Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FRDIQEHuKBFlUw1VMP4l_5X-dV4.roa
File: FRDIQEHuKBFlUw1VMP4l_5X-dV4.roa (raw, json)
Hash identifier: zLxYTvnTH4BTjsjvAfdDv4xwMssjsv01bIN5hBGLro0=
Subject key identifier: 15:10:C8:40:41:EE:28:11:65:53:0D:55:30:FE:25:FF:95:FE:75:5E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FD191BA933FC4D69A12B282951E54EBCE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FRDIQEHuKBFlUw1VMP4l_5X-dV4.roa
Signing time: Wed 05 Aug 2026 10:56:56 +0000
ROA not before: Wed 05 Aug 2026 10:56:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:91:ba:93:3f:c4:d6:9a:12:b2:82:95:1e:54:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 10:56:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1510c84041ee281165530d5530fe25ff95fe755e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:59:c0:d1:df:69:e6:70:00:82:ab:42:e1:
8d:61:47:4e:b3:a7:c3:62:7d:bf:dd:37:e9:1d:9a:
33:55:7e:dc:7c:f9:0c:67:3d:d0:36:0e:d5:c5:b2:
6d:c1:ce:47:dc:8c:34:98:67:a9:78:45:07:8c:8a:
7f:fb:db:ee:e4:43:98:8c:44:b4:0f:61:cd:c1:12:
6a:ad:f0:0f:2a:2c:8c:ca:55:d2:a5:01:21:83:05:
72:a0:e6:d6:dc:69:30:4f:ed:f3:1c:f1:8d:ee:99:
7a:15:8d:8c:a7:6b:d8:53:9d:b1:d7:00:a2:27:79:
fd:17:f1:da:1c:9c:c6:e7:1c:9f:e8:2a:e4:e3:af:
2c:eb:40:85:ac:4c:69:42:10:d1:70:f4:75:80:7b:
9b:2c:ed:61:53:09:72:ef:54:21:e1:cb:e7:78:cb:
37:9b:04:62:a3:6b:2a:f0:23:72:aa:d1:00:bd:0b:
7c:48:6a:b7:c3:22:1b:e7:b3:a9:d7:eb:99:1e:f0:
eb:b5:16:c6:84:6b:da:87:0b:bb:18:9d:91:64:76:
78:c3:dd:1d:d4:8b:fb:b3:0d:c9:aa:28:6b:d8:91:
23:e5:51:e1:33:ba:6b:27:fd:6d:37:ca:85:ba:04:
b9:bb:bd:6e:58:af:86:47:9d:61:69:3e:bd:47:ea:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:C8:40:41:EE:28:11:65:53:0D:55:30:FE:25:FF:95:FE:75:5E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FRDIQEHuKBFlUw1VMP4l_5X-dV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.66.0/24
163.5.182.0/24
163.5.237.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:15:63:7c:82:f2:1d:45:f9:12:15:70:e1:60:23:e3:2c:d2:
34:ef:6e:db:7a:d3:3e:21:42:2e:6c:c0:e3:b8:c1:b1:05:97:
7e:ff:33:ce:f9:0d:5d:18:e0:ed:1e:4a:e5:e9:0b:b7:23:3c:
4f:2b:91:49:bf:88:85:73:bb:05:dc:43:d3:22:ca:48:04:db:
64:6c:77:44:28:12:c6:ce:63:9f:89:89:d1:b4:5e:45:07:e0:
d9:e5:37:f0:7e:f8:00:f7:65:94:ce:e8:b5:1e:13:b7:14:d2:
ff:a5:2b:b2:08:73:c8:36:18:4b:e6:a1:93:f9:32:bb:3e:cd:
c0:13:e1:78:3d:46:60:32:eb:ee:b9:0f:1f:98:f8:d4:3d:13:
eb:4c:e6:80:c6:a4:46:63:f8:87:d8:19:71:71:0c:cf:0b:f8:
b8:7e:99:32:d3:98:59:8e:d8:91:08:5a:94:95:ff:70:fb:f5:
0d:bb:dd:13:83:77:59:64:d3:f7:e5:bb:d5:76:ae:af:56:bb:
c8:bd:95:6f:d9:af:8b:b9:36:10:ce:33:a8:bf:68:ef:59:3a:
64:3f:0b:c5:cf:60:dc:1f:49:b5:a0:72:e0:76:9e:ad:83:fa:
f4:23:40:96:b5:e6:9b:f6:2b:78:f4:64:e3:72:2b:4f:8b:81:
15:3e:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:45 2026 by rpki-client