Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bC5nSrLWPGfm7Y-DP_J4i6F16sU.roa
File: bC5nSrLWPGfm7Y-DP_J4i6F16sU.roa (raw, json)
Hash identifier: s/7cgQBFBUJnE/IDQHxMisTafaSRqr89+7PgJAmooLw=
Subject key identifier: 6C:2E:67:4A:B2:D6:3C:67:E6:ED:8F:83:3F:F2:78:8B:A1:75:EA:C5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C84B8C4C8C98CB120F8337A2A10DF8753
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bC5nSrLWPGfm7Y-DP_J4i6F16sU.roa
Signing time: Sun 22 Feb 2026 09:40:27 +0000
ROA not before: Sun 22 Feb 2026 09:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:84:b8:c4:c8:c9:8c:b1:20:f8:33:7a:2a:10:df:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 22 09:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2e674ab2d63c67e6ed8f833ff2788ba175eac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4f:c9:44:0a:e1:db:76:43:4b:0c:f6:29:e8:
53:84:ce:f3:f8:45:e7:d8:2f:c8:ef:16:1d:69:9c:
91:51:33:5b:6b:92:2c:1c:6e:52:7c:fb:ea:03:55:
3f:cd:2c:3a:75:16:f8:34:b2:e9:3e:9a:f3:56:67:
d2:7f:f1:46:c0:3a:97:04:0f:9b:40:95:3b:8c:c5:
49:fc:89:86:99:17:4a:b7:39:f9:fe:4d:16:c8:82:
e9:bc:82:73:95:35:c3:db:ae:55:80:80:1b:ef:08:
30:28:be:89:5c:1f:2f:7e:d9:60:3b:96:e1:fa:43:
6d:0e:d3:80:91:42:6f:e7:b0:ab:d8:2c:49:f8:1a:
a4:23:e3:1c:a7:98:91:01:ee:30:44:d3:20:f0:c5:
76:20:6d:32:49:15:b0:37:70:d5:99:f4:35:0a:a5:
9c:6e:cb:a1:98:93:58:98:31:a7:1b:7d:7b:ec:11:
01:80:9d:92:1a:0f:90:9f:0f:87:2c:1a:16:eb:56:
09:62:4d:02:db:ed:94:1e:49:c7:c9:9c:0a:df:f8:
55:20:64:5b:4f:0f:a3:9f:68:b7:31:36:52:20:90:
ce:99:80:47:1c:0e:7e:3a:d0:e2:9f:6a:bb:35:99:
52:b0:df:99:be:d4:50:fb:81:ed:9e:82:32:51:13:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:67:4A:B2:D6:3C:67:E6:ED:8F:83:3F:F2:78:8B:A1:75:EA:C5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bC5nSrLWPGfm7Y-DP_J4i6F16sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.18.0/23
Signature Algorithm: sha256WithRSAEncryption
45:f9:ac:92:85:a3:95:fd:bf:e2:5c:2a:68:94:2d:bf:41:4d:
3c:bd:44:d5:b6:83:13:b7:be:0b:a9:bd:49:fc:9a:cb:23:b5:
64:a4:05:df:f0:ac:26:12:76:80:dd:da:86:1d:b5:f3:18:78:
ba:c8:d4:cc:db:aa:1f:9b:cb:61:b9:af:57:90:4a:81:e0:7d:
11:1f:7b:f7:be:9b:51:9e:be:43:99:7a:0e:62:ef:4e:10:d3:
66:4d:d5:49:41:98:c4:23:b5:21:3b:8e:0a:a4:a7:59:b4:d4:
e7:44:98:38:1c:ae:74:cf:c8:42:a0:df:02:c9:d4:a5:b4:54:
75:56:8b:ec:22:83:70:1d:11:5a:38:d7:75:5d:5e:5f:75:2f:
77:f0:7e:8f:61:b3:c1:83:10:4b:76:49:26:f5:90:67:9c:00:
34:2b:11:fd:6c:d6:ea:35:39:9f:79:fb:e8:77:50:57:79:71:
3a:8e:9b:36:33:b9:05:cb:d7:ef:67:3d:74:f1:d4:9d:3a:61:
bd:dd:04:a7:49:fe:6f:0c:f5:86:0e:82:36:aa:1f:5e:1f:b9:
4e:fb:a5:97:69:61:eb:7b:17:2f:72:11:53:e2:d5:54:78:2a:
5d:0b:e4:d5:c1:1b:29:45:da:1e:e4:a2:ff:39:b0:6e:ae:e5:
b7:79:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:14 2026 by rpki-client