Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qk_WX5cSCRFki-ZxGlU53SbFRPg.roa
File: qk_WX5cSCRFki-ZxGlU53SbFRPg.roa (raw, json)
Hash identifier: 93zWUPb1n8uV6yIfYnDQzO+AkFyLgoCOABVHYXnPqW4=
Subject key identifier: AA:4F:D6:5F:97:12:09:11:64:8B:E6:71:1A:55:39:DD:26:C5:44:F8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DB5B983DED94F1573E6D7731F4A0B8946
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qk_WX5cSCRFki-ZxGlU53SbFRPg.roa
Signing time: Wed 22 Apr 2026 15:05:27 +0000
ROA not before: Wed 22 Apr 2026 15:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 163.5.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:b9:83:de:d9:4f:15:73:e6:d7:73:1f:4a:0b:89:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 22 15:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa4fd65f97120911648be6711a5539dd26c544f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:8f:43:9b:be:ef:2a:a9:9e:83:db:41:5a:
98:80:61:80:19:73:4e:6e:ae:44:6f:94:e2:81:70:
90:51:8d:9f:8f:73:df:b4:71:4a:1c:7d:bd:63:00:
80:93:b2:8e:9b:fd:34:02:31:db:25:89:94:9f:e2:
7f:af:42:6a:94:2d:61:e5:cf:76:32:9a:36:98:ca:
d9:28:29:2a:30:a5:93:4f:0d:d9:b0:e4:66:95:00:
3d:33:dc:0c:92:1f:54:e2:0a:60:51:f5:4e:58:b2:
08:c0:f5:a3:f2:a0:60:03:fd:67:c4:25:22:04:69:
9b:2a:ca:fb:e4:4b:0f:6c:50:4c:93:12:79:2f:f3:
79:4a:0e:84:e5:5a:cf:4c:f7:60:6e:30:ce:32:55:
9e:6f:48:6a:b7:62:c5:14:4d:7a:da:3b:46:9d:4f:
bd:8f:d5:45:27:a7:17:48:db:9f:b3:4b:59:f5:02:
d8:de:9d:ad:4b:80:0a:01:07:c9:93:07:47:b4:5a:
85:3e:b8:57:23:15:04:63:72:11:dc:61:28:47:6e:
56:67:5b:5b:6c:fd:b8:63:41:10:21:74:d2:30:de:
c8:9e:3c:b2:8b:34:8a:81:a3:44:e1:e6:59:37:ac:
d6:28:19:c2:74:71:83:41:8b:bd:b0:99:9d:0b:39:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:D6:5F:97:12:09:11:64:8B:E6:71:1A:55:39:DD:26:C5:44:F8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qk_WX5cSCRFki-ZxGlU53SbFRPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:45:ef:68:c6:c9:94:f1:be:a4:06:24:f2:08:83:5f:83:70:
89:d4:c1:02:25:4d:22:bf:ed:c6:10:78:55:02:68:a2:31:eb:
4d:4a:74:25:6e:4a:ef:1f:a0:dd:ec:1b:c2:b6:18:17:7f:6c:
7f:40:ce:d4:c3:0b:15:ff:52:0f:66:00:bc:6c:91:65:76:24:
d6:b5:15:16:14:73:dd:e4:ba:2e:53:3d:02:97:0a:95:9b:dc:
fc:f2:18:e4:f4:92:c6:1f:7a:c5:66:c5:0f:4d:e5:fb:14:53:
cb:dd:59:29:b0:e7:73:60:c4:2a:cd:93:5b:31:cf:d6:78:a2:
a7:c3:a7:82:d4:25:92:c5:55:5c:bf:69:a8:03:13:2e:f5:a4:
2c:93:17:78:f8:bb:4c:39:cd:8c:89:81:0b:47:0e:0e:4b:3e:
65:20:cd:ea:87:d0:d1:04:60:40:04:28:76:af:0e:7a:34:a4:
02:6a:a5:1f:3c:d8:e5:0e:44:68:ed:da:17:22:83:10:ff:93:
d9:bd:5b:fc:cb:2f:23:49:90:b6:d1:12:cb:9b:dd:87:ec:c4:
60:72:36:2b:be:93:7d:12:40:ea:d9:6c:df:41:98:3b:f4:54:
ea:56:8d:51:76:0a:cf:99:76:0e:c7:65:1c:c3:24:23:d8:f8:
98:ca:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:26 2026 by rpki-client