Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rwmcodE7MSKbTwcTra522edgQF8.roa
File: rwmcodE7MSKbTwcTra522edgQF8.roa (raw, json)
Hash identifier: qR72hORJokDMmwfv2DXvKp0FrNcVc/jaN+6J3IuTSzs=
Subject key identifier: AF:09:9C:A1:D1:3B:31:22:9B:4F:07:13:AD:AE:76:D9:E7:60:40:5F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E53A67031D0D15487127490975AF3D6EF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rwmcodE7MSKbTwcTra522edgQF8.roa
Signing time: Sat 23 May 2026 07:04:37 +0000
ROA not before: Sat 23 May 2026 07:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153568
IP address blocks: 163.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:53:a6:70:31:d0:d1:54:87:12:74:90:97:5a:f3:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 23 07:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af099ca1d13b31229b4f0713adae76d9e760405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:37:7f:af:cf:7b:4d:8e:10:bc:fd:cb:be:
e5:f8:d2:5f:06:08:b1:e8:fd:23:37:3c:04:f4:90:
55:8a:a8:b0:11:1d:81:73:7e:aa:1f:a2:f6:b6:24:
8d:c1:7c:a0:89:e3:5a:07:37:71:dc:ea:27:9e:3f:
0e:d6:47:e1:68:72:9c:97:03:64:dc:12:cf:b3:ec:
c5:65:2f:6e:3d:f1:2b:92:e6:be:0a:c3:3d:21:55:
83:37:f8:16:25:c0:e7:f8:a1:69:72:6c:02:24:4e:
bc:c7:e4:06:98:88:15:0f:ec:6f:8d:03:1f:57:86:
06:f2:a3:0b:e8:47:07:21:38:79:8c:95:8e:27:a8:
ce:61:77:d5:37:94:73:9a:a3:ce:e7:6c:f0:02:5f:
7a:61:86:c5:80:53:5f:64:db:80:f5:0a:ca:0f:9d:
b4:ba:ef:d3:dc:c1:a2:49:dc:46:10:7c:b0:d3:3f:
2c:8c:50:6f:9c:aa:ea:39:f3:ae:8c:48:45:b8:c2:
c2:c2:c8:d6:7c:35:29:d1:91:be:59:1c:94:b4:c5:
f8:5f:cc:b4:13:c3:8a:ac:46:a0:35:f1:34:41:31:
3b:3f:d2:fe:18:68:9b:95:eb:9f:f8:42:d9:d6:f1:
bd:05:70:e3:fd:12:fb:a4:81:a4:54:f7:40:fe:fe:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:9C:A1:D1:3B:31:22:9B:4F:07:13:AD:AE:76:D9:E7:60:40:5F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rwmcodE7MSKbTwcTra522edgQF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fa:2e:59:da:dd:de:02:2f:b5:92:5e:30:37:fc:81:fc:9b:
6c:16:47:a7:09:46:ed:3a:6f:6a:b3:96:bf:25:c9:74:78:f2:
19:c3:df:bf:3a:35:da:ad:61:b3:76:a4:93:c1:89:7b:3d:e3:
5f:00:54:b9:5a:41:08:3f:b2:96:c9:dd:b0:d9:2b:d1:1a:34:
3b:85:5a:62:85:d0:36:83:94:63:c3:f3:8d:d2:e6:00:8c:3a:
70:5a:9c:e1:80:de:20:70:82:08:1a:f6:8f:56:b7:11:d8:09:
b5:ad:de:3c:b7:10:ba:f8:a2:f5:6a:01:49:a8:41:14:e2:c5:
94:65:af:9a:d8:37:9a:26:9d:3d:0b:61:50:e0:16:d3:d9:7e:
dd:28:6a:2d:79:dc:2f:30:47:fb:14:de:a2:23:7d:66:43:37:
21:61:b4:b2:e5:27:fc:ec:5c:cb:99:a3:a0:5c:7a:5d:e9:b4:
16:aa:37:77:58:e3:36:21:72:e1:bf:3b:55:a2:ec:4d:d8:05:
fd:07:b7:78:94:64:6e:73:41:36:ad:5e:24:de:82:f7:15:c1:
b6:14:f8:20:82:79:ec:01:64:cf:c3:9c:09:1b:c4:ee:e7:15:
d9:5d:0b:41:59:12:dc:a2:86:bd:92:50:63:69:f8:90:25:79:
71:4f:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:31 2026 by rpki-client