Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eRMJZYPj-vKuU5XrED6T2E6ZVDc.roa
File: eRMJZYPj-vKuU5XrED6T2E6ZVDc.roa (raw, json)
Hash identifier: ie8dNCEX9/yLAKs3xxB1PvTfxNP+QxKWrha3pFBXHgs=
Subject key identifier: 79:13:09:65:83:E3:FA:F2:AE:53:95:EB:10:3E:93:D8:4E:99:54:37
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D499096D4E5D474499BD1FB9697256114
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eRMJZYPj-vKuU5XrED6T2E6ZVDc.roa
Signing time: Wed 01 Apr 2026 15:01:45 +0000
ROA not before: Wed 01 Apr 2026 15:01:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 163.5.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:90:96:d4:e5:d4:74:49:9b:d1:fb:96:97:25:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 1 15:01:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7913096583e3faf2ae5395eb103e93d84e995437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:6d:8d:2b:f8:a6:e5:16:1e:5d:9c:9e:7b:
d5:82:b7:2b:28:bc:51:e6:f9:01:34:75:55:72:bd:
5c:31:37:00:c2:02:4a:3b:72:cc:3e:e8:fd:22:8c:
00:0c:b9:78:77:c0:6a:71:a4:8c:8f:9c:79:5b:e7:
f3:d4:ac:7a:cf:8b:82:48:5f:26:56:62:37:68:24:
15:13:5a:70:48:66:a1:24:f8:1c:c2:f3:df:9a:a3:
43:9e:25:5f:69:44:57:6b:43:4b:50:a1:a2:b2:ec:
6b:5e:7d:d1:e6:19:c9:d2:b2:46:e6:c3:cb:f9:0f:
b0:2b:d7:2c:e6:0e:14:de:6e:b3:e4:16:61:74:22:
27:c9:af:47:ee:a4:c8:85:ff:82:6a:f2:06:85:61:
0c:e6:7f:ea:a3:c1:9e:b3:b5:fe:42:6f:58:26:c7:
4a:fc:88:f5:7a:bb:37:4c:a9:6b:84:29:81:f9:8b:
34:ab:4c:04:c4:33:2b:dc:42:10:ac:63:5e:09:5c:
94:3f:4f:16:27:37:04:52:ad:c4:88:aa:e9:0f:71:
b4:35:39:88:4d:a7:58:d2:9b:78:bb:3c:ac:4f:f8:
3d:a3:ca:9e:75:59:39:b3:55:09:cd:3a:f5:66:0f:
0d:f9:20:25:f3:b4:11:e6:5c:92:ce:62:3d:c9:93:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:13:09:65:83:E3:FA:F2:AE:53:95:EB:10:3E:93:D8:4E:99:54:37
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eRMJZYPj-vKuU5XrED6T2E6ZVDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.140.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a3:40:b7:a8:4e:68:b4:8b:6b:44:a7:f0:1f:e0:3d:7a:e5:
24:0b:3e:cf:d3:ac:85:7d:80:15:27:a9:a9:c8:dd:d4:22:52:
0f:14:89:1b:b7:7d:4c:6b:e1:2d:a1:d4:49:3e:93:5b:37:bd:
9f:17:b0:9f:cb:d8:cb:e9:a1:91:dc:4d:a0:b6:5b:2e:48:70:
82:05:d5:b4:a5:7c:a9:3f:eb:2c:75:75:d4:01:50:95:67:54:
67:9e:4f:77:34:95:29:fe:1d:64:54:eb:80:f5:74:58:ea:73:
e6:f1:50:73:d5:81:3e:0c:3f:b8:68:08:c2:44:bc:1f:2e:1b:
d2:59:0b:5f:87:29:de:38:7f:01:c7:04:d3:36:aa:eb:2d:f1:
dd:e5:2a:3b:21:37:f3:65:35:69:72:f6:a3:7a:52:08:6a:de:
3c:de:c5:68:66:78:75:1b:12:e8:8c:c6:d2:47:0d:db:be:14:
d7:7a:56:c1:de:43:46:4d:af:1b:07:a1:1c:d3:6b:00:1b:4f:
fc:f3:12:17:e0:db:78:c2:2b:1f:ce:45:a7:ce:c3:21:22:8f:
33:de:15:db:e5:88:2b:20:37:a3:8f:5f:ac:10:ae:89:fb:de:
d1:2d:49:02:0a:bb:fc:c8:c4:b8:6d:49:83:e0:db:5a:df:92:
15:94:5b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:27 2026 by rpki-client