Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H9i8CPzLZj7rIAzrJJKF4x3qT74.roa
File: H9i8CPzLZj7rIAzrJJKF4x3qT74.roa (raw, json)
Hash identifier: IlidSC/yNVuaprZWbJMDgEu8WVMVFaM7lZ3uGiPVrXs=
Subject key identifier: 1F:D8:BC:08:FC:CB:66:3E:EB:20:0C:EB:24:92:85:E3:1D:EA:4F:BE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D2A8822F12A7B83C388F1CE70F2DE2B7B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H9i8CPzLZj7rIAzrJJKF4x3qT74.roa
Signing time: Thu 26 Mar 2026 14:24:18 +0000
ROA not before: Thu 26 Mar 2026 14:24:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206822
IP address blocks: 163.5.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:88:22:f1:2a:7b:83:c3:88:f1:ce:70:f2:de:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 26 14:24:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fd8bc08fccb663eeb200ceb249285e31dea4fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:63:50:e7:c5:2e:6f:d8:03:30:b4:67:79:
ef:5e:f2:bf:61:a4:99:3e:ed:b7:85:1a:70:81:28:
6b:ef:0f:15:fd:4b:53:fa:3f:e0:64:8c:d2:87:fc:
c8:6a:b2:f3:48:7d:d6:14:9d:96:5b:d0:62:1c:41:
76:c8:cf:86:a8:3d:42:85:11:59:f0:36:2b:fe:e6:
7c:6d:4f:8a:3b:e4:75:75:38:10:a9:bb:48:6d:42:
2f:9e:c8:6e:e2:1e:7c:18:18:eb:f9:34:f6:23:59:
9f:23:09:e7:13:7e:bc:51:36:3c:34:19:3f:c1:45:
c8:82:56:86:85:ca:ae:14:b9:cd:ef:74:fc:e9:1f:
bc:13:26:a0:af:3e:fb:6c:6e:29:0e:e2:df:fc:16:
a8:1e:d5:74:00:5e:f4:6f:f5:a2:ee:d0:42:e2:a5:
98:e9:62:b9:58:17:6c:de:04:bf:f4:53:30:ea:a7:
58:b6:21:92:e0:03:3a:25:0a:13:ec:48:6f:71:75:
b5:b6:a8:03:f2:e3:cb:d0:4f:bf:a7:d5:dd:3d:c6:
39:48:a0:01:1b:65:72:c3:f0:0e:96:08:36:a2:93:
3c:96:8c:cd:83:9d:1b:ef:b2:fc:04:d8:be:ca:c8:
84:29:ed:b3:df:7c:92:d8:b8:0c:5e:a1:07:c0:16:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:BC:08:FC:CB:66:3E:EB:20:0C:EB:24:92:85:E3:1D:EA:4F:BE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H9i8CPzLZj7rIAzrJJKF4x3qT74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:72:e9:e1:ed:37:9f:57:d2:f8:14:63:95:48:42:ee:cd:3d:
84:e7:00:22:cc:52:76:ef:8a:05:33:b7:68:38:3f:f4:36:8d:
d3:4f:97:82:28:a5:68:96:2f:3a:ee:2e:9c:73:61:74:ea:60:
97:dd:05:31:64:01:ca:60:ed:b4:04:71:e7:fb:a0:ce:d8:f0:
fb:fd:82:ab:56:c3:8e:31:e2:79:51:d6:38:95:b4:d3:2e:89:
3f:8b:8e:1e:21:be:56:f3:7d:b6:a5:06:57:7d:17:d8:59:df:
8d:64:4d:6d:26:ba:1b:17:f0:f7:d8:86:e5:31:f2:f5:0c:b7:
20:a5:d7:25:4a:92:98:36:2a:0e:a2:2d:06:00:e1:9d:62:e3:
07:4d:1b:07:77:ca:3a:f6:11:42:8c:39:11:dc:04:09:49:26:
29:81:0a:db:e7:1d:da:b9:63:e0:10:ab:94:9d:3d:65:1e:3d:
d5:8a:2f:11:93:31:3b:33:cf:c4:8c:f8:a7:a3:08:a2:66:06:
24:ef:8d:25:00:fa:89:05:37:0d:cb:cb:60:23:75:a5:37:12:
a8:9e:e6:c5:5c:7b:f7:7a:b4:15:59:28:ec:b4:1f:1f:d1:b5:
2d:c4:fc:84:f9:33:8f:44:59:f7:97:3c:e0:40:ec:e7:4b:6a:
54:43:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:54 2026 by rpki-client