Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k0OUjvgY49fyZ4p75KLlVQ_aFZY.roa
File: k0OUjvgY49fyZ4p75KLlVQ_aFZY.roa (raw, json)
Hash identifier: tEyBwnotEi9SAwt09RN58WLBBAjZHla/i3JGwBEUlFQ=
Subject key identifier: 93:43:94:8E:F8:18:E3:D7:F2:67:8A:7B:E4:A2:E5:55:0F:DA:15:96
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CA0AE5BF934A309938FBD7A80D190510D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k0OUjvgY49fyZ4p75KLlVQ_aFZY.roa
Signing time: Fri 27 Feb 2026 19:58:27 +0000
ROA not before: Fri 27 Feb 2026 19:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.28.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:ae:5b:f9:34:a3:09:93:8f:bd:7a:80:d1:90:51:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 27 19:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9343948ef818e3d7f2678a7be4a2e5550fda1596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:ef:b7:88:6d:7e:e6:3f:0a:59:ef:34:08:
03:0d:bc:e4:53:8a:45:66:96:1b:fa:21:70:0d:e0:
45:15:86:f2:ac:3a:5b:b2:92:19:0e:1e:60:3b:50:
32:f7:4c:35:f6:cb:f0:d1:0d:50:34:9d:45:f9:fe:
3d:bf:63:6d:9c:e6:c1:b8:76:37:22:cf:a6:ec:b3:
d5:47:13:af:a3:0c:12:f5:97:e5:b8:81:6e:b3:50:
16:d0:9a:a6:0c:d8:15:1f:b9:70:75:a8:7c:a7:bc:
64:6e:bd:97:6d:6c:08:58:87:dc:60:97:14:21:26:
18:69:5d:22:c1:b2:2c:3b:03:ef:3c:fd:b4:24:2c:
da:ed:8d:a6:7f:2a:ef:94:93:d5:15:f0:1b:1d:64:
ee:c5:0f:b6:4a:0c:79:08:25:70:f0:88:1d:52:fb:
82:34:a9:01:1f:98:52:e0:18:a3:93:e1:6c:27:66:
1e:8a:3d:77:55:1b:a3:04:c5:5c:ed:c9:41:88:8a:
02:db:0a:8e:b7:d2:82:49:09:63:97:7d:3e:2f:0b:
91:12:c1:72:48:2d:70:87:0d:28:6b:38:cd:04:5a:
1a:e8:ed:77:91:d6:55:34:bb:79:a1:8a:78:d5:52:
24:79:b6:a8:8c:e4:5e:0f:77:0b:f7:08:38:3e:aa:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:43:94:8E:F8:18:E3:D7:F2:67:8A:7B:E4:A2:E5:55:0F:DA:15:96
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k0OUjvgY49fyZ4p75KLlVQ_aFZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.28.0/22
163.5.54.0/24
163.5.58.0/23
163.5.91.0/24
163.5.97.0/24
163.5.102.0/24
163.5.104.0/24
163.5.109.0/24
163.5.112.0/24
163.5.118.0/23
163.5.121.0/24
163.5.125.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.180.0/24
163.5.186.0/24
163.5.192.0/24
163.5.195.0-163.5.196.255
163.5.201.0/24
163.5.203.0/24
163.5.205.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.237.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:73:1c:12:a7:7f:c2:d9:ab:e3:6f:71:6d:b1:11:8b:14:fc:
bd:24:28:90:cb:ae:f5:25:59:8c:b6:d4:fd:5f:5d:48:e3:ec:
a2:4a:ef:d3:1d:3e:78:44:58:64:03:c4:ae:e7:4e:b0:49:2c:
13:84:40:08:d2:aa:99:f7:d9:ad:af:b2:9e:a2:4c:13:51:de:
65:59:80:ed:34:30:03:60:c0:b7:68:6c:2c:22:31:c8:a7:0c:
5c:b3:6b:05:c7:4d:33:d3:b3:12:d6:12:6e:d0:cb:75:c4:7d:
72:e5:00:83:b0:31:a0:d3:d5:84:5c:ec:10:7f:9a:dd:05:bb:
27:65:4c:77:37:19:2b:3e:cf:15:94:39:fe:58:0b:2a:0e:b8:
b1:14:67:24:79:c9:d8:cf:f9:56:ff:af:92:a3:05:9a:e5:72:
3e:f7:f8:52:e7:2b:d4:c4:9a:ae:51:40:c5:71:1e:c4:80:6b:
dc:4d:00:04:e1:8a:78:19:d9:b9:83:c5:fe:5f:12:ff:1e:90:
57:a9:2e:51:8e:27:04:fb:14:65:e1:22:9a:4f:18:1c:ad:d8:
0e:c8:fc:f4:88:f1:4a:28:39:ed:3c:8c:51:40:33:e6:ad:18:
d7:02:32:69:1f:53:0f:92:8c:ed:3f:b7:24:15:a7:6c:3a:8b:
30:a6:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:06 2026 by rpki-client