Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U_xVW_9i5jYfOoyDq9GGDCc8I4w.roa
File: U_xVW_9i5jYfOoyDq9GGDCc8I4w.roa (raw, json)
Hash identifier: xnyCA+5lyRavLiMOK5L8Re48JcNqIHYI+O45+Qxl5o8=
Subject key identifier: 53:FC:55:5B:FF:62:E6:36:1F:3A:8C:83:AB:D1:86:0C:27:3C:23:8C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F9ECD2F392119FC40AE9E92B7A6926D86
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U_xVW_9i5jYfOoyDq9GGDCc8I4w.roa
Signing time: Sun 26 Jul 2026 14:21:14 +0000
ROA not before: Sun 26 Jul 2026 14:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 163.5.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:cd:2f:39:21:19:fc:40:ae:9e:92:b7:a6:92:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 26 14:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53fc555bff62e6361f3a8c83abd1860c273c238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:88:c6:88:92:25:f5:04:25:47:67:28:82:
8e:b8:68:13:15:e0:60:1d:1b:3f:0d:da:d2:c6:44:
ce:0c:aa:dc:8f:5a:92:b4:c4:73:da:a3:02:27:f1:
d6:e3:3d:ef:e9:ba:c8:bb:79:e9:97:6f:84:51:16:
96:6b:2d:23:6c:63:27:7e:9d:8b:6a:83:c0:d3:9c:
6b:d6:3a:64:8e:68:0c:ed:90:2f:3a:11:1e:4c:66:
28:1a:a0:2c:8b:ad:bc:f1:18:58:35:c5:8b:d2:a6:
e3:cd:4f:6f:04:f1:4a:95:1f:ea:0b:f4:5f:96:c9:
e7:11:d7:52:d3:77:c3:01:21:73:b9:7c:f7:84:e6:
eb:3b:bd:52:24:06:99:f0:84:14:aa:80:3f:8b:c0:
1a:de:b2:37:4a:67:60:f8:81:5a:57:14:5b:58:dd:
16:81:ca:5e:c4:5c:57:e3:ec:d8:69:79:0d:0a:1d:
3a:df:e6:2d:cd:51:2a:06:56:f1:2e:f5:aa:b9:35:
e8:29:6d:b9:1b:a8:9d:f0:f1:b6:1c:40:ff:3f:e7:
88:ed:70:18:d7:3f:c8:d1:dd:ee:31:7a:ca:84:e0:
ed:9a:15:df:e6:b5:42:72:c8:51:d2:ca:47:61:79:
81:22:32:ca:12:67:82:68:15:d4:94:ee:f6:80:3c:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:55:5B:FF:62:E6:36:1F:3A:8C:83:AB:D1:86:0C:27:3C:23:8C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U_xVW_9i5jYfOoyDq9GGDCc8I4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1f:0e:bc:a7:a7:a7:ad:4f:47:fa:89:4c:42:ad:fe:26:e0:
2d:45:5a:16:c5:3a:5a:01:37:d4:b5:c3:4b:f4:39:85:80:b8:
8b:bd:f3:45:0d:6d:f4:2e:df:15:47:9a:76:98:81:6f:ef:6d:
5c:03:77:5c:72:1c:fa:ac:0c:3c:e3:8f:32:9d:b5:97:9c:1d:
b7:ca:78:b3:e2:cc:1f:1d:d2:87:9b:fd:03:b8:e6:69:b9:87:
89:79:76:68:df:04:27:f8:62:52:13:23:d1:7f:ed:f3:8f:3e:
fe:ae:db:af:a4:55:9b:99:13:63:c6:c1:10:04:65:a6:7f:ce:
81:49:de:11:62:c2:20:ef:57:fb:84:01:36:b8:f2:cf:03:a1:
fc:34:e2:69:1b:fa:23:31:1c:d6:87:75:0f:4d:aa:fc:d0:8c:
9a:8f:71:f2:66:5e:9f:bc:06:8d:96:c8:96:02:f9:2f:43:1d:
b9:c7:16:c3:4e:a8:53:99:12:02:6f:9b:96:16:b2:99:fd:73:
5a:f2:53:60:33:81:a1:91:9c:76:f9:2c:a3:21:74:9e:96:a0:
fc:50:d9:3b:51:2c:c5:ce:13:67:76:42:aa:3b:74:45:cd:e1:
c5:05:b2:e7:40:a9:4a:7e:48:0e:61:f1:b8:8f:a2:1e:65:73:
ed:9a:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:50 2026 by rpki-client