Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TApjrbmAPw3UoWqx05Nd98xmQFg.roa
File: TApjrbmAPw3UoWqx05Nd98xmQFg.roa (raw, json)
Hash identifier: WXj311tT2FIC/Okk7Xnuvl0QA/t3WkkSnl7bLUx09oA=
Subject key identifier: 4C:0A:63:AD:B9:80:3F:0D:D4:A1:6A:B1:D3:93:5D:F7:CC:66:40:58
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A05BF8E331249088162B62BFF244401611
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TApjrbmAPw3UoWqx05Nd98xmQFg.roa
Signing time: Tue 01 Sep 2026 07:57:12 +0000
ROA not before: Tue 01 Sep 2026 07:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.59.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f8:e3:31:24:90:88:16:2b:62:bf:f2:44:40:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 1 07:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c0a63adb9803f0dd4a16ab1d3935df7cc664058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:48:97:84:da:2a:27:ec:c3:c4:b6:ac:54:
01:70:f2:d3:aa:65:2d:51:22:1a:aa:ad:15:43:4a:
b6:ba:62:6a:4c:0c:2f:b5:0d:19:df:b9:15:7b:7d:
79:74:49:68:56:74:0a:4c:2e:e1:ab:a7:ad:c5:6e:
20:74:19:23:ea:20:8d:a3:2c:eb:6d:a8:86:d4:b5:
e6:2e:c6:d2:99:b6:42:2c:ea:84:d1:ca:f2:15:7a:
2a:ec:e7:8a:37:e6:29:af:fa:df:63:d5:43:f0:28:
e4:28:6e:71:5a:f2:09:af:b7:64:2b:e8:b8:af:14:
36:7c:05:b6:3c:e7:88:9f:95:7b:d9:54:de:8e:f8:
97:f7:09:d2:20:e9:e1:81:34:78:ce:7d:67:87:b7:
6a:ad:b2:95:21:c1:f2:18:23:9d:16:60:d8:1a:10:
48:2c:ea:25:4a:35:1d:cf:d7:bf:7c:f3:a8:95:c7:
82:47:a2:96:0a:14:49:28:c3:db:d9:d3:57:4b:41:
65:24:1d:84:5e:46:b8:52:50:83:f8:f7:a5:a6:75:
a8:a9:d7:13:82:ba:aa:ca:4e:57:03:f2:76:f8:64:
24:fd:a1:11:3d:6f:0e:69:21:22:81:84:15:b9:3a:
6c:87:a9:d0:7c:02:75:6d:63:26:af:f8:5f:19:26:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:63:AD:B9:80:3F:0D:D4:A1:6A:B1:D3:93:5D:F7:CC:66:40:58
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TApjrbmAPw3UoWqx05Nd98xmQFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
163.5.112.0/24
163.5.121.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.215.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.240.0/23
Signature Algorithm: sha256WithRSAEncryption
32:62:75:95:41:34:0d:b6:2f:ab:c5:6f:57:1d:9b:8e:2f:30:
e5:2b:b6:4a:26:39:3d:99:96:cb:ca:9c:0f:5c:95:ab:af:02:
31:9b:18:a9:e5:4c:28:b2:ab:72:17:44:51:5e:b1:b0:31:7d:
58:1d:c0:e3:79:34:8d:61:e5:95:92:71:60:e6:78:04:1b:e3:
45:0d:ee:d3:30:2a:d8:42:0a:89:07:60:5c:09:1e:37:a2:96:
fc:26:5e:8d:90:9f:c3:79:56:b5:0b:c3:8a:ab:14:57:7a:de:
88:09:5f:53:7d:17:37:4c:28:9f:9b:35:ec:cd:20:54:84:31:
45:73:72:e1:40:5c:75:c1:c7:d5:57:2c:c9:3e:dc:74:da:9d:
9e:7f:73:1d:9d:59:3a:bb:0a:1e:89:13:a4:13:f1:cb:a5:72:
68:4d:e3:bf:ec:7e:59:9e:53:fe:5a:6e:af:65:2d:3c:30:1b:
b7:1e:fb:97:d4:78:44:85:2e:7c:f1:05:54:5f:98:2c:81:f1:
4c:5a:7f:9b:63:c3:44:24:e4:12:fc:c0:bf:fb:18:c3:b3:6b:
2e:a0:19:5f:a5:57:41:92:bc:cc:d0:2a:fe:31:57:29:14:2c:
9b:f8:4d:25:87:13:e7:34:9b:19:49:e5:a1:c6:bc:ca:48:27:
89:93:f5:54
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAaBb+OMxJJCIFitiv/JEQBYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwOTAxMDc1NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzBhNjNhZGI5ODAzZjBkZDRhMTZhYjFkMzkzNWRmN2NjNjY0MDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirNIl4TaKifsw8S2rFQBcPLTqmUt
USIaqq0VQ0q2umJqTAwvtQ0Z37kVe315dEloVnQKTC7hq6etxW4gdBkj6iCNoyzr
baiG1LXmLsbSmbZCLOqE0cryFXoq7OeKN+Ypr/rfY9VD8CjkKG5xWvIJr7dkK+i4
rxQ2fAW2POeIn5V72VTejviX9wnSIOnhgTR4zn1nh7dqrbKVIcHyGCOdFmDYGhBI
LOolSjUdz9e/fPOolceCR6KWChRJKMPb2dNXS0FlJB2EXka4UlCD+PelpnWoqdcT
grqqyk5XA/J2+GQk/aERPW8OaSEigYQVuTpsh6nQfAJ1bWMmr/hfGSZtvwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFEwKY625gD8N1KFqsdOTXffMZkBYMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvVEFwanJibUFQdzNVb1dxeDA1TmQ5OHhtUUZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAowU7AwQA
owVwAwQAowV5AwQAowWBAwQAowWLAwQAowWPAwQAowWSAwQAowWgAwQAowWnAwQA
owWyAwQAowXEAwQAowXXAwQAowXaAwQAowXgAwQAowXkAwQAowXpAwQBowXwMA0G
CSqGSIb3DQEBCwUAA4IBAQAyYnWVQTQNti+rxW9XHZuOLzDlK7ZKJjk9mZbLypwP
XJWrrwIxmxip5UwosqtyF0RRXrGwMX1YHcDjeTSNYeWVknFg5ngEG+NFDe7TMCrY
QgqJB2BcCR43opb8Jl6NkJ/DeVa1C8OKqxRXet6ICV9TfRc3TCifmzXszSBUhDFF
c3LhQFx1wcfVVyzJPtx02p2ef3MdnVk6uwoeiROkE/HLpXJoTeO/7H5ZnlP+Wm6v
ZS08MBu3HvuX1HhEhS588QVUX5gsgfFMWn+bY8NEJOQS/MC/+xjDs2suoBlfpVdB
krzM0Cr+MVcpFCyb+E0lhxPnNJsZSeWhxrzKSCeJk/VU
-----END CERTIFICATE-----
Generated at Thu Sep 3 19:11:28 2026 by rpki-client