Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/92GYnBgJ-AHG_34DDB-LA4EUYLQ.roa
File: 92GYnBgJ-AHG_34DDB-LA4EUYLQ.roa (raw, json)
Hash identifier: 3C4fyiDl/hqlyVEX0xvhqqx+HTIPsFNq9e6gLLR67GM=
Subject key identifier: F7:61:98:9C:18:09:F8:01:C6:FF:7E:03:0C:1F:8B:03:81:14:60:B4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A04CDCC9AC17F1A8404769DC919F6CB708
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/92GYnBgJ-AHG_34DDB-LA4EUYLQ.roa
Signing time: Sat 29 Aug 2026 09:32:12 +0000
ROA not before: Sat 29 Aug 2026 09:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 163.5.50.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:dc:c9:ac:17:f1:a8:40:47:69:dc:91:9f:6c:b7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 29 09:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f761989c1809f801c6ff7e030c1f8b03811460b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:47:bd:1e:7c:5e:74:35:81:d4:2c:b3:b9:
01:c8:aa:a4:49:4c:71:a1:42:8c:f4:0b:d7:93:de:
e2:61:8b:3a:28:d4:43:c4:79:b5:99:64:ef:99:c3:
c8:48:17:25:df:a2:d6:89:6b:4c:13:c9:61:b3:b9:
43:5e:ab:6e:6a:b1:7f:2b:2e:91:f4:ab:a7:59:f3:
85:b5:43:78:01:3f:1c:d6:f4:34:af:d9:56:f8:99:
14:05:de:b3:67:4a:ff:7e:5f:22:50:36:7f:b6:09:
f5:b0:86:b8:bd:4a:c1:28:1b:b6:59:fb:68:0d:49:
e0:10:e5:f7:48:89:e9:b8:08:9c:e9:39:ab:de:c4:
c7:fd:b6:b5:46:7e:f1:8f:85:72:9f:75:bd:ce:4a:
87:72:d7:5f:18:c7:94:13:64:66:e0:08:2b:4b:27:
31:66:b9:f2:18:b9:5c:04:a9:5b:df:34:91:ae:8c:
97:7a:49:d4:50:bd:6c:29:6e:a5:65:c7:5c:07:27:
f5:a9:13:83:43:43:e0:c7:07:a0:60:e5:2a:1e:9e:
fc:89:48:97:6d:27:93:09:0d:ae:c1:3c:7f:23:fb:
7b:f0:b8:6b:52:7c:93:7e:d0:1c:ef:b0:f2:f1:9b:
21:f4:35:f1:b3:04:89:f0:53:ff:dc:b6:79:c3:00:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:98:9C:18:09:F8:01:C6:FF:7E:03:0C:1F:8B:03:81:14:60:B4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/92GYnBgJ-AHG_34DDB-LA4EUYLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.50.0/23
163.5.97.0/24
163.5.99.0/24
163.5.130.0/24
163.5.135.0/24
163.5.161.0/24
163.5.190.0/24
163.5.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cc:41:b9:52:9f:1c:21:35:f6:ff:9d:e5:25:93:5d:1d:8b:
7e:d1:71:60:63:16:6f:ce:51:05:11:55:ee:1e:94:71:07:a9:
8c:64:26:39:c7:46:a9:51:73:f3:46:86:67:5c:0a:03:36:d5:
8a:93:46:6c:a7:82:86:ec:4a:db:5b:83:f7:62:14:75:64:fa:
cf:b4:8e:61:a7:6a:9f:85:75:13:f4:c0:a8:75:97:f9:ab:ca:
ba:a8:fe:ee:0e:40:60:b7:3b:7e:c7:70:f5:50:ff:67:11:b7:
84:d4:2e:a8:2a:f6:f0:b2:f3:a3:a4:12:19:72:b6:56:00:ce:
42:c3:19:a2:24:40:06:8e:d6:e1:24:85:f0:08:d9:e6:0a:38:
6a:8c:01:92:fd:a9:02:e5:67:46:fa:8c:9d:27:4d:50:06:d8:
27:5f:c2:52:cf:6e:9f:89:93:77:c1:a7:50:a4:29:35:50:c2:
37:c4:f9:5c:d0:2b:b7:da:9c:ef:97:94:7f:d1:a0:d0:f2:64:
aa:b2:de:dc:10:04:02:15:c9:2b:5f:9f:47:85:44:bb:78:46:
70:c5:7a:5d:35:68:5f:56:e8:16:43:e2:ad:8f:8e:0a:d7:05:
3d:33:8e:c6:2f:b0:b9:8c:ab:42:39:ed:d8:4b:e9:cf:15:e7:
31:40:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:24 2026 by rpki-client