Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y2q1yRkj5EdU4RVNH0kiIBF_79M.roa
File: Y2q1yRkj5EdU4RVNH0kiIBF_79M.roa (raw, json)
Hash identifier: mlhdBI+C5vMigWk0dOIcp9Gs9pcFYtbCoFbYpEbE01Y=
Subject key identifier: 63:6A:B5:C9:19:23:E4:47:54:E1:15:4D:1F:49:22:20:11:7F:EF:D3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019A457196B0C2DD87604628BD1D5559F727
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y2q1yRkj5EdU4RVNH0kiIBF_79M.roa
Signing time: Sun 02 Nov 2025 16:41:03 +0000
ROA not before: Sun 02 Nov 2025 16:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153786
IP address blocks: 163.5.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:71:96:b0:c2:dd:87:60:46:28:bd:1d:55:59:f7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 2 16:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=636ab5c91923e44754e1154d1f492220117fefd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:33:ae:67:cd:34:2e:4b:90:58:6e:cf:e0:
ef:8a:0e:43:6f:d4:78:1f:2e:be:e2:64:87:68:76:
51:60:39:d1:f4:b4:97:01:81:7c:2f:3e:1a:be:39:
49:ce:5b:eb:31:16:3b:19:89:7a:80:c6:5d:00:ce:
f7:0c:ea:43:98:70:5c:1c:51:c3:70:b0:d5:f4:07:
ac:88:60:15:1c:ee:3c:7e:fb:0d:c8:eb:17:62:fa:
ff:4f:2a:d4:65:be:8a:04:21:8c:ea:c1:a7:42:7d:
af:c5:7e:99:d0:73:c0:77:fc:85:e4:e5:74:b7:9b:
dc:8b:f7:c0:c9:ce:d8:ba:b9:d1:62:69:32:1a:7d:
69:b2:16:b1:c3:32:e1:bd:f6:a3:cb:a2:af:97:f6:
4f:5c:a2:da:38:b0:aa:54:17:87:b2:67:55:74:e3:
83:f4:a8:4a:ec:f5:1e:37:d3:5a:56:c4:82:55:a0:
2b:37:c1:64:23:fb:05:3f:11:62:47:ec:5a:30:24:
0c:66:7d:88:7f:73:3b:63:39:e7:6c:81:b7:4e:30:
31:10:92:29:9a:1d:85:2e:d7:d4:37:83:73:94:cc:
cd:91:97:6f:9a:02:f3:d5:54:f6:30:48:7b:a6:23:
5a:b7:c9:f2:63:46:5d:6c:d5:fc:20:b7:1e:b9:c4:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6A:B5:C9:19:23:E4:47:54:E1:15:4D:1F:49:22:20:11:7F:EF:D3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y2q1yRkj5EdU4RVNH0kiIBF_79M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.209.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d1:4b:d8:44:63:b8:d7:02:96:06:88:09:2b:f5:c5:76:07:
6d:42:02:0e:d1:83:98:8e:b1:01:78:87:9e:58:de:d0:6c:97:
f4:ee:b5:47:ad:ce:dd:58:c7:59:7f:c4:1a:ca:ac:d0:e9:48:
0d:59:80:70:eb:32:f7:b1:78:ca:fa:34:2a:03:5b:02:2d:f8:
2b:6f:27:23:f6:11:db:9e:97:05:9d:a2:1e:d6:3f:af:97:25:
e1:62:5f:d4:ed:19:1a:b3:de:a3:37:81:8f:68:75:6d:1d:c9:
ea:93:31:e0:dd:43:f0:df:3a:72:90:0d:22:17:09:a2:bd:64:
ec:3f:da:2b:8f:e3:ae:fe:f2:4b:91:6f:be:d2:f2:4b:9e:2f:
b4:dd:29:78:c7:0f:e5:da:5a:06:89:6d:ab:b4:51:27:3b:1f:
81:0d:47:12:50:81:ee:c3:87:cf:67:5c:90:54:3c:da:21:8f:
14:5c:1a:55:08:e6:41:21:7a:6b:48:67:c2:87:11:0c:1a:20:
dc:03:3c:a3:a1:74:a3:2d:b5:34:54:40:b1:4f:db:d4:a8:23:
ab:be:d9:c3:fd:d1:7b:9a:54:35:e3:c1:9f:b0:b7:66:86:d8:
c7:15:35:e7:2e:18:e3:46:d1:f1:e0:ba:f6:58:b8:82:fd:1b:
52:6e:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:35:53 2025 by rpki-client