Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/At-m-rZxqI8iQVnSiEweFE09Gcc.roa
File: At-m-rZxqI8iQVnSiEweFE09Gcc.roa (raw, json)
Hash identifier: weM1Gy0FeQ3ZR2tZ4vY+nGdjrQZLRs4fpmtG/W4fFec=
Subject key identifier: 02:DF:A6:FA:B6:71:A8:8F:22:41:59:D2:88:4C:1E:14:4D:3D:19:C7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A1011A1CBCAA4D9A230B205C33191E2010
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/At-m-rZxqI8iQVnSiEweFE09Gcc.roa
Signing time: Sat 03 Oct 2026 09:30:50 +0000
ROA not before: Sat 03 Oct 2026 09:30:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:1a:1c:bc:aa:4d:9a:23:0b:20:5c:33:19:1e:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 3 09:30:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02dfa6fab671a88f224159d2884c1e144d3d19c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:a6:df:3c:22:3a:0e:4d:e0:1f:cd:64:b6:
80:0a:f7:4d:27:6e:28:ea:aa:c8:f8:06:be:56:cd:
f0:a0:87:49:b6:bb:94:96:1b:cf:9d:57:fe:4c:b5:
ce:b6:c7:4e:b1:be:89:53:71:06:e0:e1:82:33:4f:
30:a2:3a:78:fa:f4:de:63:0f:da:fc:96:b3:a8:0b:
d2:85:e9:01:26:fa:8d:88:ea:0f:97:1f:5f:67:c1:
d8:a6:b3:68:e5:7c:9b:04:e7:18:aa:e1:dc:75:f4:
12:32:77:a3:66:40:72:3b:21:23:10:b8:81:08:eb:
04:5c:34:d6:34:69:21:b2:30:da:af:0c:3a:c4:5d:
a5:97:80:1e:1e:3b:96:c9:cf:44:73:96:28:a3:29:
28:03:90:bc:47:f6:12:8e:ce:b8:3a:93:74:ac:30:
17:5e:d6:39:c5:6e:b8:c3:de:11:68:aa:09:01:44:
3b:69:1f:99:37:62:7b:57:dd:c2:71:4f:e2:f0:52:
13:06:7b:b6:a8:51:2c:ee:8c:29:58:3c:64:0c:eb:
5d:82:53:82:a4:03:74:65:aa:6f:60:2c:76:16:d3:
87:bb:1d:e3:e9:08:24:0b:fe:c4:a5:d8:ab:04:7e:
f4:e4:42:42:ac:cd:9a:b7:87:3f:03:7c:d9:50:53:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:A6:FA:B6:71:A8:8F:22:41:59:D2:88:4C:1E:14:4D:3D:19:C7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/At-m-rZxqI8iQVnSiEweFE09Gcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.60.0/24
163.5.88.0/24
163.5.93.0/24
163.5.100.0/24
163.5.108.0/24
163.5.116.0/24
163.5.174.0/24
163.5.189.0/24
163.5.225.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cd:6f:df:f1:15:e8:fc:46:4b:67:c9:13:29:d1:20:ef:2a:
aa:dd:54:cb:c6:05:b5:e5:e6:71:3b:89:4d:50:8d:4e:f9:0b:
8f:22:f2:e4:35:bb:7a:e0:14:13:6d:4d:a1:f0:84:ea:02:6f:
d5:65:74:a0:b1:b3:33:14:ff:37:cd:b4:55:99:4f:95:34:34:
42:b3:97:4a:26:8e:1d:ce:98:fd:2b:5e:75:54:1a:09:33:b3:
6e:57:74:b8:ab:b6:5a:c2:b5:22:2e:b7:81:52:bd:7f:e7:a9:
c1:f0:11:1e:e7:7f:9e:6f:78:db:1c:aa:5a:0d:dd:e7:05:06:
61:61:3c:43:af:9d:6b:2f:db:b4:a5:29:49:15:5c:c4:ce:3f:
ff:c1:de:2b:ff:2c:23:6e:6e:e4:bf:b7:b1:b5:e6:7c:78:77:
44:8e:ac:13:19:87:a6:a2:c6:b1:6c:c9:16:c2:80:c0:8f:04:
57:65:cd:12:0b:58:ce:af:7d:cb:0e:66:39:8c:49:b6:d3:be:
45:17:ba:0f:13:c3:ae:c0:09:9c:0f:89:66:fc:3b:fe:22:e3:
66:95:75:c2:0a:87:54:1e:b9:32:2e:27:c0:f6:91:59:1d:ce:
56:d7:4f:3b:39:3a:ed:70:b8:08:60:ce:a2:1e:4b:b5:c5:19:
40:0b:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:14 2026 by rpki-client