Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eBtUkgOhg-hJk1Sht61MU0tb8xs.roa
File: eBtUkgOhg-hJk1Sht61MU0tb8xs.roa (raw, json)
Hash identifier: 9OlMtbMV4gsmu/PyCyJApShR3jvE0Cu28w8z6UCBGto=
Subject key identifier: 78:1B:54:92:03:A1:83:E8:49:93:54:A1:B7:AD:4C:53:4B:5B:F3:1B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A18E2D74E8A63E314D2FAA180951EE14BA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eBtUkgOhg-hJk1Sht61MU0tb8xs.roa
Signing time: Fri 30 Oct 2026 18:58:26 +0000
ROA not before: Fri 30 Oct 2026 18:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218232
IP address blocks: 163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:2d:74:e8:a6:3e:31:4d:2f:aa:18:09:51:ee:14:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 30 18:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=781b549203a183e8499354a1b7ad4c534b5bf31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:93:b1:85:ea:e6:ca:6b:8b:4e:b6:fb:17:db:
56:25:31:36:42:58:e2:23:c4:2f:7b:bc:a7:a2:19:
94:72:80:5f:cf:e3:fa:4f:94:9a:bf:6b:ba:be:7f:
40:c7:bb:77:f3:0c:c0:4c:ac:2f:6c:14:5f:5f:92:
c0:64:85:1e:b7:4b:b5:f5:88:7a:ba:c1:65:3b:13:
0c:72:6d:b5:28:f2:01:85:ec:2e:42:59:6b:05:0b:
91:7f:cd:65:81:cd:73:0b:16:6e:81:44:13:1a:b7:
a1:c4:1f:1d:2c:bb:1b:c0:17:4e:ed:00:ca:5d:8d:
ca:15:b5:b8:e4:4b:61:36:0c:c4:eb:97:71:79:88:
7a:9d:f4:9b:12:60:0f:e7:52:ba:ad:04:20:d7:e2:
ed:5b:4e:ab:7b:e7:30:f8:af:4e:b4:24:09:ba:42:
1f:a0:55:2d:10:0c:a2:36:75:4a:3a:94:7b:01:d3:
f5:b1:d7:1a:a1:b7:1b:bd:48:86:b7:96:e6:32:1e:
79:d1:6d:7a:bf:cb:6a:1a:01:76:21:8f:91:3a:fd:
f1:a6:10:f7:d2:6b:94:75:93:7f:ad:f2:d5:f6:62:
58:ce:35:d1:c0:df:88:db:5c:56:c8:1e:78:6a:64:
75:ce:a4:57:26:74:a5:c1:e1:98:72:67:e3:46:f9:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1B:54:92:03:A1:83:E8:49:93:54:A1:B7:AD:4C:53:4B:5B:F3:1B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eBtUkgOhg-hJk1Sht61MU0tb8xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4b:44:76:b4:1f:b4:b2:81:31:f9:fb:7c:34:b6:8d:56:70:
f7:8c:75:80:63:ac:20:7a:71:f4:83:73:7d:a6:35:65:e5:6e:
53:76:62:8e:e1:6e:cf:72:96:00:2c:c9:32:62:12:6a:4d:c2:
d4:99:13:5c:b6:1e:ef:58:a9:51:4a:35:d1:7d:e4:1b:b4:6c:
19:7b:ca:28:1f:46:fb:3b:e0:e6:24:94:23:a7:66:70:51:eb:
62:e3:af:5e:a7:7d:4b:c6:ef:b2:58:25:55:91:68:23:e8:59:
7e:55:32:a5:05:d0:11:ac:48:55:ab:8a:8b:55:f7:11:53:1f:
c3:e5:44:8a:73:72:d6:97:17:1c:d5:d6:6b:b8:c2:fc:e1:2b:
db:ed:85:bd:46:9b:7f:b0:a9:1a:6f:25:bd:e7:86:84:bc:d7:
34:a9:94:25:1f:4d:8c:a5:6a:df:28:43:20:9c:be:6f:7d:a4:
ba:33:70:55:09:b7:61:39:88:11:7a:d0:ed:c7:c4:4c:7c:71:
2a:f3:1a:ec:f8:80:02:b1:7a:8b:e0:4e:0c:a5:15:c7:79:31:
37:77:32:3b:0c:e6:e1:0d:07:68:b5:05:0f:00:06:a4:4e:89:
25:bd:81:c5:42:f7:e9:54:2d:58:06:38:99:cd:38:a8:5d:47:
1a:db:49:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:01:48 2026 by rpki-client