Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_AZ8Uif34fQoJoudzV_PiD9GjlM.roa
File: _AZ8Uif34fQoJoudzV_PiD9GjlM.roa (raw, json)
Hash identifier: uASr59I3ls84TuB8kJVf32LxRhR8RhdksMn4bTlv7oU=
Subject key identifier: FC:06:7C:52:27:F7:E1:F4:28:26:8B:9D:CD:5F:CF:88:3F:46:8E:53
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C4C2E636621EBA90A94E5CDB575ED80FE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_AZ8Uif34fQoJoudzV_PiD9GjlM.roa
Signing time: Wed 11 Feb 2026 10:10:34 +0000
ROA not before: Wed 11 Feb 2026 10:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:2e:63:66:21:eb:a9:0a:94:e5:cd:b5:75:ed:80:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 11 10:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc067c5227f7e1f428268b9dcd5fcf883f468e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:03:1c:3a:8a:a7:06:a4:4d:32:12:f4:95:
72:d6:29:a4:15:ba:62:76:3a:69:a2:7b:8f:c9:2d:
ff:07:b0:9e:b5:5e:99:c7:81:2f:f2:6b:5c:2a:1a:
c8:4b:27:e9:21:be:e4:98:14:4e:57:2c:c5:ea:f5:
83:df:89:d8:79:fd:b0:a0:1a:a4:3e:bd:5c:a6:b4:
b0:96:9b:5f:b7:00:92:b3:6c:e3:b4:9c:5e:aa:3f:
f1:8f:3f:77:45:21:41:ce:3c:ec:2d:b8:de:95:57:
93:b6:6e:0c:cf:2d:83:a1:16:b9:b3:08:d5:c0:51:
27:2c:ce:9a:12:01:b1:fe:88:22:7e:d0:ab:f2:10:
d6:93:6a:9b:21:02:ab:d4:77:7e:09:1f:31:6e:c6:
00:32:cf:b0:f6:e1:d0:99:b5:e1:29:b1:f9:39:4d:
6f:8f:40:f2:d5:22:05:0f:33:80:91:85:9c:fc:15:
b5:ab:c0:78:f4:c9:4a:1e:ae:6e:31:b7:a2:a8:87:
ff:6b:e5:fe:0e:3e:2b:ff:b8:ae:a0:8b:a6:09:f2:
6c:82:b3:40:8b:8b:45:f2:62:54:db:d1:a2:29:58:
49:e5:a9:4e:5c:a3:66:23:6c:36:cc:b1:8e:f7:c3:
e8:63:94:f9:eb:b6:78:9d:cc:48:ce:5e:ad:d1:2c:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:7C:52:27:F7:E1:F4:28:26:8B:9D:CD:5F:CF:88:3F:46:8E:53
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_AZ8Uif34fQoJoudzV_PiD9GjlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.82.0/24
163.5.87.0/24
163.5.95.0/24
163.5.99.0/24
163.5.123.0/24
163.5.136.0/24
163.5.181.0/24
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:43:be:37:f9:ff:c1:bd:ee:6b:c9:95:89:b6:6d:3b:28:90:
d7:a7:01:46:e8:ef:91:ed:1b:0b:31:91:f6:51:3c:9a:8c:9c:
d6:e8:96:0f:46:0b:10:c1:81:f3:9b:5e:78:ae:b6:4a:42:e5:
da:54:7e:2a:b7:b3:5f:49:f9:6c:28:e4:ed:e3:7b:d4:e9:9b:
08:96:50:87:88:33:1f:8d:0b:f8:c1:71:11:7d:b3:44:99:a4:
3b:37:6e:ef:2a:0b:85:6f:b7:7a:18:38:a1:02:91:8d:cd:0e:
fc:15:d9:18:67:94:4a:ad:c1:82:41:50:2a:71:f3:86:eb:f4:
50:b6:1a:ac:e2:75:f8:94:0e:22:ee:24:72:e0:67:93:59:6d:
b4:90:79:4a:c7:54:df:3c:19:f6:72:68:1b:3e:8f:8a:2a:ce:
29:cf:71:a4:ba:e6:0b:15:41:e1:03:b5:dc:85:24:80:4c:b3:
1d:60:d1:e4:bb:9e:64:b1:8f:91:b8:e7:45:5f:89:c6:fe:95:
e3:c0:dd:ef:6d:0a:f9:da:17:8b:b4:e7:ce:e7:20:d5:cf:88:
4a:c0:ea:18:ab:2b:b0:4c:9f:e0:fd:8d:69:ab:77:76:50:60:
e6:f0:16:4c:af:14:de:a6:32:53:ef:36:2e:53:da:48:43:12:
11:9f:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:26 2026 by rpki-client