Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fB-nA_ZSzaKrHrn7fXyVH-dzFNA.roa
File: fB-nA_ZSzaKrHrn7fXyVH-dzFNA.roa (raw, json)
Hash identifier: Y/iJyUBicQY7b1bHc7fZNqKNM1FkYoLnxPmNg2OrteY=
Subject key identifier: 7C:1F:A7:03:F6:52:CD:A2:AB:1E:B9:FB:7D:7C:95:1F:E7:73:14:D0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C93E29BEC6EFC7107C705443B2CD891C7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fB-nA_ZSzaKrHrn7fXyVH-dzFNA.roa
Signing time: Wed 25 Feb 2026 08:20:27 +0000
ROA not before: Wed 25 Feb 2026 08:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141957
IP address blocks: 163.5.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:e2:9b:ec:6e:fc:71:07:c7:05:44:3b:2c:d8:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 25 08:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c1fa703f652cda2ab1eb9fb7d7c951fe77314d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:84:e7:fd:6f:1c:b8:6a:12:fa:a6:0e:9f:
67:ed:cf:2b:9f:99:0c:f3:29:08:7b:b6:92:42:3f:
d6:4d:7f:89:ed:33:bd:bd:4b:32:ab:77:fa:c5:75:
d8:26:e0:6c:bd:83:77:50:86:8c:ca:be:cd:dc:86:
ee:6e:53:02:60:14:40:98:6b:e3:35:32:a8:93:9a:
36:82:9f:82:14:c9:1e:8b:5a:4c:29:a2:70:4d:1f:
11:04:2b:9f:bd:73:19:e8:fd:63:23:f9:11:b0:db:
24:9f:b5:90:00:70:f7:3f:56:e3:44:dd:01:ef:3f:
49:77:9f:64:46:6e:2a:31:4d:a6:10:fb:f0:12:90:
1e:aa:ec:c8:ab:3d:15:e2:c9:1c:00:3c:f1:85:3a:
a8:87:56:9e:e6:46:00:d7:cb:b2:87:7f:53:60:78:
9e:d0:ab:b9:c2:ed:03:b0:17:9c:bf:40:b1:cb:84:
f8:ee:5f:d5:16:14:37:46:48:a0:bb:91:c5:f0:ab:
22:6a:b5:de:85:ad:10:03:45:df:36:c1:4d:8f:49:
32:e5:b0:dc:33:b2:b5:af:2e:fd:74:be:d1:96:8f:
73:8c:e8:99:5b:69:2b:04:8f:06:12:26:67:a2:ca:
56:6d:4a:cd:33:82:7f:29:e6:78:0f:ff:e0:1f:42:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:A7:03:F6:52:CD:A2:AB:1E:B9:FB:7D:7C:95:1F:E7:73:14:D0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fB-nA_ZSzaKrHrn7fXyVH-dzFNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b6:47:e7:e8:1a:8a:20:de:f8:99:6c:57:6e:c6:ba:f8:d4:
6a:44:ee:7c:8e:a8:16:3d:10:66:17:8e:c8:28:0c:b3:b2:be:
e7:96:09:7f:d5:35:48:15:8f:77:0a:0b:41:8f:d8:4a:bd:3e:
03:53:96:98:db:4c:ed:5c:aa:eb:c9:b2:29:f5:4f:6e:cd:9f:
97:fa:fd:6c:0e:4c:f1:0b:c3:37:2a:75:e1:7d:b6:b2:94:91:
44:4a:f8:48:3c:5b:57:a7:a4:fb:40:52:a0:9d:f5:36:71:af:
71:e3:5c:5f:cc:ba:57:74:89:e6:42:28:2a:0c:fa:44:da:f8:
ba:a9:8b:d0:12:fe:97:e5:05:24:5b:1c:0c:45:37:b9:8e:b4:
b1:7a:23:fb:1d:38:94:6e:28:1b:1a:4d:be:c4:e7:f9:05:ac:
e3:2d:20:c2:78:e8:b2:8c:4c:89:3a:77:a5:52:ab:f8:a9:fb:
a4:38:2c:a4:a1:18:3a:c7:63:6b:ff:83:e9:29:de:d7:fe:1a:
c8:ff:8c:26:01:66:22:a5:4c:32:9a:bb:64:a9:52:08:7d:b5:
8b:41:29:99:55:44:e6:90:48:04:cb:c0:a0:59:87:39:29:15:
10:86:1d:f9:a2:77:55:ba:4f:3b:6f:a9:bf:22:37:63:f4:b6:
64:a9:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:14 2026 by rpki-client