Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fqn7kI6cksoxPem95j82-gWzbHw.roa
File: Fqn7kI6cksoxPem95j82-gWzbHw.roa (raw, json)
Hash identifier: tURgMYcrBkesn2E6CwxY0I4tMPH8KYnGGAkfD6mLUSw=
Subject key identifier: 16:A9:FB:90:8E:9C:92:CA:31:3D:E9:BD:E6:3F:36:FA:05:B3:6C:7C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A03E548ADE81CAE708C1729525E120BF70
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fqn7kI6cksoxPem95j82-gWzbHw.roa
Signing time: Wed 26 Aug 2026 13:48:42 +0000
ROA not before: Wed 26 Aug 2026 13:48:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 163.5.90.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:54:8a:de:81:ca:e7:08:c1:72:95:25:e1:20:bf:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 26 13:48:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16a9fb908e9c92ca313de9bde63f36fa05b36c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:11:81:ee:98:39:b7:4b:f3:75:57:ae:31:
c5:52:bc:c5:d7:e0:7f:7d:8e:11:93:cf:1e:0a:87:
44:78:14:13:30:17:fc:ed:da:bb:04:96:89:78:f8:
08:f2:01:d1:e1:98:2f:bf:6d:88:7d:a1:64:ce:80:
4b:2b:b6:b9:6f:da:52:b7:d0:de:f5:99:d4:09:ac:
9a:69:9f:0a:9e:40:4d:43:6b:6f:18:5e:f2:4d:81:
d1:25:8e:37:ff:1b:4d:f1:b0:c3:3d:5d:b1:37:6c:
c9:9c:22:c3:ec:95:3d:36:e1:3f:8a:9a:a8:84:36:
01:4d:e2:14:d0:f5:f7:1e:67:1d:e9:81:76:f9:a5:
61:cb:8f:e1:b2:1c:af:66:bf:26:1c:95:93:a1:73:
a0:72:64:4b:5f:f4:f9:c1:17:f1:ce:ab:fd:47:b9:
ba:f6:b6:32:7d:0e:c3:36:1a:48:58:2e:eb:fc:aa:
e3:a7:d0:11:e0:c8:e4:7a:d6:f8:5d:e4:b2:23:da:
63:83:ba:97:01:3e:a6:a3:d3:2c:16:4a:81:ab:c7:
92:4e:21:9a:01:6c:bc:86:3f:74:20:e4:b0:61:b0:
93:07:ea:92:da:45:37:86:75:e4:f1:90:eb:97:00:
f6:9c:28:96:46:9d:22:c9:ab:db:ec:22:fb:9d:2c:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A9:FB:90:8E:9C:92:CA:31:3D:E9:BD:E6:3F:36:FA:05:B3:6C:7C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fqn7kI6cksoxPem95j82-gWzbHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
163.5.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d0:1a:88:f2:c1:fc:51:f4:1b:00:9a:f4:03:75:e8:35:e6:
e6:01:9c:67:c6:02:a9:d0:3d:ce:86:d3:f4:25:fa:d0:a2:23:
7b:46:a5:1c:11:b1:e4:63:6b:3a:7a:42:bb:95:e5:e0:74:3d:
e1:c1:af:b7:5c:ca:40:d1:d2:10:ae:56:91:70:2d:00:fa:f1:
84:1a:72:17:69:92:6f:bf:57:4d:49:8f:fa:b4:f0:cb:7f:25:
53:0e:37:9b:08:da:e2:ce:3f:be:65:2c:66:1f:ea:d0:4a:54:
38:eb:c5:9d:ac:dd:f5:1a:07:e2:38:47:db:fa:c6:b8:7e:fb:
c4:0c:3a:26:68:55:81:0b:b7:b8:44:46:19:47:5b:4d:db:d7:
26:b1:52:47:46:0d:48:96:88:80:80:b9:57:fe:5f:22:22:7e:
7d:42:aa:78:f2:44:2d:31:fa:a1:38:b0:01:ba:a4:3a:62:6e:
de:b7:5f:47:d9:b1:b3:1a:38:a4:aa:9d:67:6d:3a:aa:0c:0c:
18:59:87:df:07:45:e3:29:7b:50:d1:45:dd:fa:c0:79:20:1e:
23:e8:d1:45:93:e2:d9:d1:e9:7f:03:2d:18:48:98:7b:78:e5:
c2:c3:6e:82:9a:81:d6:a4:1f:da:c3:25:0d:59:f5:3a:cd:bf:
6f:f1:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:56 2026 by rpki-client