Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ngdM2yxozp_inrM25narzseLOYE.roa
File: ngdM2yxozp_inrM25narzseLOYE.roa (raw, json)
Hash identifier: SKRshed9attrU8e6AtQxWPXRv+EmZ79L3qsQOGTNc3k=
Subject key identifier: 9E:07:4C:DB:2C:68:CE:9F:E2:9E:B3:36:E6:76:AB:CE:C7:8B:39:81
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A06C4CB22F58FF3707D11632314C2415C0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ngdM2yxozp_inrM25narzseLOYE.roa
Signing time: Fri 04 Sep 2026 12:02:40 +0000
ROA not before: Fri 04 Sep 2026 12:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.25.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:4c:b2:2f:58:ff:37:07:d1:16:32:31:4c:24:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 4 12:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e074cdb2c68ce9fe29eb336e676abcec78b3981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:cf:47:bb:22:9e:41:09:b6:9b:fb:1d:bb:
e2:5e:e7:ea:26:92:2d:8e:2b:df:8d:3f:a4:54:b1:
a3:c4:80:ce:f3:b6:d5:52:57:93:23:fc:d7:72:65:
62:04:25:69:14:b0:1b:37:3c:99:c1:43:b1:c6:d4:
3a:71:65:6b:f9:fa:3c:05:5c:45:27:a5:94:c0:ea:
33:08:59:f3:ea:9c:7b:83:ac:00:54:89:8c:94:1a:
4c:ca:5c:93:6e:ef:2a:db:d2:27:ef:7e:a2:70:ad:
19:39:5c:17:2a:68:82:d2:c9:21:0c:94:85:af:99:
30:a9:fd:91:8a:17:e1:1d:63:c3:e0:a6:86:c1:11:
d7:48:a2:aa:42:7f:b3:4b:5c:82:4f:37:1a:31:f6:
bd:9e:5a:a6:ac:5c:bd:88:be:97:c0:a5:0c:e9:80:
a3:9d:48:d6:dc:63:7b:be:cd:5a:57:df:be:09:71:
47:47:9b:83:f5:65:7c:b8:81:2b:c7:bf:b1:ef:3a:
76:e7:75:4e:dd:21:a5:a3:e3:ea:05:36:08:5a:9f:
3d:12:a5:fc:c8:a6:68:4e:0e:05:11:60:81:73:b6:
ba:b5:72:ba:d9:02:dd:a6:43:69:dc:86:26:99:c0:
66:18:26:02:b6:ad:df:88:4f:7a:b8:7f:34:6f:24:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:4C:DB:2C:68:CE:9F:E2:9E:B3:36:E6:76:AB:CE:C7:8B:39:81
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ngdM2yxozp_inrM25narzseLOYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.25.0/24
163.5.33.0/24
163.5.40.0/24
163.5.128.0/24
163.5.145.0/24
163.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a3:1c:d2:23:5f:0b:3e:e5:50:6e:68:19:8c:5b:12:ef:8d:
8a:20:a2:2f:20:fe:52:71:04:cb:d5:a7:ea:c5:0e:90:93:fc:
02:40:cb:28:dc:94:4b:08:2a:5a:2f:43:6a:c8:1e:ab:35:bc:
77:97:36:5a:89:41:04:86:d5:52:67:4b:94:7d:13:e1:3a:0c:
6a:c2:7a:95:1b:c0:09:e7:4b:0f:fe:26:78:d5:ef:21:f2:2f:
6a:eb:f6:2b:80:33:5a:ba:f6:cb:eb:ef:da:34:46:06:e0:9d:
3c:db:b7:44:2d:75:ea:47:20:97:b1:de:9a:ad:24:6f:5c:92:
e0:1c:5d:d4:ff:0f:0e:c8:e8:a7:c7:93:2a:15:19:25:72:ef:
ab:13:21:50:b0:c3:a8:4e:d0:1c:e7:df:6c:d4:f3:b4:95:66:
d5:f8:bd:dd:5d:ac:0c:bc:db:43:e0:2e:79:a6:84:e7:08:8c:
a4:be:57:55:a9:75:18:a0:6b:fa:98:f9:36:c5:61:e7:cd:4c:
b6:59:36:b6:fa:71:7c:07:e5:41:4a:7f:b6:1d:a3:66:0e:bf:
07:a9:c1:92:73:0a:63:fa:67:f4:c8:65:01:01:67:db:ca:74:
1d:5d:bd:4e:49:3f:0b:7b:08:a6:ed:7b:df:35:b9:ee:04:95:
f2:58:27:8a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaBsTLIvWP83B9EWMjFMJBXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwOTA0MTIwMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTA3NGNkYjJjNjhjZTlmZTI5ZWIzMzZlNjc2YWJjZWM3OGIzOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufXPR7sinkEJtpv7HbviXufqJpIt
jivfjT+kVLGjxIDO87bVUleTI/zXcmViBCVpFLAbNzyZwUOxxtQ6cWVr+fo8BVxF
J6WUwOozCFnz6px7g6wAVImMlBpMylyTbu8q29In736icK0ZOVwXKmiC0skhDJSF
r5kwqf2RihfhHWPD4KaGwRHXSKKqQn+zS1yCTzcaMfa9nlqmrFy9iL6XwKUM6YCj
nUjW3GN7vs1aV9++CXFHR5uD9WV8uIErx7+x7zp253VO3SGlo+PqBTYIWp89EqX8
yKZoTg4FEWCBc7a6tXK62QLdpkNp3IYmmcBmGCYCtq3fiE96uH80bySH0QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJ4HTNssaM6f4p6zNuZ2q87HizmBMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbmdkTTJ5eG96cF9pbnJNMjVuYXJ6c2VMT1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAowUZAwQA
owUhAwQAowUoAwQAowWAAwQAowWRAwQAowX6MA0GCSqGSIb3DQEBCwUAA4IBAQCw
oxzSI18LPuVQbmgZjFsS742KIKIvIP5ScQTL1afqxQ6Qk/wCQMso3JRLCCpaL0Nq
yB6rNbx3lzZaiUEEhtVSZ0uUfRPhOgxqwnqVG8AJ50sP/iZ41e8h8i9q6/YrgDNa
uvbL6+/aNEYG4J0827dELXXqRyCXsd6arSRvXJLgHF3U/w8OyOinx5MqFRklcu+r
EyFQsMOoTtAc599s1PO0lWbV+L3dXawMvNtD4C55poTnCIykvldVqXUYoGv6mPk2
xWHnzUy2WTa2+nF8B+VBSn+2HaNmDr8HqcGScwpj+mf0yGUBAWfbynQdXb1OST8L
ewim7XvfNbnuBJXyWCeK
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:29 2026 by rpki-client