Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QDu7l2oQnqFo8pNe1Fiynl5YBRs.roa
File: QDu7l2oQnqFo8pNe1Fiynl5YBRs.roa (raw, json)
Hash identifier: omLqL2bxifMMewJ13+q22NmXU8pb+1NhcXcvnj2H8BE=
Subject key identifier: 40:3B:BB:97:6A:10:9E:A1:68:F2:93:5E:D4:58:B2:9E:5E:58:05:1B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D928D3431B780F4E9A44C3E538339AFE6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QDu7l2oQnqFo8pNe1Fiynl5YBRs.roa
Signing time: Wed 15 Apr 2026 19:10:20 +0000
ROA not before: Wed 15 Apr 2026 19:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 163.5.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:8d:34:31:b7:80:f4:e9:a4:4c:3e:53:83:39:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 15 19:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=403bbb976a109ea168f2935ed458b29e5e58051b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:cb:e9:d1:0a:90:be:2f:e0:fc:74:83:d7:
a9:d5:ba:34:14:70:17:01:8e:42:fa:55:a2:f6:5c:
f9:8c:9f:0e:51:0a:56:64:35:47:c1:8d:f1:49:ac:
e8:db:04:35:9d:b4:a8:76:be:e0:64:e3:dd:1d:3d:
f6:45:7b:5e:c8:1e:d8:b2:9c:c1:c9:b9:ae:89:bc:
2a:e0:38:cd:64:b2:98:2e:27:c1:f3:c7:f7:8e:34:
44:36:ac:86:16:c8:5e:88:87:36:f9:28:bc:99:a0:
43:5c:ee:37:d7:08:9d:98:82:84:b9:fb:71:f2:df:
11:dd:b4:0a:17:e0:fd:70:d0:ca:e5:25:6c:a5:32:
43:31:a6:8b:46:4d:95:67:64:32:12:52:12:83:8b:
00:26:96:44:b9:da:6f:c2:34:9c:ae:51:e9:7b:13:
72:a8:19:3b:6d:bc:fe:f5:ef:a8:46:ba:82:6f:ab:
cb:5c:3c:63:19:43:f8:8a:98:95:06:e8:da:8c:3b:
b2:e5:0b:7d:4e:41:6f:00:84:a1:c7:46:72:e5:df:
8a:4c:77:b5:42:37:fc:d4:22:21:77:b2:a6:5c:fe:
c8:b6:a0:43:47:7e:65:73:36:77:49:9c:27:14:d1:
fb:e8:b1:fd:0e:9c:54:0a:b5:bd:59:d2:8f:91:6a:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:BB:97:6A:10:9E:A1:68:F2:93:5E:D4:58:B2:9E:5E:58:05:1B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QDu7l2oQnqFo8pNe1Fiynl5YBRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e8:83:80:18:36:2e:a6:d0:13:e1:cb:2c:37:03:cc:89:83:
d8:bd:0d:2e:7d:77:f6:2e:36:fc:17:fd:2e:e1:c1:bb:e9:af:
1e:a3:a5:d1:8d:52:d6:16:27:34:76:b7:bf:08:d7:ae:05:0c:
f5:f9:70:fc:4e:98:06:c9:9e:65:10:2e:e2:19:a3:8c:8d:ff:
f0:44:fd:c2:bf:88:a7:a5:e7:98:61:ee:68:c7:80:84:67:c2:
bb:ca:1d:72:fd:b5:64:2f:65:c5:4a:bd:04:92:92:7c:de:c2:
87:ed:74:d6:fe:3c:f3:f8:5d:d0:d8:4d:49:c9:71:0d:3f:cf:
da:b9:8d:c9:d1:8a:a6:07:f4:f1:45:9a:28:bd:0a:b0:63:cc:
9d:42:b4:73:30:bd:5a:87:66:a7:a7:fa:20:ae:63:d9:ce:ab:
79:36:31:86:a8:3f:5e:16:24:ad:f6:c6:85:39:06:19:b5:ec:
a9:b7:dd:e0:a2:55:37:6c:c9:4d:04:11:95:55:8a:4e:f6:27:
c6:94:6e:89:4e:e6:b1:92:6f:fb:b2:2a:36:6d:90:db:42:ff:
38:41:39:1f:a4:d3:dc:ca:97:41:b8:e7:ae:ed:03:42:e7:d3:
47:03:28:2e:98:d3:64:33:e1:b5:e6:8b:21:c6:8c:4b:02:bd:
83:8c:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:11 2026 by rpki-client