Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k_VOhhjng9nh95WIDReGyQ1IDgc.roa
File: k_VOhhjng9nh95WIDReGyQ1IDgc.roa (raw, json)
Hash identifier: mnzhXU6vBjW/OjSlfLvmq2wU7cwRRZfRlHbB3UJvRqI=
Subject key identifier: 93:F5:4E:86:18:E7:83:D9:E1:F7:95:88:0D:17:86:C9:0D:48:0E:07
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E64828E8F5A509A1332869CBE6A1697A4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k_VOhhjng9nh95WIDReGyQ1IDgc.roa
Signing time: Tue 26 May 2026 13:38:58 +0000
ROA not before: Tue 26 May 2026 13:38:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 163.5.118.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:82:8e:8f:5a:50:9a:13:32:86:9c:be:6a:16:97:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 26 13:38:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93f54e8618e783d9e1f795880d1786c90d480e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:b9:0c:05:ce:b4:6e:88:50:ac:8b:88:f4:
9a:31:2e:e7:9b:6a:1d:4f:1a:94:8e:1d:d4:3a:58:
b2:32:2d:41:6e:f8:8f:48:1b:50:7b:2f:e8:4c:91:
bf:a1:4c:08:5f:75:13:45:6f:96:48:01:67:9f:fc:
44:6e:fb:de:90:54:cb:ce:85:7d:81:8c:33:b3:65:
ae:07:12:18:16:a6:4c:48:a8:9e:07:37:a5:95:a6:
a0:e8:eb:06:92:10:f5:9b:7f:c2:38:57:6f:ae:67:
e9:fa:76:8f:93:43:e2:70:bf:45:91:c8:64:da:76:
67:d2:f7:ca:f6:72:31:5a:31:24:f7:91:bf:5f:88:
3c:cf:5e:94:ab:db:21:8a:94:1c:87:6c:c9:8a:c5:
0f:95:c3:7c:d8:72:0c:f7:79:de:6a:44:a5:0f:75:
49:8a:42:be:b4:d5:e4:23:0b:b0:30:e6:70:23:8c:
12:4c:7a:99:aa:29:da:07:52:88:d9:87:d7:bd:8a:
c1:3d:8b:9a:52:f6:70:aa:21:36:77:83:37:c9:32:
4e:23:91:01:f2:37:88:b4:fb:3c:2d:e2:e0:d1:6b:
87:b2:0a:5e:ed:1c:5b:d2:4f:61:65:45:bb:6b:84:
46:94:a3:b8:bf:a4:e3:19:7a:a8:c4:46:f2:7c:b8:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:4E:86:18:E7:83:D9:E1:F7:95:88:0D:17:86:C9:0D:48:0E:07
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k_VOhhjng9nh95WIDReGyQ1IDgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.118.0/24
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4e:c9:d8:02:72:c6:60:fa:9c:64:da:cb:25:f4:3e:c5:84:
22:7f:9f:83:06:b5:e9:ae:2a:c4:27:07:22:25:bd:52:d5:cd:
e5:ac:0a:2a:76:16:27:d7:10:cc:b0:38:56:6c:c6:6a:40:65:
0d:b3:3d:2d:f8:70:3a:33:4e:28:5b:e4:38:92:46:81:61:0f:
79:3d:f5:76:0e:cc:36:21:f6:25:51:89:17:52:a2:7a:13:e3:
28:f1:46:c3:26:76:47:3a:a3:ff:1d:50:b9:be:cb:63:98:2e:
30:cf:a2:aa:f9:29:68:d9:71:de:85:8f:be:06:97:7d:08:46:
ce:76:02:3d:48:d3:05:bd:41:10:09:ae:d9:cb:63:50:e9:19:
41:61:af:10:11:29:4a:a0:a1:ce:0c:c1:83:9f:c5:69:f9:c4:
b4:01:7a:c1:9d:d3:17:94:90:b6:ac:8b:30:4f:63:98:c8:92:
96:14:d1:15:3d:63:ee:c4:58:3a:f6:e8:bc:0e:d8:7e:33:93:
98:bc:b7:ae:31:99:fb:32:83:c2:9b:98:e7:2a:e5:16:9e:d0:
2e:d3:10:b2:12:42:e3:57:01:67:5e:b5:75:cf:d1:af:80:35:
bb:1b:7e:68:bd:9a:e1:ae:6a:f4:cc:47:a3:d1:d4:b5:b2:8e:
73:2f:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:20 2026 by rpki-client