Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L5nbfnLcc27G-CIxQoO4M8GUh9I.roa
File: L5nbfnLcc27G-CIxQoO4M8GUh9I.roa (raw, json)
Hash identifier: kVsRqZyDq/FuqNABLxAA6DxP8/NV8y437WWsBUdkrV0=
Subject key identifier: 2F:99:DB:7E:72:DC:73:6E:C6:F8:22:31:42:83:B8:33:C1:94:87:D2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C764EFB85814638EF71CFC2FC03472B07
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L5nbfnLcc27G-CIxQoO4M8GUh9I.roa
Signing time: Thu 19 Feb 2026 14:30:13 +0000
ROA not before: Thu 19 Feb 2026 14:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.33.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:4e:fb:85:81:46:38:ef:71:cf:c2:fc:03:47:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 19 14:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f99db7e72dc736ec6f822314283b833c19487d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:3f:d6:31:f6:a5:a9:f1:8f:63:e6:e7:c4:
45:8a:9b:92:92:c8:16:d9:cf:b0:cf:3b:dc:77:77:
d9:4e:7d:63:e5:fb:3f:6a:92:1d:54:6d:b2:62:73:
33:bf:de:16:1e:79:41:a3:83:ba:f7:d5:5c:cd:5e:
6d:b8:c9:d2:b4:c1:90:46:cd:f0:7c:e7:54:71:49:
a7:3d:ee:37:3a:d3:fd:13:c6:4d:6c:03:6a:92:4f:
ef:d2:6f:88:52:39:87:16:a9:a0:b1:e4:88:b7:f0:
97:08:2e:27:54:c6:4a:b9:66:a9:c5:c6:b9:8b:db:
69:1d:75:46:ce:f9:f5:fe:c8:b6:82:8c:8f:c0:b1:
5c:98:8d:21:cf:db:8c:22:3e:1a:09:9f:60:6c:da:
d3:eb:bf:4f:70:a9:19:65:50:9e:7a:1e:38:41:a5:
90:7b:76:0b:db:f8:9e:27:7e:b3:58:e6:92:9d:19:
68:64:3b:be:89:97:80:86:62:6c:58:6f:64:1f:b3:
2d:83:b8:11:aa:57:36:63:ab:69:f7:82:0a:b5:1a:
b5:69:1c:66:44:5a:6c:e4:b6:bc:c3:97:aa:17:1d:
8b:db:a8:4f:fd:63:8e:24:90:24:d6:bc:c9:d1:7b:
15:bb:7c:34:34:b4:6a:6d:ca:d1:63:ae:7d:2b:3e:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:DB:7E:72:DC:73:6E:C6:F8:22:31:42:83:B8:33:C1:94:87:D2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L5nbfnLcc27G-CIxQoO4M8GUh9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.33.0/24
163.5.61.0/24
163.5.211.0/24
163.5.239.0/24
163.5.245.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f8:98:ce:28:c4:97:6d:51:a0:9e:68:b0:0b:67:2f:72:1f:
c1:53:a7:7e:55:ad:dc:a8:aa:70:7f:54:60:b3:6a:59:e8:62:
af:c8:7c:72:6b:2d:46:6f:d8:8c:b2:92:71:52:0b:80:20:8b:
82:93:dd:02:83:cf:52:2f:10:c3:6b:27:0b:1e:75:7d:82:85:
45:1b:3d:21:7d:8a:5b:45:8d:6e:54:57:cf:cc:7e:8c:c6:a7:
a3:c2:a9:4a:23:ea:14:b5:b6:e9:f2:13:bc:f7:21:9a:ff:f4:
7d:48:48:44:96:cd:d0:54:35:c2:05:aa:30:7b:fe:42:89:53:
89:77:f8:ac:df:66:9c:ec:a1:10:ac:45:dc:d4:c1:40:8c:e0:
0e:99:41:b2:0c:45:ea:e7:f2:c5:68:18:6b:ad:f0:1a:af:61:
a1:fb:99:da:a3:84:9d:a7:31:91:40:c8:5f:7b:f8:81:c9:32:
41:8b:18:76:9b:63:0f:a8:8a:95:2b:4a:c5:95:0d:71:fd:68:
fc:79:bb:8d:2f:60:78:b3:13:5c:de:4f:49:58:67:09:0a:e9:
ee:24:eb:dd:65:27:e5:0d:70:9d:11:f6:22:d1:37:1b:b7:3c:
91:14:2b:3d:ce:77:be:0d:fd:b0:23:9a:3a:85:77:54:3d:ec:
5d:f6:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:30 2026 by rpki-client