Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BOOL1hMfogXTlA-j-gVidBlDeDs.roa
File: BOOL1hMfogXTlA-j-gVidBlDeDs.roa (raw, json)
Hash identifier: agPBqGx6Qh53SmRZn56R2HOvt7RDa01QCHFU++lgWrg=
Subject key identifier: 04:E3:8B:D6:13:1F:A2:05:D3:94:0F:A3:FA:05:62:74:19:43:78:3B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C765AE400A8700BA7C8A1052DAFA1C5A8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BOOL1hMfogXTlA-j-gVidBlDeDs.roa
Signing time: Thu 19 Feb 2026 14:43:13 +0000
ROA not before: Thu 19 Feb 2026 14:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216159
IP address blocks: 163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:5a:e4:00:a8:70:0b:a7:c8:a1:05:2d:af:a1:c5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 19 14:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e38bd6131fa205d3940fa3fa0562741943783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:1a:4a:4b:10:70:fe:43:79:ca:44:44:9c:
3e:b2:13:6b:89:9f:c8:ee:87:68:47:24:bc:bc:4f:
66:ef:31:c6:bf:5e:59:b7:86:9d:b8:e7:85:80:6f:
14:f8:3f:bb:13:58:f5:2d:2e:e9:ab:38:a6:be:73:
c5:0a:a2:62:72:22:e7:2f:e0:3c:50:8c:ab:c7:89:
15:4e:c3:30:f7:f0:ef:74:8f:93:57:0d:f0:72:ba:
53:89:64:76:8e:0a:2f:51:2f:f1:1e:9f:b1:e6:39:
aa:a3:2e:d1:96:75:b1:78:0b:e5:ab:84:71:0c:58:
f9:9a:f2:45:df:e8:fc:44:5c:62:1e:cc:6c:a2:e4:
df:73:47:60:e9:3f:75:90:a3:2f:2f:d3:21:99:72:
83:61:05:9b:4a:2a:7d:13:34:54:88:af:a6:a4:54:
08:96:da:23:ab:1a:e3:39:37:a7:1f:2e:f5:96:ca:
7d:49:70:38:e7:ca:96:c8:66:0b:a0:ae:be:41:ff:
e5:3f:af:90:d9:d0:96:ea:54:c4:a2:8f:3e:c8:5c:
6c:32:e7:e8:d5:d8:aa:04:53:d1:87:6c:8f:eb:0d:
73:aa:0e:29:ec:b1:94:4a:42:9b:7b:e9:c4:05:fd:
3f:74:dd:8e:9b:ac:b7:21:11:2e:30:57:10:d7:7f:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:8B:D6:13:1F:A2:05:D3:94:0F:A3:FA:05:62:74:19:43:78:3B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BOOL1hMfogXTlA-j-gVidBlDeDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.193.0/24
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:91:a6:5a:32:2f:3b:39:ab:27:6b:78:bd:b2:28:6c:fc:37:
9d:70:06:3b:0e:3a:04:1e:48:a1:22:cf:58:8e:b9:07:d6:b9:
29:a8:ab:6b:3c:05:c3:08:b8:e9:22:45:c5:8f:81:04:6b:ef:
a0:6b:fe:31:5f:16:f7:4b:a2:36:6e:56:df:77:98:c0:85:aa:
9a:d2:ad:e4:fe:fd:53:d7:d0:94:41:88:55:14:1b:7a:28:aa:
2e:41:53:17:8f:2d:bb:e3:a8:7c:7f:0d:5b:78:05:1f:b0:91:
1c:bc:af:59:8c:32:5a:d6:bb:40:f5:83:ec:de:45:5e:65:4a:
2c:b8:ba:22:46:cf:83:e2:14:2b:48:ae:df:35:27:08:a3:21:
cf:dd:53:a7:e0:ce:73:eb:8a:82:0e:99:b0:25:e5:19:0c:fd:
d1:b2:21:e3:53:c3:2a:48:1b:2b:7b:28:21:3d:27:98:8a:ef:
0d:87:aa:a0:6e:97:88:c6:78:78:45:18:57:a9:32:65:19:e0:
ea:11:9f:ec:15:e9:80:48:7e:ff:20:c0:64:a0:23:4e:77:8a:
05:5b:b8:b4:5d:78:6b:90:8c:d7:bd:08:04:2b:4f:45:0d:b7:
73:9c:cf:60:4e:16:25:6e:26:18:e3:1d:43:1b:7d:6f:da:97:
7c:08:0f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:30 2026 by rpki-client