Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SUHUoZHWQCZ3sKRYLx64q_vIJMg.roa
File: SUHUoZHWQCZ3sKRYLx64q_vIJMg.roa (raw, json)
Hash identifier: R8G6W3mCMULu6iaSM1Y8oxfaEXwEpUpyDZzlLGjoQ3E=
Subject key identifier: 49:41:D4:A1:91:D6:40:26:77:B0:A4:58:2F:1E:B8:AB:FB:C8:24:C8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0B98AAAB3D77086C0E821F9974D92E5E7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SUHUoZHWQCZ3sKRYLx64q_vIJMg.roa
Signing time: Sat 19 Sep 2026 12:01:07 +0000
ROA not before: Sat 19 Sep 2026 12:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 163.5.8.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:8a:aa:b3:d7:70:86:c0:e8:21:f9:97:4d:92:e5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 19 12:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4941d4a191d6402677b0a4582f1eb8abfbc824c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:53:4f:16:b1:17:c6:b2:1e:e7:38:00:41:
ed:a8:a8:42:80:26:04:1e:79:fc:37:5f:d4:78:2d:
3e:71:da:78:05:00:00:26:39:85:8d:e5:10:df:92:
bf:2f:1c:66:ee:44:ac:0a:5d:78:d9:ed:cc:eb:53:
d7:e0:4a:94:7c:75:b4:93:3b:ec:4f:61:36:d0:fe:
db:7f:4b:6b:11:df:42:f4:b2:1c:34:3a:40:b6:2b:
26:c6:62:03:64:43:58:73:f6:d6:25:38:be:7a:1e:
32:87:69:10:5f:88:61:0d:69:67:97:d0:8b:92:8d:
90:1e:60:98:0c:08:81:f5:67:8d:c9:95:b4:c3:9a:
73:8a:84:85:17:06:91:bb:86:f6:f5:5e:47:5d:76:
95:ec:55:a6:b1:2a:07:bb:3f:72:e4:dc:72:be:96:
62:23:24:62:ef:a9:b2:42:ec:00:e3:30:64:ad:91:
13:2d:0c:8d:20:14:32:c0:61:c2:1e:88:9b:98:dc:
04:31:39:8c:91:b3:05:1c:b7:22:3a:28:8e:40:f2:
ff:cb:e3:b1:90:e6:27:6f:1c:a1:fd:d7:10:73:f1:
0d:d6:89:4f:42:7d:1d:d8:6d:12:e8:fd:2b:d7:06:
24:51:aa:b5:a9:ad:13:c0:0c:d8:13:90:ed:a2:c4:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:D4:A1:91:D6:40:26:77:B0:A4:58:2F:1E:B8:AB:FB:C8:24:C8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SUHUoZHWQCZ3sKRYLx64q_vIJMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.8.0/24
163.5.13.0/24
163.5.106.0/24
163.5.109.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1e:a3:76:09:f8:3a:e5:fe:88:d0:bf:fd:aa:6a:0c:45:63:
18:9d:60:83:05:c7:79:2c:14:cb:10:7b:b5:ef:14:9b:94:d9:
69:b8:0f:68:8c:da:92:ac:45:68:32:d6:b6:75:a3:1e:61:24:
a2:17:a4:c5:89:ad:a1:97:15:1d:c1:f7:29:62:e2:23:11:e9:
6d:07:4a:96:d8:92:60:8d:2c:8e:aa:21:e6:61:ae:21:c8:f4:
3c:b2:6a:8f:31:72:23:91:6c:0c:40:f1:64:df:57:bc:2f:42:
48:77:59:a8:b9:e5:1a:a1:2e:e8:04:89:77:08:43:45:a7:24:
64:a8:25:83:ba:39:4a:01:bc:11:db:0d:b9:2c:4c:70:38:8b:
58:a7:c1:42:f8:68:9b:ff:b0:dd:8d:b3:d6:97:48:7d:8c:38:
05:47:13:f2:1a:68:dd:d1:a0:77:f3:90:0d:1b:f2:5b:33:f4:
e7:3e:6a:19:5e:2e:9c:92:e8:95:0b:a3:ab:08:70:27:f6:6f:
34:17:c3:55:b3:30:c2:dd:1f:a7:7d:65:16:53:88:8e:79:31:
d3:aa:a2:9e:8c:9a:dd:73:77:f9:13:0d:1f:0f:3e:82:0a:d2:
f9:b0:f7:a3:dc:4a:47:f6:14:36:d5:8b:60:ac:0c:73:9d:7a:
55:fb:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:59:51 2026 by rpki-client