Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w1Dex_FPLjuGLwW7EWwavWo0hZg.roa
File: w1Dex_FPLjuGLwW7EWwavWo0hZg.roa (raw, json)
Hash identifier: 9sBjQnV6wUdkSjkxO0xgRnbHc7/G1ijOdqPEE1fkyww=
Subject key identifier: C3:50:DE:C7:F1:4F:2E:3B:86:2F:05:BB:11:6C:1A:BD:6A:34:85:98
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D75EE3D964EA31304F444702BC50C6E86
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w1Dex_FPLjuGLwW7EWwavWo0hZg.roa
Signing time: Fri 10 Apr 2026 05:47:20 +0000
ROA not before: Fri 10 Apr 2026 05:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:75:ee:3d:96:4e:a3:13:04:f4:44:70:2b:c5:0c:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 10 05:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c350dec7f14f2e3b862f05bb116c1abd6a348598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:27:98:89:e7:4e:f2:5e:fe:f2:70:e6:85:
48:ef:32:12:4b:37:c2:f5:48:2c:b9:5f:f1:6c:0f:
d2:83:5b:2a:c4:4b:83:1b:02:f7:86:65:7c:2e:cd:
f1:24:9d:0e:d9:20:65:36:e4:b1:cc:ee:93:f3:8f:
fc:13:25:f3:69:ff:56:da:24:12:46:05:f6:e9:c4:
52:44:a7:5d:77:e7:f2:69:18:a7:75:d5:f2:30:05:
ad:76:99:98:20:ea:5d:0f:7a:ed:55:48:64:f1:b8:
4e:ff:31:03:b8:ab:d2:bb:e7:2f:48:2e:be:99:cf:
88:0b:31:db:d2:1f:ba:32:78:d4:09:b2:8e:b7:16:
3f:4b:1a:02:4e:b4:84:9f:b0:28:bb:25:dd:28:79:
0e:42:bf:b9:db:fd:8f:6d:f4:04:72:db:7e:d2:25:
80:35:c2:0f:01:e4:ce:bf:eb:ed:d0:51:94:41:0b:
e3:79:1c:ce:ad:56:12:d5:f1:cd:88:c7:77:34:e7:
57:b7:2c:31:cc:9d:93:05:6c:e0:3a:8a:50:dd:e8:
27:70:5e:e1:ee:83:d7:f4:1b:00:54:01:83:fd:8b:
a4:bb:17:a1:75:e4:82:b1:f3:91:05:3d:de:d5:ba:
e9:e3:c1:9c:be:33:35:f4:c3:f9:eb:22:5f:bd:b4:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:DE:C7:F1:4F:2E:3B:86:2F:05:BB:11:6C:1A:BD:6A:34:85:98
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w1Dex_FPLjuGLwW7EWwavWo0hZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b6:6e:66:0f:f0:b8:38:3a:b0:62:f0:93:e7:aa:34:ee:0b:
01:f1:ef:1c:dd:70:79:3c:f7:7e:1c:3a:ef:01:0b:8b:0b:46:
c0:2f:dc:22:fb:db:75:c9:68:61:c2:46:1d:dc:17:f6:88:cd:
97:79:e3:3e:af:9b:3c:d7:9c:9e:09:54:b2:f5:34:8e:a5:c5:
69:63:74:08:d6:9c:b8:e1:00:3a:8f:ef:b1:8d:d7:18:da:11:
11:3b:5b:96:21:74:d2:ab:f7:b3:33:50:fa:4c:4e:1b:4c:03:
63:3b:37:ba:a6:ce:29:08:d9:86:13:12:81:06:88:c0:3a:fd:
ab:3d:88:62:dc:5e:e7:86:b0:0d:1c:7b:9d:88:04:ec:12:a9:
fa:b6:b8:73:76:75:28:cc:1b:29:ac:69:4d:ac:a8:03:a6:3a:
3d:70:8d:d8:2f:7e:31:10:1c:73:1c:24:09:ec:44:9f:42:6e:
30:81:48:56:b0:94:66:9d:06:a8:db:35:a3:fb:cd:a5:f6:18:
ae:89:4b:50:3a:07:28:84:88:9e:82:be:e9:8e:b9:6d:46:29:
00:e6:10:12:8c:ee:1a:9b:63:63:19:12:64:f8:d0:5b:1f:6d:
88:a2:6c:54:de:27:90:61:93:1f:63:3e:f3:d4:e1:ea:20:36:
7e:a1:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:42 2026 by rpki-client