Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e0I9uv0u8nMuIQpU8Czof9nMHPg.roa
File: e0I9uv0u8nMuIQpU8Czof9nMHPg.roa (raw, json)
Hash identifier: Gv1i80VtFjCNfyEc86hxNzQeyPRBCgvAZoiojFWud9w=
Subject key identifier: 7B:42:3D:BA:FD:2E:F2:73:2E:21:0A:54:F0:2C:E8:7F:D9:CC:1C:F8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A159A73BAD99B74146D48F3CE3B96B69BD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e0I9uv0u8nMuIQpU8Czof9nMHPg.roa
Signing time: Tue 20 Oct 2026 14:11:34 +0000
ROA not before: Tue 20 Oct 2026 14:11:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 163.5.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:a7:3b:ad:99:b7:41:46:d4:8f:3c:e3:b9:6b:69:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 20 14:11:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b423dbafd2ef2732e210a54f02ce87fd9cc1cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:fd:b0:f1:d9:31:43:b4:ae:0c:46:c9:80:
17:5b:ec:3b:af:38:56:d1:82:ab:8a:35:92:75:0b:
a9:fb:c2:48:29:37:62:89:b9:7e:03:64:19:b3:87:
1e:d7:83:7a:cf:49:19:8d:39:fa:be:f2:e9:1c:74:
7f:04:bd:0d:fe:a8:83:f7:ee:2a:e2:7f:a9:21:e5:
e9:9c:85:d1:c8:44:dd:32:1e:c5:71:1e:67:28:be:
b8:1f:ac:10:94:40:a2:ae:1f:49:5b:09:c4:06:e1:
2b:a6:05:10:af:5c:4a:5b:5c:cd:95:63:2c:f1:0f:
be:7c:6f:a1:8f:38:2f:35:24:2c:22:80:48:34:29:
fd:02:5f:71:94:0a:91:c8:8f:a1:8a:4a:61:ec:54:
6a:e1:03:dc:b2:06:01:c6:70:5d:c1:88:1f:c1:a9:
02:77:38:fa:b6:ab:9c:c0:62:3f:5b:1f:c0:52:6d:
46:49:5e:85:35:60:a7:21:34:85:27:56:c3:30:4a:
bb:18:46:e9:e7:29:db:cc:9a:17:1c:f7:22:1e:0c:
9c:0c:56:1e:42:d3:54:4c:5b:ca:d9:8f:d1:14:36:
f1:d8:14:a7:ec:d8:93:30:5b:d5:98:03:70:5e:de:
a7:ef:a2:8d:f8:f0:04:c4:56:6f:17:4e:32:c0:f6:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:42:3D:BA:FD:2E:F2:73:2E:21:0A:54:F0:2C:E8:7F:D9:CC:1C:F8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e0I9uv0u8nMuIQpU8Czof9nMHPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ab:c3:ce:98:42:5a:6a:c9:74:58:ca:39:34:a9:6f:d6:85:
74:67:9e:70:a2:72:12:bd:bc:f8:dc:8f:43:01:72:8a:bf:f6:
9a:ab:70:77:23:7a:a2:58:6b:47:27:2b:95:0f:18:28:6b:85:
a4:70:63:4e:ff:8c:09:ae:fb:64:1c:ae:fe:e0:28:63:ba:d5:
c5:6f:04:40:1a:f4:3f:18:03:e7:01:bb:8c:1e:93:8e:b8:08:
ce:d1:a4:8e:49:97:fe:4c:6d:dd:5f:81:2f:35:9e:70:cb:e8:
95:8a:65:ba:76:28:e0:6d:11:0a:bc:84:fa:bf:b8:25:f5:fb:
a2:3c:00:7c:0f:b1:2e:e5:23:76:3a:b7:81:9d:6c:f2:b0:46:
b5:67:32:e4:db:c7:f3:83:80:8d:6e:ef:39:fa:56:3d:aa:a9:
fe:b6:99:d5:71:a8:ca:1b:5a:4e:34:4a:e7:87:09:0e:8b:10:
1a:5d:19:4c:09:3a:c9:e8:ad:e2:66:6c:fa:a4:ea:af:4e:de:
96:70:f5:a1:d9:49:75:1b:9a:33:d9:4e:71:53:f6:14:0b:5a:
31:69:a5:79:5c:67:29:bb:5b:fc:c0:50:f3:75:d2:81:53:02:
34:1e:05:c4:04:be:4c:d5:9d:5b:03:da:d5:7a:a8:d9:0c:68:
bd:b7:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:55:51 2026 by rpki-client