Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rmN2fy9h5wfzVJC4_ij1tHfTv6E.roa
File: rmN2fy9h5wfzVJC4_ij1tHfTv6E.roa (raw, json)
Hash identifier: 4D6JohYYQhLVMTib87Qc85wzxxLPWS78KByF4Tb67iQ=
Subject key identifier: AE:63:76:7F:2F:61:E7:07:F3:54:90:B8:FE:28:F5:B4:77:D3:BF:A1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0862070C908BC415CAF1DFD979ACA8AD7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rmN2fy9h5wfzVJC4_ij1tHfTv6E.roa
Signing time: Wed 09 Sep 2026 12:24:28 +0000
ROA not before: Wed 09 Sep 2026 12:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 163.5.164.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:20:70:c9:08:bc:41:5c:af:1d:fd:97:9a:ca:8a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 9 12:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae63767f2f61e707f35490b8fe28f5b477d3bfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:b5:4b:8c:8e:f7:32:75:78:fa:94:4a:fc:
28:a9:08:2d:ef:3a:45:80:d7:96:b6:9a:ea:25:2c:
2e:23:4c:ce:c6:17:5a:b4:5d:e7:33:e2:90:61:39:
7d:67:b2:c2:5e:d4:b5:86:23:eb:56:56:df:4c:08:
58:76:7e:20:29:11:3c:25:f0:ef:93:32:fa:33:67:
a5:ce:bb:e3:c8:e2:0b:c2:65:16:84:ef:84:c6:a3:
5f:c5:c1:33:3f:08:f8:ef:64:c4:19:fe:8e:66:cf:
a6:f4:7d:0a:aa:44:7d:fc:17:fe:d4:c6:b6:dc:bb:
a8:5a:1c:78:17:b2:0c:da:86:f5:1f:54:95:eb:7b:
25:71:7c:b2:5f:1f:18:b1:98:a8:b1:e0:de:8a:05:
88:b6:57:d2:5f:98:75:8f:28:78:d7:68:c4:3b:f3:
3f:ce:c4:28:bf:0b:b5:18:73:9f:ec:e5:5b:9f:ca:
8f:0c:07:ca:fe:30:47:f8:a7:fc:ba:a4:41:c8:bb:
89:5b:4b:2f:e4:3f:42:ed:92:cc:41:5d:25:fe:36:
04:f2:6c:52:a1:46:3a:1e:c6:9e:c8:c3:c4:f9:e6:
5f:51:a9:49:12:b8:e8:68:9c:d7:84:60:d5:bd:f3:
2b:d8:75:b3:a2:fc:39:4e:64:cd:7d:c1:f4:76:f1:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:76:7F:2F:61:E7:07:F3:54:90:B8:FE:28:F5:B4:77:D3:BF:A1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rmN2fy9h5wfzVJC4_ij1tHfTv6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.164.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ef:8f:68:a7:80:0f:10:76:55:d7:5f:53:d1:39:06:ac:b9:
19:5f:33:4d:a8:0b:44:48:34:6b:2d:9f:f2:69:2d:7d:10:73:
53:07:dc:dd:e8:99:15:8e:9f:95:31:95:2f:8b:44:d4:7a:4b:
2a:0a:0c:fd:03:af:ce:a0:2e:a7:20:a2:04:2d:c1:b1:84:40:
b0:1e:64:56:2b:4c:38:64:9d:c8:e2:68:dd:c9:82:a4:7f:24:
e4:a3:6d:10:17:d7:a4:24:3d:e5:4b:a1:e5:ed:3a:5c:c3:0d:
1b:f6:6d:24:4a:78:08:0b:39:5e:b0:50:ce:85:8f:fc:44:97:
c2:2b:10:96:f4:c8:ca:dd:5c:91:7a:24:13:ef:6b:71:fa:35:
59:8a:1d:d7:88:2b:39:79:3d:cd:b9:a9:f1:5c:e6:63:4a:2e:
a3:fe:8b:df:f0:84:e7:3d:5c:01:4e:30:55:27:13:e8:99:0b:
7b:0b:bf:23:c2:3e:07:9f:45:54:fe:54:10:f4:96:8e:1f:f2:
f2:e4:4a:74:71:87:18:2d:96:ce:58:ce:d0:ad:1d:74:22:81:
08:6a:32:94:65:7b:4b:99:34:a2:80:65:e7:72:34:ab:50:dd:
bf:5f:1e:e3:da:bc:be:a9:33:63:d0:1f:8f:62:2d:38:1b:b1:
45:e5:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:20 2026 by rpki-client