Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QYRbKxB4LKMbDzqhDfqSNeW9m1U.roa
File: QYRbKxB4LKMbDzqhDfqSNeW9m1U.roa (raw, json)
Hash identifier: n3Gvjo9G0X3+zTVjGdG1Mz8e5SnUTr6zsdADKO8Q71g=
Subject key identifier: 41:84:5B:2B:10:78:2C:A3:1B:0F:3A:A1:0D:FA:92:35:E5:BD:9B:55
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C765AE19579582A86DCA898D076BC2DA2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QYRbKxB4LKMbDzqhDfqSNeW9m1U.roa
Signing time: Thu 19 Feb 2026 14:43:13 +0000
ROA not before: Thu 19 Feb 2026 14:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:5a:e1:95:79:58:2a:86:dc:a8:98:d0:76:bc:2d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 19 14:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41845b2b10782ca31b0f3aa10dfa9235e5bd9b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:76:97:12:4c:a8:03:9b:dd:4b:91:5e:5a:
54:3a:9d:41:53:06:00:a4:e2:89:55:cb:25:62:d1:
b4:72:6e:88:d4:89:f3:24:08:2f:08:5d:0b:97:eb:
31:31:4a:bd:70:b5:64:6b:ed:87:da:99:48:95:73:
04:da:95:ce:f1:85:63:a6:57:8d:76:42:88:9c:fc:
4f:30:63:ba:19:f2:cf:fd:1a:4a:0d:2b:50:28:11:
88:7a:0d:b6:d3:f0:65:d4:6c:be:01:f1:d1:e4:e2:
4e:3f:1d:80:7f:8e:75:07:25:72:41:e5:70:97:ae:
93:94:28:2a:f8:99:76:fd:b6:82:6a:ee:fc:07:cc:
d4:d3:8a:2b:22:75:3d:3c:6a:25:af:b2:8a:d7:c9:
db:a6:3f:88:9b:a7:45:2f:ef:88:8f:51:5b:f1:2e:
06:ae:d2:e4:6d:c3:42:43:9a:cb:e6:b1:cf:b4:ac:
d1:d0:93:bf:81:0f:c7:db:f6:09:03:2f:dd:24:00:
c9:13:d9:53:3c:9e:ab:c1:5b:f2:fc:44:1e:06:50:
e3:c5:af:f2:7c:fa:a7:23:a1:97:ff:17:33:d2:fd:
7a:77:f6:47:a4:2d:8f:06:e5:b2:1d:27:28:5e:9f:
96:ba:b7:d9:98:fc:d0:ac:d3:2a:fc:85:7a:11:f0:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:5B:2B:10:78:2C:A3:1B:0F:3A:A1:0D:FA:92:35:E5:BD:9B:55
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QYRbKxB4LKMbDzqhDfqSNeW9m1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.193.0/24
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:19:65:d0:61:a4:68:22:e2:9f:00:ea:a2:a0:8d:9a:fb:1a:
2e:bf:30:ea:34:85:2f:8c:c7:ee:45:78:c0:67:b2:60:9a:01:
a3:06:fb:cc:2c:72:fc:31:a4:b8:f3:7a:5c:2a:fd:e3:43:26:
16:b3:ca:2e:b6:05:ae:00:9f:f9:e0:00:b9:d5:a9:45:e2:18:
78:61:0d:e1:21:05:ae:5e:14:00:45:c0:ee:22:fd:b8:57:42:
3b:25:0e:60:8c:40:66:de:d3:39:40:2e:37:ab:53:2b:44:c2:
ed:c8:ff:c1:e5:84:a9:ec:48:0a:4d:bc:06:a7:4a:dd:94:0e:
72:60:8d:36:3a:90:04:e5:38:43:95:a5:52:f8:99:57:d2:63:
11:e7:ea:d7:85:96:b0:c3:6d:7a:0e:7d:5c:18:9f:ec:4a:24:
8a:b2:b0:f2:e5:de:23:79:85:f9:35:9b:b0:dd:a4:e7:24:fb:
d0:80:22:ef:83:e0:55:da:7d:4f:e0:17:c1:ef:d3:a4:d6:c2:
89:e2:a1:07:17:8f:92:3f:e1:54:34:ad:05:bb:42:39:3f:6a:
53:4f:72:6a:81:cc:ab:01:ef:48:7b:23:01:41:86:66:81:53:
23:e6:09:1e:b7:d5:0e:be:7f:f9:35:0d:f9:72:d2:2c:06:04:
f0:d4:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:13 2026 by rpki-client