Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-2vG-SuNXVfMPIsvE0rJU1AauD4.roa
File: 1-2vG-SuNXVfMPIsvE0rJU1AauD4.roa (raw, json)
Hash identifier: n6h3FHQyp3ysvDDVeLhrXJfCDlEDS4cQpN++q5r97BM=
Subject key identifier: FB:6B:C6:F9:2B:8D:5D:57:CC:3C:8B:2F:13:4A:C9:53:50:1A:B8:3E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE267AEA949548901C9DAA9DB9CC79549
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-2vG-SuNXVfMPIsvE0rJU1AauD4.roa
Signing time: Thu 12 Mar 2026 14:16:11 +0000
ROA not before: Thu 12 Mar 2026 14:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:67:ae:a9:49:54:89:01:c9:da:a9:db:9c:c7:95:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 12 14:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb6bc6f92b8d5d57cc3c8b2f134ac953501ab83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:8b:a1:e0:86:f9:bb:eb:12:83:9a:e3:a2:
af:53:4f:03:97:ad:27:6e:11:73:ae:b1:81:84:fb:
3a:1d:52:7e:74:a0:60:df:d2:ce:bc:b9:c7:94:ba:
27:fe:91:04:a9:81:53:32:3a:cb:e1:4b:92:e3:43:
a3:38:c3:50:b3:7c:65:a9:16:5f:80:03:6a:6f:33:
f9:30:1d:82:e1:f7:00:37:8b:14:59:6a:fb:1f:b8:
24:95:ea:99:8d:c2:00:ef:48:a2:6d:53:ef:da:8d:
a0:bd:99:2d:f8:db:f9:f2:3e:6d:49:3a:77:21:ed:
63:32:ff:43:8c:52:be:db:f4:88:94:e6:e4:5f:a8:
ec:d3:06:b5:41:5c:a8:2e:fb:e8:73:d4:23:7d:bf:
28:c2:b3:69:61:80:27:e1:9c:47:ed:0c:cd:a8:06:
2f:d3:1c:7d:2f:5e:df:be:c8:3a:4b:59:ad:b7:5b:
2a:b0:e6:1a:cf:aa:99:a7:de:eb:e9:f8:e4:89:1c:
71:89:b7:9f:93:58:24:f5:fe:4a:98:ca:7a:55:f8:
5e:a1:f8:b6:cc:4b:a4:64:4d:c3:53:fa:48:0d:80:
e1:b8:48:c2:d6:e7:32:52:9a:a0:81:5a:9e:14:6a:
d9:a6:f4:02:4a:1c:bb:82:c6:b1:a7:9d:32:ea:91:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:C6:F9:2B:8D:5D:57:CC:3C:8B:2F:13:4A:C9:53:50:1A:B8:3E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-2vG-SuNXVfMPIsvE0rJU1AauD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.87.0/24
163.5.95.0/24
163.5.123.0/24
163.5.136.0/24
163.5.181.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b6:c3:a7:a5:2c:9f:34:31:91:a6:59:de:5f:56:5a:4c:f0:
9d:27:19:b4:87:5a:3a:ca:59:c7:12:af:69:5a:f8:d7:06:31:
e4:2d:69:5a:ce:00:98:1d:05:af:ca:79:bf:8f:fb:6d:8e:6e:
45:19:9b:aa:39:ad:7b:54:7c:13:01:91:e1:2f:8b:d6:44:7a:
0f:ca:33:b3:3f:ec:50:35:b5:0f:0f:79:8c:dd:ae:8f:27:f9:
86:c9:8e:62:ea:e5:9a:cd:76:f7:99:07:11:cb:b4:2a:4e:2e:
2b:4c:6b:47:57:4f:fc:d0:d2:a4:40:36:36:fe:9e:aa:99:d2:
01:60:63:2d:94:73:41:0c:07:67:4e:0d:e6:1d:d9:6c:e8:77:
02:1a:15:ea:86:e5:11:ca:52:73:e6:a1:6a:fb:85:7e:18:e2:
78:f2:d1:52:99:0e:5e:a9:7c:46:11:da:be:2b:cc:0a:49:0d:
84:57:6c:c5:9c:25:86:1a:e5:0a:83:e8:c9:1f:ad:87:a8:d3:
70:6d:65:d7:dd:b0:2b:b0:7f:c9:27:a1:a9:95:a2:bd:93:6a:
37:c2:42:8b:02:a9:1f:f9:a2:80:72:0f:7b:9f:99:81:9d:88:
cf:f7:2d:d9:17:3d:16:e6:ea:5b:45:3c:80:a3:e3:7a:7e:8c:
1c:45:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:43:17 2026 by rpki-client