Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D7fbtxjma54YiRjHu9GO3Hnwtv4.roa
File: D7fbtxjma54YiRjHu9GO3Hnwtv4.roa (raw, json)
Hash identifier: 2568Ek08v40YMPmXq7FZMCDo3GvEwcQa+HO46LYtEnU=
Subject key identifier: 0F:B7:DB:B7:18:E6:6B:9E:18:89:18:C7:BB:D1:8E:DC:79:F0:B6:FE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019EA5CD86EEDF5A20F12B65401D60DD58F5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D7fbtxjma54YiRjHu9GO3Hnwtv4.roa
Signing time: Mon 08 Jun 2026 05:56:10 +0000
ROA not before: Mon 08 Jun 2026 05:56:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 163.5.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:cd:86:ee:df:5a:20:f1:2b:65:40:1d:60:dd:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 8 05:56:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fb7dbb718e66b9e188918c7bbd18edc79f0b6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:4d:eb:88:83:88:c0:f9:0a:ee:96:20:3c:
45:9b:aa:5c:2e:b5:9e:94:74:ac:d3:9c:7d:07:88:
be:8a:b0:85:cb:3a:56:c6:2a:bb:fb:f3:98:ce:26:
36:89:26:fa:a9:0b:ce:e5:b5:df:ef:02:71:1e:e5:
b2:b9:c9:75:aa:af:12:28:d4:df:b2:7f:2b:5b:43:
36:32:c1:84:eb:2a:93:43:e8:28:8c:34:01:a2:2a:
e6:1d:f2:f8:6a:e8:22:01:a6:07:b8:10:f5:a8:e5:
87:c8:94:b0:64:13:37:27:41:d5:6c:87:80:7c:e9:
8a:32:10:3c:f3:8e:ea:71:35:5d:c4:99:62:3a:c5:
f4:90:5a:88:e6:b6:4f:55:0b:43:e2:df:74:e9:5a:
25:35:53:bc:92:31:31:8d:79:66:02:58:7a:30:ed:
ea:88:62:3e:18:d8:35:23:37:26:92:27:a9:8d:59:
4e:3c:cd:31:52:29:5c:40:55:0d:ac:29:a1:64:e4:
2d:fe:75:3a:a7:f4:87:5e:ad:bb:67:79:dc:9c:9c:
b0:d1:e2:09:54:80:31:f6:5d:c6:3a:76:79:e3:d8:
0a:77:7d:bf:7b:05:ab:cf:50:08:95:dc:e2:60:3e:
20:24:15:ae:58:c5:75:3a:ec:5d:4d:82:ed:c4:71:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:DB:B7:18:E6:6B:9E:18:89:18:C7:BB:D1:8E:DC:79:F0:B6:FE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D7fbtxjma54YiRjHu9GO3Hnwtv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6b:e8:a9:f5:bc:e9:14:07:e6:cd:b1:be:12:62:6e:e1:6e:
5b:91:eb:a0:5a:df:ac:ef:73:95:a4:4e:52:3b:a1:6f:8b:ef:
62:ec:6f:59:41:23:44:f6:f1:36:77:8f:5d:5b:74:20:f3:a2:
91:e7:a6:d6:b1:dd:49:a4:67:7b:32:0c:45:c7:e7:d4:14:bc:
f3:e3:c9:be:f1:2b:6a:49:f8:8d:74:28:d5:a1:27:f3:0c:38:
27:93:67:f8:f3:06:09:5e:8f:ac:16:98:2b:b6:8d:23:59:7e:
55:20:dd:a4:1f:56:6e:de:36:3a:70:c8:0e:23:2e:06:f2:df:
03:91:d8:e7:09:6f:81:a3:76:6f:66:14:e4:27:b7:93:a4:08:
ee:42:9a:cd:3a:9a:e4:51:ef:b7:b2:2e:b0:7d:87:54:20:a3:
2b:86:2b:3f:3f:37:98:49:4e:6b:b8:d1:ea:7e:09:70:ea:dd:
8e:e4:81:e9:36:39:36:80:05:da:91:6d:0e:70:51:35:6d:b8:
fd:4a:d2:a0:37:aa:a1:56:65:92:61:a6:17:6c:ab:7b:93:e7:
83:15:8a:75:65:92:99:64:50:da:70:a1:b8:c0:f2:91:85:d7:
15:0b:c5:3d:4f:45:8e:13:cd:90:49:57:07:6e:1b:2f:f0:cc:
12:a9:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:40:15 2026 by rpki-client