Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vw8ncSkyY9ORfMmik_gmUcSyePg.roa
File: Vw8ncSkyY9ORfMmik_gmUcSyePg.roa (raw, json)
Hash identifier: yz/VqNrCLJ55Rik/OqwfxyJCF+omNRoeYa8L9vz/7DU=
Subject key identifier: 57:0F:27:71:29:32:63:D3:91:7C:C9:A2:93:F8:26:51:C4:B2:78:F8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D499097B4ECF7050122C7B3F083FAFBE9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vw8ncSkyY9ORfMmik_gmUcSyePg.roa
Signing time: Wed 01 Apr 2026 15:01:45 +0000
ROA not before: Wed 01 Apr 2026 15:01:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.46.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:90:97:b4:ec:f7:05:01:22:c7:b3:f0:83:fa:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 1 15:01:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=570f2771293263d3917cc9a293f82651c4b278f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:78:f1:08:ad:78:04:61:bf:91:61:f1:c7:
d4:8f:fa:89:e1:92:45:96:3f:a6:d9:d6:b6:64:1e:
a9:e3:f7:b5:ec:59:ec:c0:27:35:ea:96:7e:ae:57:
28:ae:1e:f1:80:ca:05:d8:93:41:4f:5d:b7:fc:fb:
f5:61:5d:94:1c:db:46:7e:9b:da:3e:80:39:38:df:
1b:98:a7:72:37:2f:76:3e:f9:fa:2e:05:04:37:6b:
7b:fc:fd:8d:96:1c:59:ed:f4:15:dd:aa:a2:7e:4d:
b2:8b:eb:6b:4a:23:29:c0:21:40:16:a7:c6:49:07:
76:72:b4:a9:9c:07:99:cd:3d:e4:a2:6e:bc:93:87:
a3:44:8f:a0:1a:b6:d3:b3:a3:c8:e9:6e:68:ac:02:
46:43:d0:30:66:0d:79:00:2a:6e:e6:82:93:21:ab:
b8:80:6d:d5:98:b8:27:8a:44:76:d5:4d:a9:8d:e4:
d5:45:7c:be:e3:cf:34:1a:b7:67:11:7a:fa:20:bb:
bf:34:7e:fe:18:aa:bb:8c:70:ef:24:af:14:5f:e0:
87:ca:87:d7:86:2f:6b:91:21:95:8d:85:b8:21:ef:
9f:56:21:94:e4:8a:4b:a1:a0:4a:91:f6:39:79:00:
16:2b:1a:da:7d:d5:24:a0:72:78:46:75:dc:b1:c5:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:27:71:29:32:63:D3:91:7C:C9:A2:93:F8:26:51:C4:B2:78:F8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vw8ncSkyY9ORfMmik_gmUcSyePg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.46.0/24
163.5.82.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
29:8d:63:7d:80:b1:98:cb:ba:2b:08:57:2b:bf:89:e6:56:93:
6f:dd:be:da:d3:6a:07:06:0f:80:a9:b9:02:27:ff:70:5b:e4:
1a:90:53:af:4b:90:98:de:fa:10:0a:f7:00:a1:0d:7f:96:6a:
dd:f0:61:48:ac:cd:fc:d2:c2:fe:6d:04:70:20:58:8d:b7:4d:
45:c7:6c:0d:03:33:33:5e:37:13:01:44:9f:77:07:0e:c3:a9:
27:9d:d5:ff:f3:4c:f9:7e:0b:59:2d:d8:7e:55:f0:de:b2:cd:
1b:ab:53:6e:20:c6:97:af:79:07:fc:c4:b3:ae:fb:f5:4a:58:
94:33:0d:13:b5:90:4e:e1:01:9b:e8:db:bf:a9:9d:53:e0:a1:
1b:c2:42:a7:af:97:f8:c9:bc:37:c0:3e:33:e0:ab:c7:92:77:
76:84:41:b4:3f:7d:f9:2e:57:4f:f7:31:bc:ec:00:3c:60:2e:
4b:3d:c6:38:bd:29:f9:d5:81:6e:ec:66:39:b1:79:8e:7a:82:
94:e9:c9:c8:73:6e:05:d0:fb:0a:17:5d:65:02:e0:72:ad:80:
6c:9e:68:98:38:1b:ae:a6:5b:9d:87:bc:2c:c0:f2:42:ad:13:
6b:a8:5e:95:51:b0:eb:9f:1d:95:ef:7e:1e:20:ec:e1:72:dd:
13:57:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:18 2026 by rpki-client