e5:54:b8:dc:2a:a0:df:ba:85:dc:e4:8f:1a:bc:78:d7:
30:51:26:3b:e2:50:75:ab:89:74:ae:37:cf:26:0f:91:9e:97:
55:63:88:70:17:c7:96:ef:c8:7f:f8:f2:33:55:88:f2:a1:b0:
d4:8b:43:cc:7d:c7:50:f5:3e:3a:22:91:7c:50:e3:24:5e:f7:
e3:79:bb:55:d1:96:b1:7a:0c:8d:5b:d1:47:81:ba:2f:ff:b5:
ab:f7:c6:c9:21:ec:08:bd:4a:ae:7a:f7:a2:2c:ab:d6:e4:d2:
02:60:ba:f5:f6:7c:94:8d:87:04:23:cf:0f:98:f7:89:2b:57:
2e:63:02:33:cb:a0:b8:4e:54:98:32:00:f1:29:d2:e7:c1:96:
b4:d7:58:60:31:96:cb:5a:55:63:2f:37:9a:5f:bc:5c:d0:9c:
7e:9d:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:31:17 2026 by rpki-client