Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Mc_8_ASud0MLv3A2QW6StqPyq6Q.roa
File: Mc_8_ASud0MLv3A2QW6StqPyq6Q.roa (raw, json)
Hash identifier: x8r+6f8nBQ/SZqDXa/oinB1VUbO/38SQVvzSIEnL12Y=
Subject key identifier: 31:CF:FC:FC:04:AE:77:43:0B:BF:70:36:41:6E:92:B6:A3:F2:AB:A4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CA0AE5C7AA5227113D0AC7C54D31CAD9E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Mc_8_ASud0MLv3A2QW6StqPyq6Q.roa
Signing time: Fri 27 Feb 2026 19:58:27 +0000
ROA not before: Fri 27 Feb 2026 19:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19181
IP address blocks: 163.5.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:ae:5c:7a:a5:22:71:13:d0:ac:7c:54:d3:1c:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 27 19:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31cffcfc04ae77430bbf7036416e92b6a3f2aba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:60:ba:4e:c8:46:66:e5:da:71:36:98:ec:
2c:84:8d:a2:d0:fc:bb:a0:ba:7f:e0:46:af:c1:5f:
8b:ca:b3:75:30:5e:bc:a7:3a:28:88:80:ef:9e:27:
fd:7d:4d:38:85:2a:1f:45:d8:be:66:3e:04:22:4d:
13:df:aa:ec:10:26:38:0a:56:63:65:bb:53:29:c6:
c1:a0:13:a7:16:38:2e:3b:45:6e:38:02:1e:19:23:
c5:54:12:b8:4d:26:e2:92:36:be:e2:b0:ac:70:02:
4c:ee:2a:62:34:09:1a:1f:e2:83:af:f5:db:3c:3a:
7a:28:31:0a:68:a0:f2:b4:6c:f0:f4:c1:fb:a0:91:
6f:50:40:13:b9:a8:8a:6e:79:2a:8d:06:e8:53:94:
28:d5:60:2e:13:b1:ab:c4:b3:99:7a:a2:2a:e4:0c:
84:99:89:11:d4:9b:08:72:ff:9a:69:fd:09:4d:82:
8a:40:6c:0c:65:41:9f:10:91:b0:d5:fe:3f:d5:a1:
ec:53:64:a6:6d:0e:7e:63:82:7e:8b:51:b7:7e:4d:
7b:80:75:76:4f:03:57:be:74:b7:65:ed:a1:0b:e8:
14:8a:fb:4b:b3:c9:15:da:49:65:02:86:d9:30:66:
bf:5c:36:23:b4:bc:4f:a1:d6:1b:66:2c:b7:fc:7c:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CF:FC:FC:04:AE:77:43:0B:BF:70:36:41:6E:92:B6:A3:F2:AB:A4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Mc_8_ASud0MLv3A2QW6StqPyq6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.204.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e5:bb:53:98:37:4a:be:cc:62:d9:b0:ad:22:e2:3d:5e:05:
9c:d9:b2:80:1b:19:24:7e:35:1c:a1:5d:76:61:9e:25:c0:fc:
a6:0c:e6:7b:dc:27:56:0f:cf:57:d0:26:41:9e:54:2d:28:8e:
b4:50:67:88:8c:98:43:c3:c1:88:25:c6:ab:ae:7f:41:fb:f8:
5a:52:d1:ae:1c:1d:1b:d6:d1:c7:8c:fa:21:00:3f:5c:85:ed:
7a:4a:ca:69:e1:29:d2:f4:15:3e:38:65:8e:00:10:0c:57:b1:
c4:5a:24:86:2b:5a:f8:92:b5:a7:4e:54:a2:73:4b:f4:7d:12:
4e:0e:6a:7e:23:b5:4b:3c:cd:b0:cb:24:8f:6c:bb:97:17:5f:
a4:19:46:3f:1e:5d:51:33:ab:a4:e4:97:80:8a:12:c8:d5:de:
0f:43:e8:44:2f:70:8d:cb:90:bc:52:2c:fc:e4:df:f4:de:bb:
c0:e7:60:e0:d9:c8:20:63:e9:e0:11:55:41:7a:e6:d8:f9:03:
db:19:b2:4b:81:79:a4:f7:82:5d:81:f5:f1:af:4b:eb:6b:7d:
bb:62:70:a2:ef:b1:b1:94:cc:51:96:ff:31:c8:58:2c:7b:93:
e0:77:84:6f:3e:f4:ef:32:cc:9e:fe:db:b4:1c:6d:c1:88:9f:
98:0c:e2:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZygrlx6pSJxE9CsfFTTHK2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMjI3MTk1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWNmZmNmYzA0YWU3NzQzMGJiZjcwMzY0MTZlOTJiNmEzZjJhYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmARguk7IRmbl2nE2mOwshI2i0Py7
oLp/4EavwV+LyrN1MF68pzooiIDvnif9fU04hSofRdi+Zj4EIk0T36rsECY4ClZj
ZbtTKcbBoBOnFjguO0VuOAIeGSPFVBK4TSbikja+4rCscAJM7ipiNAkaH+KDr/Xb
PDp6KDEKaKDytGzw9MH7oJFvUEATuaiKbnkqjQboU5Qo1WAuE7GrxLOZeqIq5AyE
mYkR1JsIcv+aaf0JTYKKQGwMZUGfEJGw1f4/1aHsU2SmbQ5+Y4J+i1G3fk17gHV2
TwNXvnS3Ze2hC+gUivtLs8kV2kllAobZMGa/XDYjtLxPodYbZiy3/HyJYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDHP/PwErndDC79wNkFukraj8qukMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTWNfOF9BU3VkME1MdjNBMlFXNlN0cVB5cTZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXMMA0G
CSqGSIb3DQEBCwUAA4IBAQCI5btTmDdKvsxi2bCtIuI9XgWc2bKAGxkkfjUcoV12
YZ4lwPymDOZ73CdWD89X0CZBnlQtKI60UGeIjJhDw8GIJcarrn9B+/haUtGuHB0b
1tHHjPohAD9che16Sspp4SnS9BU+OGWOABAMV7HEWiSGK1r4krWnTlSic0v0fRJO
Dmp+I7VLPM2wyySPbLuXF1+kGUY/Hl1RM6uk5JeAihLI1d4PQ+hEL3CNy5C8Uiz8
5N/03rvA52Dg2cggY+ngEVVBeubY+QPbGbJLgXmk94JdgfXxr0vra327YnCi77Gx
lMxRlv8xyFgse5Pgd4RvPvTvMsye/tu0HG3BiJ+YDOJs
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:46 2026 by rpki-client