Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Hkr6lfIFxDXNhXdGZyS1Y5qeLjA.roa
File: Hkr6lfIFxDXNhXdGZyS1Y5qeLjA.roa (raw, json)
Hash identifier: Cdcn/KUUMXopQqWf+9Sfs1ogvdTz4VQGXBGfyR6eyG4=
Subject key identifier: 1E:4A:FA:95:F2:05:C4:35:CD:85:77:46:67:24:B5:63:9A:9E:2E:30
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A10120852BBDCB512363CD69B54818B2FB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Hkr6lfIFxDXNhXdGZyS1Y5qeLjA.roa
Signing time: Sat 03 Oct 2026 09:37:50 +0000
ROA not before: Sat 03 Oct 2026 09:37:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219091
IP address blocks: 163.5.226.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:20:85:2b:bd:cb:51:23:63:cd:69:b5:48:18:b2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 3 09:37:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e4afa95f205c435cd8577466724b5639a9e2e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:c2:a4:d4:a2:48:14:02:8e:52:c9:3f:54:
bc:3d:51:25:70:fa:ee:9f:e2:47:0e:34:0d:8b:dd:
19:32:94:92:dd:ad:73:ff:b8:e6:3c:95:85:eb:24:
de:0f:f9:b7:a6:5f:cf:e9:e7:fe:99:f6:29:c4:06:
a8:f1:c6:52:7c:fe:ac:75:76:72:a3:3f:f8:4c:45:
7d:c9:6c:b4:50:02:59:da:2b:80:2e:3f:26:29:56:
62:25:56:5f:20:d3:13:7b:3e:f8:3c:fa:f5:72:b3:
d4:9f:4a:94:59:e3:ea:d1:da:04:25:ef:5f:6f:a5:
09:9f:d0:ae:fb:23:cc:16:56:e9:8a:83:b7:87:61:
e9:04:96:0a:78:6e:e1:e4:57:8a:51:a1:29:16:3d:
64:b7:85:71:eb:f6:11:71:34:15:e7:d0:7a:06:1a:
de:c3:4f:1e:68:81:68:1e:9f:f3:1a:b7:87:aa:36:
0b:b7:a9:79:f7:f4:15:aa:d2:0f:c6:e0:b3:d1:4c:
8f:72:48:29:35:29:f7:db:ea:0c:f7:a9:4f:b7:dc:
11:63:af:db:4a:d0:86:a7:44:23:ee:b5:93:6d:db:
54:be:01:22:f9:53:d2:04:96:2f:0c:00:f7:7b:1d:
b9:30:e5:b0:48:72:ac:7d:57:27:5d:a5:94:3c:fc:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:FA:95:F2:05:C4:35:CD:85:77:46:67:24:B5:63:9A:9E:2E:30
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Hkr6lfIFxDXNhXdGZyS1Y5qeLjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.226.0/24
163.5.240.0/24
Signature Algorithm: sha256WithRSAEncryption
89:43:43:f6:0e:af:67:95:5f:d0:7d:e4:eb:9b:ab:42:cf:c0:
62:1a:48:82:70:f5:71:48:e9:a9:f9:3f:51:9e:b3:0f:53:c4:
33:fb:c8:85:53:7f:48:00:48:3e:b0:9d:26:1e:8b:5f:3b:2b:
18:65:93:ae:9e:9c:d9:b8:d2:44:30:c3:b7:a5:02:c8:02:5c:
de:de:05:a0:a8:07:a8:dd:43:b4:f9:39:a5:00:a1:ec:24:ca:
48:9e:c7:e7:7d:e4:e0:8e:4f:2f:8a:cb:f9:a8:03:73:20:80:
eb:44:67:c1:07:9e:cb:f6:75:b5:0f:5d:f7:65:56:c4:52:21:
6c:4c:d8:e0:38:13:2a:29:d7:8c:22:b9:99:46:9c:0b:0d:51:
aa:b1:87:1e:30:79:fa:aa:18:10:42:b5:5b:2f:be:93:c7:a6:
94:54:0f:3d:95:d4:eb:bc:59:ac:1a:26:e0:6a:e2:d6:6c:cb:
f4:b3:c0:25:c0:ad:aa:c2:fe:68:41:31:30:be:bc:e1:79:d2:
9f:6f:de:92:48:e5:aa:93:41:47:df:c6:d7:1e:12:7f:9c:ab:
e6:36:33:91:90:ec:39:bd:05:c7:df:30:f3:3b:e8:d6:3c:38:
b4:6a:9f:40:a9:b9:99:b1:07:1e:da:03:c0:9b:2e:e5:e2:74:
bb:c2:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:35 2026 by rpki-client