Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-rye42ERzVHakfccPY3G3fxbSuc.roa
File: 1-rye42ERzVHakfccPY3G3fxbSuc.roa (raw, json)
Hash identifier: lRJnuWHl/mmeP7pHXm6UL4az/l4P2Sceclho7l0dQEk=
Subject key identifier: FA:BC:9E:E3:61:11:CD:51:DA:91:F7:1C:3D:8D:C6:DD:FC:5B:4A:E7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FD19E8E38FA0106C45273450C870EA4C1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-rye42ERzVHakfccPY3G3fxbSuc.roa
Signing time: Wed 05 Aug 2026 11:10:56 +0000
ROA not before: Wed 05 Aug 2026 11:10:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 163.5.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:9e:8e:38:fa:01:06:c4:52:73:45:0c:87:0e:a4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 11:10:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fabc9ee36111cd51da91f71c3d8dc6ddfc5b4ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:46:49:d9:f8:0d:89:9d:7d:ba:e5:79:2b:
41:da:74:e2:fa:86:3c:1b:aa:40:53:5e:9c:d6:8e:
8a:68:1c:b4:d2:55:3a:07:e2:fb:f9:0b:d6:11:c9:
18:65:bc:45:fd:52:25:ab:0f:c4:59:47:82:e8:ea:
2d:1a:33:e5:20:d4:4b:9a:f6:39:61:91:8e:d7:b0:
45:a1:27:58:f3:fa:13:38:0f:17:63:41:14:5d:8c:
53:d4:7b:6d:74:7f:d5:e0:1a:82:9a:f3:d1:88:eb:
48:d5:b8:98:e4:08:34:e3:4b:d8:3b:1b:67:f4:6f:
ff:9b:eb:b6:11:b7:67:22:b4:a5:06:39:aa:14:eb:
bd:0e:7e:c7:47:0e:bf:54:ae:4a:93:65:b3:65:45:
e1:5b:34:d2:45:b7:3a:c0:4b:3b:d3:40:8e:bf:a8:
97:60:bd:83:f9:4e:c1:af:32:66:07:38:3e:9a:f9:
8a:f0:03:2f:58:78:c9:5d:b5:d4:86:27:24:02:7c:
1a:83:23:08:47:eb:bd:a5:b3:ca:54:9d:a3:57:3c:
3c:4a:73:35:4b:56:40:63:9e:53:b9:79:6b:a0:16:
53:b3:d3:ad:25:3d:2b:2a:47:81:b9:3c:9c:94:10:
a0:6c:f6:b9:65:12:39:f3:d5:48:11:fe:ef:81:64:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BC:9E:E3:61:11:CD:51:DA:91:F7:1C:3D:8D:C6:DD:FC:5B:4A:E7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-rye42ERzVHakfccPY3G3fxbSuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
Signature Algorithm: sha256WithRSAEncryption
96:88:0d:e0:a8:0a:76:16:c9:29:43:4a:4d:3b:4f:a9:de:81:
6a:39:82:11:5b:59:57:b0:43:6f:a3:d1:6e:e8:cc:0a:2e:75:
8c:07:c3:9b:ee:22:bf:97:b1:51:26:9c:bb:28:57:b3:3b:12:
95:2e:11:6f:06:6e:70:f9:00:5c:13:72:ba:6b:b1:55:b8:c0:
54:76:c7:92:67:11:86:0f:ec:cf:dc:eb:25:c9:29:cb:96:fd:
c9:84:10:77:b5:29:50:fa:15:3b:62:8f:df:b2:4b:0e:84:58:
d1:0b:b1:49:f1:cf:2f:ec:6d:57:a0:6d:1d:d9:eb:f6:a8:60:
50:6e:32:3b:78:ac:21:50:60:b8:8f:65:81:c9:f0:2b:73:66:
9c:6b:17:98:21:7c:e1:f7:2d:b9:b9:ae:99:93:86:60:64:75:
db:b6:ff:00:a4:f7:4a:9f:3e:ab:e2:25:5c:b8:e1:e3:68:29:
79:34:98:a0:11:be:61:09:40:d4:48:ce:9c:27:d1:b3:4e:e1:
50:57:e1:d2:29:e3:7e:54:1a:d0:35:69:41:a7:0c:d1:8d:72:
ca:1b:e9:46:f8:b1:06:e8:8d:bb:88:3b:76:cf:fa:b6:ef:1b:
b3:a8:94:90:fe:fa:7a:4a:1d:21:b0:03:2f:79:ab:18:fa:1f:
c9:03:4a:8d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ/Rno44+gEGxFJzRQyHDqTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODA1MTExMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWJjOWVlMzYxMTFjZDUxZGE5MWY3MWMzZDhkYzZkZGZjNWI0YWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqRGSdn4DYmdfbrleStB2nTi+oY8
G6pAU16c1o6KaBy00lU6B+L7+QvWEckYZbxF/VIlqw/EWUeC6OotGjPlINRLmvY5
YZGO17BFoSdY8/oTOA8XY0EUXYxT1HttdH/V4BqCmvPRiOtI1biY5Ag040vYOxtn
9G//m+u2EbdnIrSlBjmqFOu9Dn7HRw6/VK5Kk2WzZUXhWzTSRbc6wEs700COv6iX
YL2D+U7BrzJmBzg+mvmK8AMvWHjJXbXUhickAnwagyMIR+u9pbPKVJ2jVzw8SnM1
S1ZAY55TuXlroBZTs9OtJT0rKkeBuTyclBCgbPa5ZRI589VIEf7vgWSm+QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPq8nuNhEc1R2pH3HD2Nxt38W0rnMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMS1yeWU0MkVSelZIYWtmY2NQWTNHM2Z4YlN1Yy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw
MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKMFWjAN
BgkqhkiG9w0BAQsFAAOCAQEAlogN4KgKdhbJKUNKTTtPqd6BajmCEVtZV7BDb6PR
bujMCi51jAfDm+4iv5exUSacuyhXszsSlS4RbwZucPkAXBNyumuxVbjAVHbHkmcR
hg/sz9zrJckpy5b9yYQQd7UpUPoVO2KP37JLDoRY0QuxSfHPL+xtV6BtHdnr9qhg
UG4yO3isIVBguI9lgcnwK3NmnGsXmCF84fctubmumZOGYGR127b/AKT3Sp8+q+Il
XLjh42gpeTSYoBG+YQlA1EjOnCfRs07hUFfh0injflQa0DVpQacM0Y1yyhvpRvix
BuiNu4g7ds/6tu8bs6iUkP76ekodIbADL3mrGPofyQNKjQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:14 2026 by rpki-client