Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Pbzx2j6TrrJWFE9f9voCaqhFWnE.roa
File: Pbzx2j6TrrJWFE9f9voCaqhFWnE.roa (raw, json)
Hash identifier: ka9vTsOushvUBGgUbKTSlXkCJyIDac2iAboDip74yG4=
Subject key identifier: 3D:BC:F1:DA:3E:93:AE:B2:56:14:4F:5F:F6:FA:02:6A:A8:45:5A:71
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A12B0C19113B9FF0A58892AFE6BBE1B1A8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Pbzx2j6TrrJWFE9f9voCaqhFWnE.roa
Signing time: Sun 11 Oct 2026 12:59:35 +0000
ROA not before: Sun 11 Oct 2026 12:59:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401418
IP address blocks: 163.5.198.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0c:19:11:3b:9f:f0:a5:88:92:af:e6:bb:e1:b1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 11 12:59:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dbcf1da3e93aeb256144f5ff6fa026aa8455a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:29:b5:52:e6:f2:8c:9f:33:a1:7a:70:83:
de:94:52:f2:64:2b:28:5a:86:30:46:ea:4f:2d:16:
af:1b:89:4d:f3:60:f4:64:12:9d:5e:65:3e:59:ed:
4f:0c:16:e6:7a:1f:48:35:9b:90:d0:f4:7c:0c:e8:
15:9f:ab:d3:c8:de:e0:a4:8e:62:bf:3a:b4:89:b4:
96:ef:f0:77:a2:e8:1f:bf:b1:89:f5:88:52:09:da:
0a:55:ce:08:59:99:74:c1:a7:42:3f:9c:71:b7:11:
d1:c6:d2:51:9c:20:d1:38:dc:8b:b3:49:62:30:f4:
83:36:a6:e7:97:c4:92:c6:22:74:32:7f:60:b4:a7:
f4:92:8c:2a:15:cd:f7:7c:2e:f9:75:fe:a0:cb:ea:
05:dc:69:cf:79:22:61:98:6f:9d:d3:c4:46:0e:b3:
46:9e:2a:d0:f8:ab:3b:a5:a6:35:4f:13:7b:ce:b0:
9c:1f:25:04:d8:5b:98:b7:1c:63:23:0d:0e:13:b7:
d9:5e:86:cc:63:28:0d:b8:bc:e0:70:bc:59:3a:a7:
ee:17:fe:91:62:b8:61:a3:61:2d:f9:1f:d9:57:12:
2f:06:22:94:9c:61:bf:72:0a:3b:f5:3f:16:9c:67:
74:9c:b7:af:3b:77:4a:a8:9b:08:b3:e1:a0:7d:39:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BC:F1:DA:3E:93:AE:B2:56:14:4F:5F:F6:FA:02:6A:A8:45:5A:71
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Pbzx2j6TrrJWFE9f9voCaqhFWnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.198.0/23
163.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
51:76:9a:4a:3c:d1:61:67:dd:f3:bd:da:12:cb:68:47:87:ff:
82:79:0d:1a:23:93:14:53:c9:2e:ae:95:c3:df:05:f9:4e:78:
86:a8:be:1d:6a:20:d7:66:d9:fb:92:ba:73:90:90:44:20:b5:
d1:16:b7:5f:b1:db:5e:36:3f:81:e2:75:84:66:ba:d7:a5:9b:
7d:fd:a1:db:b0:cb:d2:93:82:51:12:da:26:8a:73:d3:e8:2d:
03:3f:d9:b4:ee:d1:85:bd:41:7f:2e:2e:cc:d8:19:c2:6f:d7:
a3:e1:9c:f9:eb:b2:c9:5e:f0:1c:82:83:4b:75:6f:0e:b8:4c:
6b:a6:8d:a4:53:36:5f:6e:87:8b:2c:0f:7c:c9:81:b6:c1:d9:
92:b3:81:4b:4a:4b:af:24:6d:ae:74:ef:52:2d:98:84:54:19:
31:7a:12:28:3b:df:5b:a3:18:f7:b0:50:49:1e:1f:44:fa:65:
bf:50:2c:d9:06:2b:40:93:fd:53:dd:76:23:12:13:8d:d0:e4:
d3:53:5d:45:50:d0:2b:fd:99:4a:c0:96:20:30:37:7c:51:16:
59:47:f3:fe:e3:86:b4:17:14:17:da:9d:9c:53:b7:b5:f6:74:
2a:d1:d1:5b:e9:f6:63:26:d0:eb:82:36:c9:3f:7a:82:86:8b:
d0:a5:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:33 2026 by rpki-client