Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_6DxiHq8SC-fLmM8dD_pfdtBTzQ.roa
File: _6DxiHq8SC-fLmM8dD_pfdtBTzQ.roa (raw, json)
Hash identifier: l+y9C7UnHDQYwpeUxUTFAMf8CdX4eCdSzPPJlcUHX28=
Subject key identifier: FF:A0:F1:88:7A:BC:48:2F:9F:2E:63:3C:74:3F:E9:7D:DB:41:4F:34
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E2AF5915A0819BD9B1DCDEC6CC71082A8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_6DxiHq8SC-fLmM8dD_pfdtBTzQ.roa
Signing time: Fri 15 May 2026 09:26:37 +0000
ROA not before: Fri 15 May 2026 09:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.99.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:f5:91:5a:08:19:bd:9b:1d:cd:ec:6c:c7:10:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 15 09:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffa0f1887abc482f9f2e633c743fe97ddb414f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:0c:39:4b:6c:44:b6:b5:12:f4:e7:74:f4:
ce:fe:1b:18:8d:91:34:9b:b0:6d:fd:4f:09:7b:60:
98:54:b1:6a:95:41:07:5f:ae:be:d8:c7:dc:99:73:
02:f2:75:1b:bb:e8:8e:df:0b:ad:66:ad:b1:a9:f2:
6c:63:75:db:24:7c:b6:5e:b1:0e:a7:06:43:24:2d:
61:c8:24:da:e7:3f:de:9c:e8:97:93:19:b3:a5:bd:
1a:6f:42:83:c5:f4:07:82:bf:fa:8f:71:0c:35:f6:
3f:43:31:a9:df:d9:06:85:ec:e3:af:96:a0:55:b8:
f2:2c:30:ff:ee:70:46:c3:ef:63:84:9f:81:9a:e2:
39:85:26:58:75:da:9e:72:84:54:40:96:dc:f8:2d:
02:a4:d4:1e:32:c5:14:91:4d:15:52:2a:ee:6b:b5:
82:b3:e1:fc:c9:ed:0b:04:25:25:ea:3e:dc:7f:6f:
f0:34:e5:5e:42:13:d0:e3:a0:77:e2:32:86:26:52:
e3:a3:6f:9d:6d:10:15:ef:b2:63:2b:71:0a:81:c9:
8d:02:3d:08:af:cc:c7:11:2f:04:a8:5c:5c:fe:9e:
62:94:16:b5:84:2c:82:9f:f8:8e:83:82:53:01:27:
a6:57:2e:bf:98:80:2a:5c:96:e6:be:be:fd:c3:da:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A0:F1:88:7A:BC:48:2F:9F:2E:63:3C:74:3F:E9:7D:DB:41:4F:34
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_6DxiHq8SC-fLmM8dD_pfdtBTzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.99.0/24
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7a:6b:ef:6d:bb:ed:bf:84:be:1b:8a:14:3c:3e:6c:eb:02:
74:60:12:ec:da:ec:1c:ca:73:3d:4a:a8:7b:85:38:19:3c:28:
32:be:95:73:ad:1e:2e:98:ad:28:80:cc:c9:dd:5c:29:cd:d1:
44:2f:02:29:5e:ad:8f:5c:5a:4a:a1:dd:db:b6:73:bb:60:d2:
43:5e:d5:87:44:71:4a:3e:7d:2c:a8:dc:bb:d1:48:c4:cd:fd:
b0:73:de:c2:8a:1c:e4:4a:a6:22:77:b5:ae:72:4a:2d:61:9b:
c7:6b:77:cc:71:01:a8:ae:cc:3b:1e:66:a0:fd:be:76:7a:a0:
f3:92:38:0d:0e:2a:26:26:1c:bf:7a:99:88:6a:b4:09:df:ff:
4b:a0:37:9d:3e:0c:1b:d2:e5:83:0c:ab:45:64:0d:ca:47:e8:
10:be:be:89:d2:94:c7:55:47:19:0d:28:d7:df:fe:f4:76:1c:
26:10:4d:05:02:b5:c8:33:8e:36:cc:a4:a4:2b:7e:bb:8f:f8:
a7:12:64:4b:df:75:28:44:b0:05:d6:5f:56:b9:8f:6e:ac:5a:
fb:8f:35:99:f3:3d:5f:03:09:7a:47:0a:e5:8d:b0:41:e7:d2:
04:4b:4d:f5:51:54:ec:43:3e:f6:9a:16:e7:53:3a:7d:45:3f:
22:df:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:03:19 2026 by rpki-client