Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lVVj0Q0YAhZCOa1vzWS-sWr0XF4.roa
File: lVVj0Q0YAhZCOa1vzWS-sWr0XF4.roa (raw, json)
Hash identifier: e6RhxnOVXxo0lqd1iG1wpgnZlpXo6Ek+ppf8QMh4kLQ=
Subject key identifier: 95:55:63:D1:0D:18:02:16:42:39:AD:6F:CD:64:BE:B1:6A:F4:5C:5E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A086215BD4D10CC4C691469F1CBE8E5561
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lVVj0Q0YAhZCOa1vzWS-sWr0XF4.roa
Signing time: Wed 09 Sep 2026 12:25:27 +0000
ROA not before: Wed 09 Sep 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 163.5.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:21:5b:d4:d1:0c:c4:c6:91:46:9f:1c:be:8e:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 9 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=955563d10d1802164239ad6fcd64beb16af45c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:10:94:36:c3:10:1e:54:41:43:d6:5f:6c:
d2:a9:4b:31:29:3f:50:7e:ae:8f:35:2e:68:54:9f:
54:4c:07:75:d1:4c:cc:d0:b3:a3:4b:3e:70:63:f7:
79:bc:c6:75:e9:23:65:1f:c6:0f:3c:79:d2:ea:aa:
5c:97:cb:c9:d4:a5:04:fa:ca:0a:5d:67:71:b3:4a:
e9:78:e6:92:18:a1:83:f4:4e:f8:f5:91:0d:ca:a9:
a7:79:15:c6:6b:9b:fa:ea:35:c3:7a:dd:66:2f:37:
5e:99:04:2f:cd:04:b0:f0:b0:3a:ec:a2:d4:30:7d:
b8:85:fb:4a:6b:f3:59:fe:4f:d8:75:91:75:48:d9:
e4:e0:38:3c:b7:0b:6e:53:c3:39:88:ab:7a:f1:45:
b7:5a:56:c5:e4:19:ef:e2:de:64:f1:10:05:a2:4a:
b6:67:e6:4e:d4:18:79:3f:3a:eb:e1:e6:6f:1c:86:
d8:b6:39:8d:89:ea:bb:14:78:0a:80:b9:fe:78:b6:
4c:99:b9:ac:6a:8e:f0:80:9f:5c:09:20:22:14:67:
ad:82:42:58:0a:e8:aa:82:45:97:b2:54:95:96:f9:
69:2a:66:f1:79:44:89:b4:8e:08:89:fa:b7:c2:9f:
c4:d6:bc:05:30:36:41:56:92:9f:98:3d:cb:1b:09:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:63:D1:0D:18:02:16:42:39:AD:6F:CD:64:BE:B1:6A:F4:5C:5E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lVVj0Q0YAhZCOa1vzWS-sWr0XF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.49.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b1:9c:7b:7a:c4:53:3b:d2:04:ba:0c:82:c2:8e:e4:5f:3f:
7d:08:c5:90:0e:3a:3d:2c:7a:27:e1:2a:96:08:23:65:59:f0:
a5:9f:8a:82:47:7c:a4:ba:dc:c2:85:89:e3:46:9b:91:55:87:
49:d0:a1:a7:60:36:5a:bc:14:13:0d:17:0f:e8:37:5a:f6:02:
c4:29:55:34:03:a2:ed:dd:b1:39:c2:d3:fb:8b:14:07:7a:d8:
19:51:c0:39:59:e5:8c:a7:f7:b2:30:0f:e6:52:ed:ad:9e:23:
60:a4:23:da:11:6d:52:32:dd:d3:5c:08:8e:01:6b:84:11:42:
02:36:fe:c4:31:1b:72:cf:7a:3b:ed:e8:d4:cb:ab:9f:0a:95:
a6:26:df:00:5f:c4:b6:55:8c:6d:47:d9:df:44:a1:ce:dc:21:
c9:02:db:4a:4f:1e:85:42:95:65:0d:f6:07:50:1b:f3:77:1b:
f4:e9:e9:fd:7d:44:1a:e3:68:97:45:fc:7d:19:8b:52:90:b9:
6a:6a:b3:71:d3:75:1f:77:82:5d:b1:a6:c8:21:be:d3:9d:93:
df:8a:3f:76:52:8a:99:23:33:e2:eb:88:8d:99:f4:54:ea:8b:
78:2a:a5:21:e5:79:61:d2:54:cc:80:1b:cf:7d:00:8e:7f:a1:
6e:46:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:30 2026 by rpki-client