Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hgyF7l4vgtuCy5JdtFyyCVF6uWY.roa
File: hgyF7l4vgtuCy5JdtFyyCVF6uWY.roa (raw, json)
Hash identifier: xp6IrDEZ1nZgtttBBaetn0v4JW7Gtn9draOU2c+2UJ8=
Subject key identifier: 86:0C:85:EE:5E:2F:82:DB:82:CB:92:5D:B4:5C:B2:09:51:7A:B9:66
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D8CAB2A8A909258887A7DCB4F5BFB6BE6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hgyF7l4vgtuCy5JdtFyyCVF6uWY.roa
Signing time: Tue 14 Apr 2026 15:45:20 +0000
ROA not before: Tue 14 Apr 2026 15:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 163.5.147.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:ab:2a:8a:90:92:58:88:7a:7d:cb:4f:5b:fb:6b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 14 15:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=860c85ee5e2f82db82cb925db45cb209517ab966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:c8:8d:4a:f1:20:64:29:83:95:1d:fb:3f:
b9:11:3f:78:2f:c9:c6:ee:15:13:8f:ec:d3:aa:d0:
b3:2f:be:12:ff:4a:ab:f7:cd:56:96:ea:7a:0e:06:
d5:dd:c4:5a:7b:d4:c4:77:37:ea:4e:0f:a1:69:04:
07:c9:07:5d:e2:8b:7d:f7:c1:eb:20:06:e4:19:22:
bc:bd:9f:23:f9:ba:fe:f9:4c:70:58:b4:5d:02:e9:
f5:7b:91:8f:9d:c7:a7:ac:1f:f4:c0:cb:85:85:e5:
b7:48:4c:f1:28:e8:a8:f5:b3:55:64:4d:d9:21:6d:
97:01:9f:37:cc:e3:53:e3:07:41:e1:c1:4f:60:2f:
5c:12:3f:47:58:a4:de:45:b7:88:34:46:a5:a5:d7:
01:9f:4a:de:26:ec:5e:3b:30:38:b0:8f:a7:70:f8:
51:7e:83:68:8c:92:a8:f2:63:b5:db:ff:16:03:b2:
3d:53:1d:ab:fa:ca:df:2d:1c:d4:0c:a6:5a:7d:fd:
65:7f:06:c9:8f:4e:58:a3:02:f3:7b:18:db:ed:dd:
09:77:3f:2d:1d:b2:f1:30:3e:98:6b:ea:3b:0e:f3:
43:df:3b:60:d0:4b:c5:d1:63:31:11:1f:03:a4:f3:
84:8e:be:5b:9e:c2:ca:ac:db:6c:18:b7:e8:aa:2b:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:85:EE:5E:2F:82:DB:82:CB:92:5D:B4:5C:B2:09:51:7A:B9:66
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hgyF7l4vgtuCy5JdtFyyCVF6uWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.147.0/24
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b7:3b:50:36:e6:9b:f9:31:4f:06:88:b9:08:af:ab:5b:af:
fe:f7:58:a5:b5:45:6f:66:8e:d4:9a:29:17:b1:ad:83:22:45:
71:b3:db:fe:21:b6:bd:25:1a:8a:8a:c7:4d:e8:88:fe:37:3a:
1f:c5:d8:29:5c:a5:46:6b:77:0c:64:64:e5:89:1f:dd:24:59:
fa:d7:bc:f0:8a:54:b0:8e:b1:58:2e:22:12:d3:09:4c:4e:0d:
9b:d7:3e:09:33:e8:30:0e:15:50:c9:65:5d:68:68:5b:72:e9:
0d:66:f7:7b:42:a2:5e:bc:10:61:9a:d6:8e:22:54:89:5f:63:
81:6f:4c:ad:3e:9e:1e:ee:69:8c:7e:9c:9f:1d:99:bb:99:20:
b5:86:b1:f6:7e:92:47:1c:39:a8:70:69:af:f0:75:f6:c7:1b:
14:1b:f8:86:31:56:ea:46:13:ef:a9:59:2d:7f:54:e3:7a:eb:
b2:27:0f:26:f5:0e:8f:46:89:28:70:ed:ed:db:16:37:a8:c4:
30:7d:9c:c9:1a:78:cc:8e:5b:78:67:74:ab:85:e3:90:f9:ec:
9a:c1:12:73:38:67:5a:9b:a6:49:91:fe:53:9e:7a:f7:f3:dd:
a8:9a:55:34:ee:61:70:c1:c4:8b:32:cb:4c:4d:51:96:5a:93:
65:80:fb:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ2MqyqKkJJYiHp9y09b+2vmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNDE0MTU0NTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjBjODVlZTVlMmY4MmRiODJjYjkyNWRiNDVjYjIwOTUxN2FiOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8vIjUrxIGQpg5Ud+z+5ET94L8nG
7hUTj+zTqtCzL74S/0qr981Wlup6DgbV3cRae9TEdzfqTg+haQQHyQdd4ot998Hr
IAbkGSK8vZ8j+br++UxwWLRdAun1e5GPncenrB/0wMuFheW3SEzxKOio9bNVZE3Z
IW2XAZ83zONT4wdB4cFPYC9cEj9HWKTeRbeINEalpdcBn0reJuxeOzA4sI+ncPhR
foNojJKo8mO12/8WA7I9Ux2r+srfLRzUDKZaff1lfwbJj05YowLzexjb7d0Jdz8t
HbLxMD6Ya+o7DvND3ztg0EvF0WMxER8DpPOEjr5bnsLKrNtsGLfoqisCRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIYMhe5eL4LbgsuSXbRcsglRerlmMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvaGd5RjdsNHZndHVDeTVKZHRGeXlDVkY2dVdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWTAwQA
owW+MA0GCSqGSIb3DQEBCwUAA4IBAQB4tztQNuab+TFPBoi5CK+rW6/+91iltUVv
Zo7UmikXsa2DIkVxs9v+Iba9JRqKisdN6Ij+NzofxdgpXKVGa3cMZGTliR/dJFn6
17zwilSwjrFYLiIS0wlMTg2b1z4JM+gwDhVQyWVdaGhbcukNZvd7QqJevBBhmtaO
IlSJX2OBb0ytPp4e7mmMfpyfHZm7mSC1hrH2fpJHHDmocGmv8HX2xxsUG/iGMVbq
RhPvqVktf1TjeuuyJw8m9Q6PRokocO3t2xY3qMQwfZzJGnjMjlt4Z3SrheOQ+eya
wRJzOGdam6ZJkf5Tnnr3892omlU07mFwwcSLMstMTVGWWpNlgPvs
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:16 2026 by rpki-client