Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GusGREhmZXHkVl1mLXEtyURCK_o.roa
File: GusGREhmZXHkVl1mLXEtyURCK_o.roa (raw, json)
Hash identifier: 5tvlyG0VJuVgaOckqQEtCrFs1sz6MMm8/wel5yS7dnU=
Subject key identifier: 1A:EB:06:44:48:66:65:71:E4:56:5D:66:2D:71:2D:C9:44:42:2B:FA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FF5028879BDC184D48778C2EDFD6C70C8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GusGREhmZXHkVl1mLXEtyURCK_o.roa
Signing time: Wed 12 Aug 2026 08:06:51 +0000
ROA not before: Wed 12 Aug 2026 08:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:02:88:79:bd:c1:84:d4:87:78:c2:ed:fd:6c:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 12 08:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aeb064448666571e4565d662d712dc944422bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:b4:55:de:82:d0:58:96:01:13:57:dd:e9:
08:cc:96:d9:6a:0b:1b:83:15:69:04:21:43:0c:4a:
2f:7e:35:9e:36:85:c2:09:42:fc:51:d7:e3:91:91:
3d:0e:8e:83:21:0e:90:e0:9b:93:49:aa:b5:1e:00:
34:74:7b:c4:89:d8:b0:07:b2:26:47:b4:81:d2:c9:
31:0a:a2:5b:3d:49:05:f8:a9:b4:3e:f0:44:9f:02:
35:78:a8:7a:04:4f:ee:f0:88:0b:68:82:d5:27:68:
9c:ac:8f:b7:28:d0:43:ee:a0:d5:c6:39:cd:55:0c:
ac:f4:60:d8:bc:d2:ba:79:94:fc:f3:ce:35:4b:37:
a0:11:f0:39:b9:81:f2:75:31:9e:02:e1:ad:de:d5:
80:41:d3:19:4b:63:3c:a0:07:d9:de:2c:97:f1:56:
3c:e0:de:c7:52:cb:69:e8:9b:10:29:f3:c4:7b:43:
86:92:04:02:af:8f:59:47:39:48:a9:6f:bc:d4:75:
f3:33:35:b4:bf:5f:ae:f7:0a:9d:50:f5:33:ba:e1:
e5:fe:b4:88:dd:21:b1:4c:b1:f6:e1:46:64:29:fc:
f4:5f:f1:26:ec:c4:23:70:47:d8:8d:0f:53:2b:36:
cf:72:33:04:ca:9e:b4:ef:f6:9d:7c:49:29:84:1d:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:06:44:48:66:65:71:E4:56:5D:66:2D:71:2D:C9:44:42:2B:FA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GusGREhmZXHkVl1mLXEtyURCK_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:29:35:15:33:22:3f:00:af:a3:9b:12:bc:42:ad:5f:a6:39:
3d:cc:5d:af:9c:01:f2:99:8d:b3:9b:2f:e5:a5:96:20:ac:79:
61:b3:c2:46:73:af:2d:67:0c:20:29:3a:2e:14:36:5e:2f:8d:
ab:91:d1:fa:7f:e9:89:f7:58:54:8c:24:ae:06:62:14:f5:1a:
e2:81:0a:df:61:12:a2:01:b3:7a:a2:c2:49:a5:35:f7:43:a4:
0b:f2:51:e0:6d:ad:63:9b:ee:78:c1:22:34:99:67:40:f4:e6:
b7:d8:ae:a3:5e:af:9c:46:cb:64:a9:ba:e5:5c:a0:08:dd:ff:
ae:71:72:b2:d0:d3:6a:83:6e:26:92:5a:f7:e7:49:76:5d:6b:
8e:2f:0b:79:8c:17:97:b4:55:30:ee:43:e5:4a:3d:96:a3:6d:
41:52:22:80:36:38:31:68:df:d4:3d:cd:76:b5:6f:69:82:9c:
2d:02:ae:81:00:1d:a5:26:d2:b5:c5:b3:f4:88:48:60:39:eb:
91:9e:00:20:c9:3d:4f:b1:56:00:6a:70:35:a5:99:d8:94:7e:
a3:65:3e:3e:48:f2:ba:2e:f4:f4:e1:13:f7:30:22:dd:2c:62:
ed:f5:64:9b:2d:ea:08:34:f6:c2:7a:95:34:24:87:d5:b6:b6:
34:46:67:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/1Aoh5vcGE1Id4wu39bHDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODEyMDgwNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWViMDY0NDQ4NjY2NTcxZTQ1NjVkNjYyZDcxMmRjOTQ0NDIyYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D20Vd6C0FiWARNX3ekIzJbZagsb
gxVpBCFDDEovfjWeNoXCCUL8UdfjkZE9Do6DIQ6Q4JuTSaq1HgA0dHvEidiwB7Im
R7SB0skxCqJbPUkF+Km0PvBEnwI1eKh6BE/u8IgLaILVJ2icrI+3KNBD7qDVxjnN
VQys9GDYvNK6eZT88841SzegEfA5uYHydTGeAuGt3tWAQdMZS2M8oAfZ3iyX8VY8
4N7HUstp6JsQKfPEe0OGkgQCr49ZRzlIqW+81HXzMzW0v1+u9wqdUPUzuuHl/rSI
3SGxTLH24UZkKfz0X/Em7MQjcEfYjQ9TKzbPcjMEyp607/adfEkphB1z2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBrrBkRIZmVx5FZdZi1xLclEQiv6MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvR3VzR1JFaG1aWEhrVmwxbUxYRXR5VVJDS19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUcAwQA
owV9MA0GCSqGSIb3DQEBCwUAA4IBAQCwKTUVMyI/AK+jmxK8Qq1fpjk9zF2vnAHy
mY2zmy/lpZYgrHlhs8JGc68tZwwgKTouFDZeL42rkdH6f+mJ91hUjCSuBmIU9Rri
gQrfYRKiAbN6osJJpTX3Q6QL8lHgba1jm+54wSI0mWdA9Oa32K6jXq+cRstkqbrl
XKAI3f+ucXKy0NNqg24mklr350l2XWuOLwt5jBeXtFUw7kPlSj2Wo21BUiKANjgx
aN/UPc12tW9pgpwtAq6BAB2lJtK1xbP0iEhgOeuRngAgyT1PsVYAanA1pZnYlH6j
ZT4+SPK6LvT04RP3MCLdLGLt9WSbLeoINPbCepU0JIfVtrY0RmfI
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:16 2026 by rpki-client