Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1OszhPmIMhiRPz097Nk-orOwmlA.roa
File: 1OszhPmIMhiRPz097Nk-orOwmlA.roa (raw, json)
Hash identifier: +NAT+4datgmAEPtfTBIvdrqy0Fl56jwvEawhqkpMp+4=
Subject key identifier: D4:EB:33:84:F9:88:32:18:91:3F:3D:3D:EC:D9:3E:A2:B3:B0:9A:50
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C8EBFE8A8318EA944A74D698D8120BE83
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1OszhPmIMhiRPz097Nk-orOwmlA.roa
Signing time: Tue 24 Feb 2026 08:24:27 +0000
ROA not before: Tue 24 Feb 2026 08:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 163.5.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:bf:e8:a8:31:8e:a9:44:a7:4d:69:8d:81:20:be:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 24 08:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4eb3384f9883218913f3d3decd93ea2b3b09a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:99:5f:52:33:af:0f:52:b0:21:db:5d:49:
fd:e8:37:c2:23:0e:6d:0d:ba:da:85:b6:a3:01:d4:
eb:40:4e:af:e1:c3:ad:4e:ef:e1:8f:53:db:37:04:
da:b2:21:9a:36:29:33:96:90:a9:32:6f:d7:fa:9d:
51:a8:4b:a5:80:66:d3:4d:09:02:ba:70:45:47:41:
25:a1:64:8d:81:44:5c:c6:85:05:4d:24:2e:e3:3b:
ac:51:8a:e9:26:69:29:82:73:46:df:a9:ee:1b:0f:
45:2e:d9:44:02:6a:19:6c:58:b2:68:8c:f7:2b:a9:
2c:17:16:ad:0f:3d:1f:4f:f0:6e:a0:4d:67:3d:aa:
0f:42:b3:e8:2f:67:f4:df:c1:ac:07:a6:64:0b:af:
1e:64:28:cf:13:e6:dd:a0:15:f9:01:ee:57:49:df:
d7:93:86:8e:f3:e8:19:23:0d:3e:42:6f:b9:78:9d:
f6:2d:86:2a:60:16:50:92:15:64:e5:d1:50:5d:7b:
e8:dc:6d:c5:ef:7d:a4:ee:aa:21:05:77:81:a8:35:
5b:be:2d:df:c0:cd:a3:d7:9c:a9:3e:c6:70:eb:82:
94:63:ee:0b:7c:c4:8d:96:5c:30:5c:47:e3:36:0c:
c0:f9:32:41:c2:09:7e:87:d3:68:66:db:8b:5b:4f:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EB:33:84:F9:88:32:18:91:3F:3D:3D:EC:D9:3E:A2:B3:B0:9A:50
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1OszhPmIMhiRPz097Nk-orOwmlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.214.0/24
Signature Algorithm: sha256WithRSAEncryption
62:01:24:5d:9c:b5:01:30:1b:fb:5f:c9:d5:ed:21:13:a7:78:
72:61:08:08:85:8b:8e:d6:dc:74:00:db:00:b3:b5:e9:ab:c1:
ba:61:9b:22:fd:fe:f7:dd:34:c5:3b:4d:ee:ff:3a:d0:dd:90:
a7:18:7c:3e:02:f4:6b:1b:f8:7b:40:20:19:12:c5:de:fa:7f:
72:fa:43:66:bd:99:9b:89:40:1b:71:8d:02:7e:4f:a7:e4:c9:
04:15:f1:74:60:4c:9f:d8:b2:84:91:bd:b4:67:42:92:74:2f:
87:59:36:aa:32:53:6a:6e:bc:12:fa:fe:3f:c9:75:fa:f5:2d:
aa:70:b7:d8:c0:8a:dd:41:5f:ef:dc:03:c5:b6:4a:b1:02:73:
06:d1:16:e7:c7:1d:3b:1e:95:df:02:19:0a:8d:91:14:f4:63:
2b:22:f2:fc:c0:38:46:a2:43:2c:e7:c1:86:63:e8:1d:a1:ff:
f2:0d:a1:fc:46:cc:3c:81:40:f2:17:a7:52:ab:06:1e:0a:9f:
f5:ed:73:50:ec:5c:52:96:d6:c3:07:9c:1d:36:94:16:4f:cc:
5d:b5:36:2c:3c:f4:c3:f0:b7:37:69:a2:4f:dd:08:d9:aa:15:
ea:39:94:bb:68:e5:c7:ba:f1:57:7a:9c:02:f8:38:87:bb:70:
44:fa:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:07 2026 by rpki-client