Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q8vfs6LEr9eoKXm4YAkB0wLARVM.roa
File: Q8vfs6LEr9eoKXm4YAkB0wLARVM.roa (raw, json)
Hash identifier: jvRr2VBJSU/+zZUjwOHq3TgV48PxK8fD2nMqQ4Zdbs0=
Subject key identifier: 43:CB:DF:B3:A2:C4:AF:D7:A8:29:79:B8:60:09:01:D3:02:C0:45:53
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D66F8AD116796DA41BB54BB799262D7E9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q8vfs6LEr9eoKXm4YAkB0wLARVM.roa
Signing time: Tue 07 Apr 2026 08:04:26 +0000
ROA not before: Tue 07 Apr 2026 08:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 163.5.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:f8:ad:11:67:96:da:41:bb:54:bb:79:92:62:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 7 08:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43cbdfb3a2c4afd7a82979b8600901d302c04553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:b4:e5:04:d4:97:88:e9:3c:3b:11:82:72:
9f:25:cf:26:68:7d:52:7f:bd:73:a5:cc:68:ec:c8:
dc:aa:b5:8b:10:32:6e:24:44:77:11:0e:d5:87:39:
ac:bb:ea:a0:03:cc:d8:40:f6:58:af:b9:22:d2:4f:
e2:49:b2:50:71:b5:14:32:ee:f9:4e:b5:d4:05:9b:
99:6d:b1:09:aa:05:97:7a:8b:8b:97:8d:f5:47:4d:
9e:5e:17:58:ca:e3:86:d4:2d:be:66:c9:47:b0:20:
49:11:f7:8a:7f:cb:15:2c:39:00:42:8d:20:1b:ab:
b5:78:46:57:27:8c:3d:cf:d4:a1:7c:c5:38:c7:78:
b9:e8:77:ac:9f:10:8c:9d:dc:81:da:d8:22:6e:28:
87:ff:3f:14:23:16:ae:5b:3e:e2:c5:34:9d:0d:ed:
ad:63:74:d1:b2:8b:6c:de:87:c4:e8:86:57:b3:9c:
d4:e3:98:ad:be:6d:b0:65:a1:2e:e9:80:7a:d6:ee:
9e:ef:db:42:a4:49:ed:2e:31:05:5f:c6:dd:18:92:
13:02:05:ab:4c:95:3f:d7:96:cd:0b:82:32:37:b4:
7a:83:6a:1a:99:77:24:91:67:14:4c:8b:d8:a6:93:
77:c9:89:5c:3b:93:a4:a6:18:9c:44:65:67:87:48:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:DF:B3:A2:C4:AF:D7:A8:29:79:B8:60:09:01:D3:02:C0:45:53
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q8vfs6LEr9eoKXm4YAkB0wLARVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
af:20:d3:32:aa:37:f0:4f:aa:3b:09:bd:69:05:ee:f1:0c:2e:
87:40:2d:a5:a2:88:da:ab:66:59:9f:8f:75:55:50:71:8a:aa:
29:6c:dd:9b:03:b5:6a:32:87:15:78:25:af:95:1f:eb:7f:27:
df:85:b8:6d:82:13:9b:16:cd:ff:0f:7d:f4:ae:0f:87:1e:88:
50:65:06:ff:6a:16:cb:c5:9b:f8:11:23:70:dd:2d:8a:95:db:
6e:77:dc:bf:35:59:d6:e7:e6:20:6e:b0:2e:c7:3f:e5:f3:cf:
38:3c:ba:11:c9:b6:dd:ea:13:56:cc:3f:32:12:45:5f:12:bc:
00:23:9c:29:4c:ed:9f:36:2e:32:00:b5:be:cb:57:af:68:c7:
68:e4:ca:23:45:94:f8:67:2e:e1:69:34:3f:27:e2:fa:62:3d:
f9:78:95:b2:b8:8b:c6:a3:66:56:d9:4a:a9:72:27:f4:e4:ba:
5a:50:6e:67:79:79:5b:27:96:b3:28:05:8e:91:ba:b1:49:ea:
e2:17:18:7b:62:28:05:00:46:95:eb:ba:ad:18:9e:16:42:c9:
36:3a:48:bc:21:e4:06:45:1f:b6:ce:dc:f2:21:ec:fd:86:ad:
7d:94:90:75:8f:41:47:84:21:bf:b3:7b:e7:57:91:5e:d5:13:
ac:01:54:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1m+K0RZ5baQbtUu3mSYtfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNDA3MDgwNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2NiZGZiM2EyYzRhZmQ3YTgyOTc5Yjg2MDA5MDFkMzAyYzA0NTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fC05QTUl4jpPDsRgnKfJc8maH1S
f71zpcxo7MjcqrWLEDJuJER3EQ7Vhzmsu+qgA8zYQPZYr7ki0k/iSbJQcbUUMu75
TrXUBZuZbbEJqgWXeouLl431R02eXhdYyuOG1C2+ZslHsCBJEfeKf8sVLDkAQo0g
G6u1eEZXJ4w9z9ShfMU4x3i56HesnxCMndyB2tgibiiH/z8UIxauWz7ixTSdDe2t
Y3TRsots3ofE6IZXs5zU45itvm2wZaEu6YB61u6e79tCpEntLjEFX8bdGJITAgWr
TJU/15bNC4IyN7R6g2oamXckkWcUTIvYppN3yYlcO5OkphicRGVnh0j5eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPL37OixK/XqCl5uGAJAdMCwEVTMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUTh2ZnM2TEVyOWVvS1htNFlBa0Iwd0xBUlZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVVMA0G
CSqGSIb3DQEBCwUAA4IBAQCvINMyqjfwT6o7Cb1pBe7xDC6HQC2loojaq2ZZn491
VVBxiqopbN2bA7VqMocVeCWvlR/rfyffhbhtghObFs3/D330rg+HHohQZQb/ahbL
xZv4ESNw3S2Kldtud9y/NVnW5+YgbrAuxz/l8884PLoRybbd6hNWzD8yEkVfErwA
I5wpTO2fNi4yALW+y1evaMdo5MojRZT4Zy7haTQ/J+L6Yj35eJWyuIvGo2ZW2Uqp
cif05LpaUG5neXlbJ5azKAWOkbqxSeriFxh7YigFAEaV67qtGJ4WQsk2Oki8IeQG
RR+2ztzyIez9hq19lJB1j0FHhCG/s3vnV5Fe1ROsAVT3
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:31 2026 by rpki-client