Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8TSqY3qnFCF4yTDew955Xyaw7Rc.roa
File: 8TSqY3qnFCF4yTDew955Xyaw7Rc.roa (raw, json)
Hash identifier: 6iMILPabytSqPBNjdixYTrwjDKLPCWZtyE6zQM+imWE=
Subject key identifier: F1:34:AA:63:7A:A7:14:21:78:C9:30:DE:C3:DE:79:5F:26:B0:ED:17
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A059AEF3088EF3EED87AB609BEBB3F3F76
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8TSqY3qnFCF4yTDew955Xyaw7Rc.roa
Signing time: Mon 31 Aug 2026 21:17:12 +0000
ROA not before: Mon 31 Aug 2026 21:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.49.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:ae:f3:08:8e:f3:ee:d8:7a:b6:09:be:bb:3f:3f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 31 21:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f134aa637aa7142178c930dec3de795f26b0ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:5c:67:ee:dc:de:59:8b:a1:bf:46:b1:c7:
e3:da:d2:1a:ef:34:4a:91:83:30:8d:d6:ef:3d:14:
27:32:d9:5d:c0:f3:52:48:e1:9f:28:4b:4f:8c:7b:
dd:7e:63:7c:b4:ed:f2:cd:5d:5f:fc:25:1c:ce:59:
ee:cc:f9:23:a7:a7:9c:f7:2d:a6:bd:93:54:41:f5:
c3:4d:d2:48:ba:86:32:92:19:2c:48:aa:f1:58:da:
2a:90:99:99:2b:99:80:ce:0c:8a:13:c4:72:1a:99:
f0:b3:74:5e:05:80:5a:4e:6f:46:92:0d:f6:41:df:
e4:8f:f2:38:53:0f:db:86:e4:8e:a3:67:a1:03:16:
14:78:95:cd:36:21:69:bd:47:d8:3c:04:ba:9f:4f:
02:38:d5:bb:20:7f:76:27:25:91:7e:8d:07:50:0a:
9e:19:de:79:0f:db:21:53:28:57:60:0b:49:7b:5b:
f9:ff:69:28:64:f8:86:fa:29:97:27:2a:a6:4f:bc:
42:c0:ff:eb:9e:bf:75:92:2f:20:57:2f:82:6b:7c:
36:6d:4d:85:e5:a7:b9:92:e0:1f:e0:72:de:d5:25:
2c:12:f3:55:a5:14:51:71:d7:a4:ad:7b:88:1e:47:
a5:92:16:2c:c5:64:68:51:a3:91:c0:6d:b8:24:7b:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:AA:63:7A:A7:14:21:78:C9:30:DE:C3:DE:79:5F:26:B0:ED:17
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8TSqY3qnFCF4yTDew955Xyaw7Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.49.0/24
163.5.203.0/24
163.5.226.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c0:39:2e:1f:08:ff:63:22:48:b0:e8:5a:fc:d1:8f:ad:36:
1c:ab:80:0e:22:73:83:ab:77:e1:a9:3d:c1:b7:40:3c:fa:5b:
ad:2a:7b:1f:33:21:a2:c5:b2:51:6e:67:fa:2a:59:96:3a:1f:
fe:7b:01:b6:ac:be:9b:8d:7c:fb:09:71:80:bb:96:05:e7:66:
13:66:32:e3:ff:8f:d3:6e:c4:2f:c1:63:8b:02:60:2e:aa:5a:
4e:eb:e6:51:24:d7:5b:c2:23:b3:a2:86:37:e3:41:22:3c:7f:
21:ad:de:b2:1b:ca:e4:56:54:09:8b:f8:1b:00:5f:d3:57:dd:
c7:c6:54:54:1c:a2:a9:de:50:eb:d7:f2:ca:b2:bf:6c:24:0d:
0a:41:f0:0a:c9:a2:ff:51:27:72:be:ca:d9:8a:76:e7:86:e0:
5e:f3:95:b2:37:59:f0:c3:fb:93:ab:08:ee:7d:ec:3d:09:ec:
d9:c6:73:f9:04:68:92:5d:5d:11:f2:e4:cf:83:9d:8c:b6:10:
e4:d3:44:4b:8b:78:4a:23:d7:e3:af:d1:21:a7:24:ee:2e:8d:
c5:b2:a4:a6:74:d2:d7:2a:31:90:7b:e4:10:3c:6b:58:59:70:
5f:23:0a:75:03:2d:e8:bd:89:67:a7:b3:1c:c6:ad:a4:8e:78:
e8:a5:bb:c6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBZrvMIjvPu2Hq2Cb67Pz92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODMxMjExNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTM0YWE2MzdhYTcxNDIxNzhjOTMwZGVjM2RlNzk1ZjI2YjBlZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U1cZ+7c3lmLob9Gscfj2tIa7zRK
kYMwjdbvPRQnMtldwPNSSOGfKEtPjHvdfmN8tO3yzV1f/CUczlnuzPkjp6ec9y2m
vZNUQfXDTdJIuoYykhksSKrxWNoqkJmZK5mAzgyKE8RyGpnws3ReBYBaTm9Gkg32
Qd/kj/I4Uw/bhuSOo2ehAxYUeJXNNiFpvUfYPAS6n08CONW7IH92JyWRfo0HUAqe
Gd55D9shUyhXYAtJe1v5/2koZPiG+imXJyqmT7xCwP/rnr91ki8gVy+Ca3w2bU2F
5ae5kuAf4HLe1SUsEvNVpRRRcdekrXuIHkelkhYsxWRoUaORwG24JHtG3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPE0qmN6pxQheMkw3sPeeV8msO0XMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvOFRTcVkzcW5GQ0Y0eVREZXc5NTVYeWF3N1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowUxAwQA
owXLAwQAowXiMA0GCSqGSIb3DQEBCwUAA4IBAQCXwDkuHwj/YyJIsOha/NGPrTYc
q4AOInODq3fhqT3Bt0A8+lutKnsfMyGixbJRbmf6KlmWOh/+ewG2rL6bjXz7CXGA
u5YF52YTZjLj/4/TbsQvwWOLAmAuqlpO6+ZRJNdbwiOzooY340EiPH8hrd6yG8rk
VlQJi/gbAF/TV93HxlRUHKKp3lDr1/LKsr9sJA0KQfAKyaL/USdyvsrZinbnhuBe
85WyN1nww/uTqwjufew9CezZxnP5BGiSXV0R8uTPg52MthDk00RLi3hKI9fjr9Eh
pyTuLo3FsqSmdNLXKjGQe+QQPGtYWXBfIwp1Ay3ovYlnp7Mcxq2kjnjopbvG
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:36 2026 by rpki-client