Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lELl1zPwkmOOHlckPC_LE2ZRTtM.roa
File: lELl1zPwkmOOHlckPC_LE2ZRTtM.roa (raw, json)
Hash identifier: gmfiaSWY6RlXSxZmxkZY97biCSXFmH/bSUuWf7WT1aA=
Subject key identifier: 94:42:E5:D7:33:F0:92:63:8E:1E:57:24:3C:2F:CB:13:66:51:4E:D3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A163C758E1DCC119560379061F3C94C789
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lELl1zPwkmOOHlckPC_LE2ZRTtM.roa
Signing time: Thu 22 Oct 2026 13:22:51 +0000
ROA not before: Thu 22 Oct 2026 13:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 163.5.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:c7:58:e1:dc:c1:19:56:03:79:06:1f:3c:94:c7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 22 13:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9442e5d733f092638e1e57243c2fcb1366514ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:4c:a3:f5:aa:dd:f3:9c:8d:54:d0:27:e0:
2c:a6:4c:e3:41:01:da:3f:29:80:4b:0c:32:e4:dc:
32:60:56:9a:87:81:b9:3f:20:f3:ec:6a:e5:b3:3b:
60:9e:42:c4:34:39:ee:f5:70:64:aa:de:ad:d6:a1:
9f:97:c1:e7:92:4f:d4:ac:26:e3:24:c6:61:7c:56:
3a:fc:2f:4d:b9:54:55:2d:80:a6:ad:8d:33:ab:67:
9a:d3:43:2f:2d:64:05:7c:82:ba:4c:d2:d4:8f:a8:
11:1c:47:d6:b3:0d:36:ff:ea:ba:4f:e0:fa:d7:cf:
36:43:e6:7a:52:9b:fa:ee:03:fe:86:b1:a6:f3:a1:
36:13:f3:cb:e3:f2:70:c1:12:e2:9a:d2:90:bd:05:
a7:ae:92:14:10:4a:74:2f:fc:a7:72:ef:f7:0b:46:
b6:e9:39:86:f2:ae:e4:ff:28:72:4c:97:18:fc:64:
9f:67:06:6c:37:78:fa:5a:a0:99:9c:4a:4d:1f:3c:
84:3f:83:b6:4b:1d:42:bf:4e:93:82:35:7b:62:da:
a9:26:50:26:9a:28:92:73:cf:51:86:41:9c:d4:e6:
43:7c:e6:56:99:cc:e2:b1:33:d5:2b:3c:bb:e5:d6:
e2:6f:6d:cf:3c:ca:b5:78:c9:4a:69:c5:f8:e8:a2:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:E5:D7:33:F0:92:63:8E:1E:57:24:3C:2F:CB:13:66:51:4E:D3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lELl1zPwkmOOHlckPC_LE2ZRTtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c0:58:04:d0:c7:fc:3c:16:d9:7d:7b:34:ac:31:c5:4b:ea:
ec:5b:de:67:35:aa:58:c9:ff:15:e2:1b:e0:94:9e:f4:56:91:
f8:52:c8:d0:57:c1:3e:49:3e:2e:e8:45:43:12:f4:c3:07:3f:
b0:9d:9c:2d:09:d0:cb:e8:21:1f:ab:45:0d:c3:b1:a0:9c:13:
11:b6:ef:d0:42:fe:32:5d:f6:6d:ac:d6:2c:9c:fc:ff:83:ba:
e1:69:6c:84:fd:f9:ef:59:78:d8:9e:f4:91:39:47:38:22:e0:
1f:74:68:20:af:b9:c0:4f:89:af:52:f2:81:1b:ca:0a:52:72:
8c:91:14:53:eb:7f:cc:98:df:09:14:06:b8:07:4a:05:e1:c8:
3d:d8:07:8b:5e:50:a7:ba:f4:7c:a6:f1:1d:4d:b7:32:e0:21:
d5:46:6c:34:51:20:5e:7b:8d:37:e4:df:74:22:8b:8d:9c:84:
7d:f5:75:55:67:cb:2a:18:7c:79:a8:8e:5e:f4:51:86:0b:05:
0d:73:96:0a:35:c7:cb:b9:e7:c5:57:74:f2:c7:25:cd:c9:19:
a7:85:38:50:94:00:68:38:07:e8:72:cd:9b:a2:60:0b:17:56:
4a:e1:fa:56:32:53:73:24:0c:8f:61:77:68:a9:1d:eb:26:ea:
1e:83:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:17 2026 by rpki-client