Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G3Oyt7t2zI8a7l0mPlmmQCPDt9Q.roa
File: G3Oyt7t2zI8a7l0mPlmmQCPDt9Q.roa (raw, json)
Hash identifier: s7lukEf7nARiLC4M+Udm2L8QLq5/rFflva4CqmHTxrk=
Subject key identifier: 1B:73:B2:B7:BB:76:CC:8F:1A:EE:5D:26:3E:59:A6:40:23:C3:B7:D4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0B98A3BA7605463041560BF70F57A65CA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G3Oyt7t2zI8a7l0mPlmmQCPDt9Q.roa
Signing time: Sat 19 Sep 2026 12:00:39 +0000
ROA not before: Sat 19 Sep 2026 12:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212025
IP address blocks: 163.5.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:8a:3b:a7:60:54:63:04:15:60:bf:70:f5:7a:65:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 19 12:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b73b2b7bb76cc8f1aee5d263e59a64023c3b7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:65:ad:d5:ec:4e:ed:11:d9:09:ea:18:22:
a3:b1:ae:17:53:2b:4d:a7:47:50:74:53:2b:ff:e3:
d4:79:a8:d3:99:97:5b:f6:ad:eb:46:8f:24:fc:4c:
4f:46:1d:a6:46:73:b4:43:78:a0:ef:ec:ff:6e:37:
f7:21:1e:67:4e:d4:fd:b0:33:e2:ef:c9:ef:8a:b4:
91:5d:65:3a:35:77:8c:3a:bd:b9:a0:d5:49:94:9a:
8a:34:fc:5d:2b:cf:21:4b:59:da:cf:52:98:87:9d:
0f:80:ec:75:30:29:57:f3:21:1f:a2:7d:c3:3e:1e:
86:d8:6b:e4:f4:79:cb:55:67:3a:37:51:ee:25:2f:
ef:f2:eb:98:5e:51:8b:48:28:aa:3a:17:f2:e5:e5:
d9:31:45:e0:f1:0b:8b:66:23:d7:a4:18:ad:c6:cd:
9a:3e:02:cf:9f:ff:c6:33:d0:51:17:b8:06:ed:72:
5d:43:22:88:cb:87:14:a2:80:33:f6:64:e5:8e:9b:
43:3e:2f:a4:5f:0f:8c:08:fb:d7:c3:50:c5:80:61:
41:e5:9b:6f:ba:aa:55:c6:12:ef:ef:dc:b8:74:6a:
1f:08:50:b9:3e:55:3b:da:d5:39:70:2a:8b:f2:f7:
04:ca:af:a1:39:55:86:0e:bf:4a:54:a1:f9:d4:91:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:73:B2:B7:BB:76:CC:8F:1A:EE:5D:26:3E:59:A6:40:23:C3:B7:D4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G3Oyt7t2zI8a7l0mPlmmQCPDt9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:44:ea:9e:57:70:89:a9:8e:75:9e:d7:b5:ac:96:0c:85:db:
5f:d4:1c:62:3b:47:f5:57:a1:52:8b:6a:46:e2:45:ec:e0:2b:
77:99:01:d4:1d:0f:fc:37:0d:77:e8:f7:60:15:46:ab:2c:ab:
58:3a:dc:f6:06:68:ca:c9:c4:08:17:2d:7e:35:6d:a2:a9:fd:
9e:a1:ac:99:c9:b8:19:30:16:50:2b:2a:60:d5:ca:a3:1a:63:
20:0c:6b:0c:2e:ba:c6:a0:91:5f:7a:35:42:e4:cb:05:fd:38:
6d:7e:2f:bf:b6:d9:39:ff:d0:68:b7:23:c0:37:02:10:53:ed:
d5:de:56:e6:9a:ee:c3:60:4d:fe:76:5d:02:43:19:f4:1b:13:
fd:b3:38:a2:78:ab:c6:b4:f0:a3:82:a3:27:3c:21:06:f6:42:
1b:5b:a5:aa:0c:39:6c:10:78:77:52:8e:25:f4:64:e4:d7:45:
af:58:52:c6:70:b0:6b:0e:96:67:0c:22:16:0f:1f:ae:36:4f:
0c:26:cd:8a:b2:0d:97:03:44:5a:88:13:33:ef:1e:06:f4:57:
51:e5:7b:28:dd:0e:8b:5d:39:23:22:93:93:c0:cd:b8:62:b4:
df:bc:ef:a6:0d:0a:dc:4d:cd:dd:04:d3:93:03:a5:e3:4a:94:
dc:0f:4c:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC5ijunYFRjBBVgv3D1emXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwOTE5MTIwMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjczYjJiN2JiNzZjYzhmMWFlZTVkMjYzZTU5YTY0MDIzYzNiN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRFlrdXsTu0R2QnqGCKjsa4XUytN
p0dQdFMr/+PUeajTmZdb9q3rRo8k/ExPRh2mRnO0Q3ig7+z/bjf3IR5nTtT9sDPi
78nvirSRXWU6NXeMOr25oNVJlJqKNPxdK88hS1naz1KYh50PgOx1MClX8yEfon3D
Ph6G2Gvk9HnLVWc6N1HuJS/v8uuYXlGLSCiqOhfy5eXZMUXg8QuLZiPXpBitxs2a
PgLPn//GM9BRF7gG7XJdQyKIy4cUooAz9mTljptDPi+kXw+MCPvXw1DFgGFB5Ztv
uqpVxhLv79y4dGofCFC5PlU72tU5cCqL8vcEyq+hOVWGDr9KVKH51JFluwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtzsre7dsyPGu5dJj5ZpkAjw7fUMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRzNPeXQ3dDJ6SThhN2wwbVBsbW1RQ1BEdDlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWXMA0G
CSqGSIb3DQEBCwUAA4IBAQAKROqeV3CJqY51nte1rJYMhdtf1BxiO0f1V6FSi2pG
4kXs4Ct3mQHUHQ/8Nw136PdgFUarLKtYOtz2BmjKycQIFy1+NW2iqf2eoayZybgZ
MBZQKypg1cqjGmMgDGsMLrrGoJFfejVC5MsF/Thtfi+/ttk5/9BotyPANwIQU+3V
3lbmmu7DYE3+dl0CQxn0GxP9sziieKvGtPCjgqMnPCEG9kIbW6WqDDlsEHh3Uo4l
9GTk10WvWFLGcLBrDpZnDCIWDx+uNk8MJs2Ksg2XA0RaiBMz7x4G9FdR5Xso3Q6L
XTkjIpOTwM24YrTfvO+mDQrcTc3dBNOTA6XjSpTcD0y7
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:38 2026 by rpki-client