Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SZ33hJHTwrXKr5ydBbMxhx2rLGw.roa
File: SZ33hJHTwrXKr5ydBbMxhx2rLGw.roa (raw, json)
Hash identifier: 3f9LEIiM0gcU+CLnGFos5glBX3SEXyQZsa3H4FCwPr4=
Subject key identifier: 49:9D:F7:84:91:D3:C2:B5:CA:AF:9C:9D:05:B3:31:87:1D:AB:2C:6C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D06069EEEEAC9DC31B239F06EFD3147B2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SZ33hJHTwrXKr5ydBbMxhx2rLGw.roa
Signing time: Thu 19 Mar 2026 12:16:30 +0000
ROA not before: Thu 19 Mar 2026 12:16:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207019
IP address blocks: 163.5.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:06:9e:ee:ea:c9:dc:31:b2:39:f0:6e:fd:31:47:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 19 12:16:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=499df78491d3c2b5caaf9c9d05b331871dab2c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:56:19:a2:7d:c1:73:6c:a4:85:60:d6:ee:
88:96:32:d7:e8:de:ec:68:de:fc:b6:57:46:d1:e2:
08:be:e7:5d:65:76:ce:be:56:71:c8:d3:59:e2:3e:
2a:ea:e1:20:48:01:58:8f:d7:ec:0e:b2:40:f7:00:
ca:59:ab:e1:ef:f7:c9:49:aa:c0:07:76:80:2c:dc:
b9:35:19:b7:0f:1b:32:ce:d2:91:c6:00:c0:5a:79:
f5:a2:67:ca:b1:d7:74:3c:20:39:34:80:7c:96:97:
ee:31:cf:78:1e:c6:98:16:52:7c:eb:f7:1a:1c:28:
7c:6b:44:7c:ce:7c:7c:33:4b:01:2f:2e:bd:57:9c:
cc:0d:3d:e0:ef:ec:e4:54:70:ca:d5:2b:2f:08:7a:
e2:a4:6a:5f:c3:1a:f7:dd:90:51:ad:be:50:3e:dc:
e4:7a:43:64:70:25:a0:08:a9:57:a0:0a:75:12:0b:
71:ee:8f:89:5b:16:3b:c1:b8:06:69:43:d5:0d:fa:
87:9b:db:1e:03:8a:4e:2f:4b:cc:2d:6d:20:fd:69:
9b:5d:52:c4:7b:43:95:4c:5c:b5:bb:50:8c:83:33:
23:58:b1:7c:19:d7:83:7d:f4:8b:d9:e6:92:18:bb:
2f:e3:77:44:8b:ea:d5:00:bf:b2:65:ab:fd:19:3d:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:F7:84:91:D3:C2:B5:CA:AF:9C:9D:05:B3:31:87:1D:AB:2C:6C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SZ33hJHTwrXKr5ydBbMxhx2rLGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6f:3f:81:fb:4d:f6:36:4f:ef:d2:5c:c6:36:16:fe:78:a0:
1b:cb:18:5f:8e:42:f7:95:e8:ec:98:65:2b:1f:b2:c8:1b:75:
3b:d5:61:8f:7b:ba:9f:a6:51:7e:eb:db:e9:9d:e1:fb:64:67:
12:57:cb:66:a2:63:6f:d5:8c:c6:8f:c2:d5:62:63:a2:78:a9:
ad:a9:ed:e5:93:c4:ac:3c:30:eb:b4:46:63:36:51:ba:a4:d1:
c0:41:c6:69:48:c3:ae:18:1d:f4:74:ea:6e:25:ea:59:83:6e:
8e:11:a7:a0:88:fb:97:6e:df:e4:15:91:13:81:45:a9:0e:1b:
11:44:fe:fe:4a:be:70:9c:08:92:03:19:35:c9:92:ff:c6:bc:
52:dc:29:08:d2:f5:1b:bf:d9:15:a1:18:64:23:a6:10:3e:8c:
21:c2:ec:c3:e1:1d:42:bf:ee:79:84:dc:c8:de:b7:12:1b:11:
54:c5:d4:38:22:49:8f:a5:b2:3a:0c:ee:45:83:02:da:bc:11:
15:c7:f6:62:fa:49:fe:d3:66:4a:d2:15:0a:84:51:75:07:1c:
2e:11:78:2f:72:e8:c0:1e:56:8d:93:98:ff:11:00:33:5c:e5:
53:35:23:d4:b2:ad:b6:8b:da:5e:7f:f5:af:af:31:11:cd:16:
c9:c2:76:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0GBp7u6sncMbI58G79MUeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMzE5MTIxNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTlkZjc4NDkxZDNjMmI1Y2FhZjljOWQwNWIzMzE4NzFkYWIyYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bZWGaJ9wXNspIVg1u6IljLX6N7s
aN78tldG0eIIvuddZXbOvlZxyNNZ4j4q6uEgSAFYj9fsDrJA9wDKWavh7/fJSarA
B3aALNy5NRm3DxsyztKRxgDAWnn1omfKsdd0PCA5NIB8lpfuMc94HsaYFlJ86/ca
HCh8a0R8znx8M0sBLy69V5zMDT3g7+zkVHDK1SsvCHripGpfwxr33ZBRrb5QPtzk
ekNkcCWgCKlXoAp1Egtx7o+JWxY7wbgGaUPVDfqHm9seA4pOL0vMLW0g/WmbXVLE
e0OVTFy1u1CMgzMjWLF8GdeDffSL2eaSGLsv43dEi+rVAL+yZav9GT289QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEmd94SR08K1yq+cnQWzMYcdqyxsMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvU1ozM2hKSFR3clhLcjV5ZEJiTXhoeDJyTEd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXXMA0G
CSqGSIb3DQEBCwUAA4IBAQB3bz+B+032Nk/v0lzGNhb+eKAbyxhfjkL3lejsmGUr
H7LIG3U71WGPe7qfplF+69vpneH7ZGcSV8tmomNv1YzGj8LVYmOieKmtqe3lk8Ss
PDDrtEZjNlG6pNHAQcZpSMOuGB30dOpuJepZg26OEaegiPuXbt/kFZETgUWpDhsR
RP7+Sr5wnAiSAxk1yZL/xrxS3CkI0vUbv9kVoRhkI6YQPowhwuzD4R1Cv+55hNzI
3rcSGxFUxdQ4IkmPpbI6DO5FgwLavBEVx/Zi+kn+02ZK0hUKhFF1BxwuEXgvcujA
HlaNk5j/EQAzXOVTNSPUsq22i9pef/WvrzERzRbJwnY8
-----END CERTIFICATE-----
Generated at Sat Mar 21 12:22:44 2026 by rpki-client