Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hqZD6s57AmQfnlThV02Ue6thWAQ.roa
File: hqZD6s57AmQfnlThV02Ue6thWAQ.roa (raw, json)
Hash identifier: EYpJ8e1Uu5tlHSHgjxNkCJ/bP0sjhBgiGAALHQyS044=
Subject key identifier: 86:A6:43:EA:CE:7B:02:64:1F:9E:54:E1:57:4D:94:7B:AB:61:58:04
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D43E7CF3B0360FA0A5178ED983B38E699
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hqZD6s57AmQfnlThV02Ue6thWAQ.roa
Signing time: Tue 31 Mar 2026 12:39:18 +0000
ROA not before: Tue 31 Mar 2026 12:39:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.29.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:e7:cf:3b:03:60:fa:0a:51:78:ed:98:3b:38:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 31 12:39:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86a643eace7b02641f9e54e1574d947bab615804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:00:da:bb:e8:94:97:47:43:a4:61:2a:2c:
34:08:c1:00:4c:9d:e1:ab:4d:9e:2e:38:7d:7f:e9:
54:11:c6:f5:99:64:ac:5b:7c:ce:9c:50:29:56:10:
3c:6e:16:ca:38:be:cd:96:cb:b4:3c:f6:df:34:a0:
30:8e:be:ae:0c:a3:48:b3:2d:8c:33:3b:2e:25:7b:
25:ac:65:5f:c2:be:a9:85:da:67:af:7e:f9:00:46:
9d:2e:16:02:80:ff:18:9e:04:9c:6a:52:11:93:d6:
48:3a:f1:6a:1a:45:b4:b4:1a:cd:a2:72:19:af:59:
ca:77:45:f5:b4:9d:a5:96:87:d8:61:45:b8:ff:9b:
9b:66:3a:89:37:bb:5b:c7:1c:e6:77:b5:c4:fd:cd:
6e:02:af:21:55:89:37:3c:f8:a6:9c:6d:0d:05:97:
f0:f5:88:a6:78:34:a2:d7:d6:d5:10:7c:3d:b6:1e:
a9:16:52:74:94:d9:47:d4:47:77:3d:0e:9d:4f:16:
df:e0:74:cb:cd:20:b6:3b:cd:46:4f:bf:f2:68:88:
07:13:89:9e:81:89:75:68:8f:09:59:aa:1f:94:48:
d0:86:95:8b:1c:b7:bc:d0:25:33:7b:d5:52:ec:41:
bc:a6:75:94:99:ea:7b:e1:15:57:ed:20:2f:83:39:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A6:43:EA:CE:7B:02:64:1F:9E:54:E1:57:4D:94:7B:AB:61:58:04
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hqZD6s57AmQfnlThV02Ue6thWAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0/24
163.5.180.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fd:20:ff:d9:b2:af:c1:91:a2:71:4d:4d:7f:89:f0:c3:b4:
ff:b2:73:86:4d:54:a9:85:33:83:b4:c7:33:ec:ec:7c:fa:22:
7d:39:79:95:1a:a9:df:f3:c8:e4:cf:ed:dc:0b:14:9d:e9:5d:
e7:a7:98:e1:cf:48:67:ea:33:18:60:7f:5c:21:e9:0d:d2:83:
14:67:20:c1:6c:a2:d3:a8:63:e9:5e:f1:b2:fc:81:7b:07:c2:
10:37:29:f3:a9:ae:53:de:c5:ac:6b:e6:b9:6b:bd:dd:14:50:
0f:c5:74:a4:a0:0a:fa:77:bc:ab:a6:61:76:91:34:db:d4:fe:
d8:ab:a4:1f:ec:07:ae:ab:b1:f2:5f:91:03:be:28:b4:d4:12:
02:db:32:5b:63:94:9e:9b:65:1d:43:a1:7b:10:c4:7a:c2:bc:
9e:89:09:e8:a9:e5:63:d3:c8:54:fe:51:47:f7:c0:24:ff:ba:
c6:49:8e:1a:61:35:0a:e4:ef:e9:2d:fb:7a:97:36:59:19:38:
13:85:e4:d5:e6:aa:8e:27:7e:61:5f:7b:47:92:d7:96:4f:2d:
7c:36:74:f5:f8:e1:42:34:86:83:11:8b:ef:e7:b9:c3:ae:55:
c9:6c:94:fc:f7:18:b9:ba:a3:73:4a:ae:cb:f3:16:b6:50:2c:
51:3d:79:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:39 2026 by rpki-client