Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Yroi6SeRSglN1pk2eQCBXR2qMR4.roa
File: Yroi6SeRSglN1pk2eQCBXR2qMR4.roa (raw, json)
Hash identifier: twoB2JSUZ2dC2yOe4WDocxyd2cn3yZi3SpeSX5BzO00=
Subject key identifier: 62:BA:22:E9:27:91:4A:09:4D:D6:99:36:79:00:81:5D:1D:AA:31:1E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0595191B5F44E5E51FD0DBEECA22BDA20
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Yroi6SeRSglN1pk2eQCBXR2qMR4.roa
Signing time: Mon 31 Aug 2026 19:35:13 +0000
ROA not before: Mon 31 Aug 2026 19:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 163.5.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:51:91:b5:f4:4e:5e:51:fd:0d:be:ec:a2:2b:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 31 19:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62ba22e927914a094dd699367900815d1daa311e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:30:d9:cb:6b:9d:b6:7a:97:fb:4b:cc:b1:
ea:e4:07:1f:d3:88:1f:2b:92:57:3a:50:83:9c:ae:
20:8a:ae:56:d9:53:6e:a8:04:e6:4b:d5:e6:f8:89:
9b:70:b0:0d:d4:b0:03:c9:d8:2a:5a:10:33:8e:ad:
6a:93:d3:44:82:bd:77:21:31:44:00:a7:e3:7e:d1:
db:05:03:76:87:12:46:04:5b:75:36:b4:5f:a2:8d:
59:2e:b7:3d:2e:96:ab:64:7e:f8:79:a9:39:39:2c:
23:c8:38:54:0f:fc:e0:a5:e5:7f:50:80:4a:76:12:
af:5c:e9:38:a2:55:d1:4c:f8:1c:2e:3c:e6:3a:f2:
02:02:09:e7:4f:5f:69:e8:20:3d:f6:f1:08:2f:d6:
f6:64:d0:15:8b:0b:c9:16:13:bb:f7:56:75:ef:c5:
06:e2:d2:e5:7b:a4:c1:d7:99:9e:76:63:7e:d9:cc:
e1:87:f1:c2:9f:1e:20:8a:cb:d4:3d:b2:4a:6a:64:
b0:92:65:ea:14:ca:36:b4:1f:95:49:14:7e:56:5b:
17:60:4d:ff:21:be:68:e3:4c:2f:ee:18:cf:99:1c:
8e:73:4f:9a:da:ed:6c:ea:54:90:f5:dc:4a:d6:d9:
78:ad:3b:ae:78:31:24:9f:64:21:44:21:af:08:15:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BA:22:E9:27:91:4A:09:4D:D6:99:36:79:00:81:5D:1D:AA:31:1E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Yroi6SeRSglN1pk2eQCBXR2qMR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.209.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ae:38:50:1b:7e:36:c1:d9:e9:a9:df:0a:dc:3b:4f:d8:72:
8a:ac:ae:e7:c2:c8:7c:02:13:1e:22:63:7e:b0:5f:ac:a9:8b:
23:16:36:0e:2e:3e:6e:88:17:0a:83:e5:c7:e6:b9:ff:c3:b6:
c7:c4:ba:9f:a6:6b:64:40:48:49:ff:97:1a:8e:e6:7d:f7:20:
0d:37:31:be:bd:06:f3:37:e4:a1:2c:cd:d6:28:71:84:19:00:
f6:04:79:1e:84:e1:99:cd:b7:11:d8:9d:c3:39:ea:b9:af:ed:
4f:b7:59:e5:39:f6:2c:36:0c:b4:67:33:08:a2:01:46:e1:17:
18:7e:b5:8b:2b:e8:5b:b7:2c:2d:01:24:72:90:cc:41:c5:21:
f6:3d:51:87:20:78:fa:16:56:b2:85:78:82:3a:95:20:da:eb:
7c:7d:da:63:18:97:1e:06:ef:4b:e8:fe:c0:32:51:8b:f9:16:
be:f1:20:15:38:bb:cc:f1:4e:f8:c5:0d:99:b8:4f:7c:0a:7a:
55:a5:ef:f1:ff:45:a4:d9:ab:a3:e7:33:b1:e8:21:29:a4:db:
f9:96:60:46:69:b0:4e:ca:22:23:32:01:95:d1:e1:6a:58:bb:
5b:53:3e:76:70:36:9f:dc:1c:53:01:53:38:86:0b:4c:06:b0:
54:26:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:46 2026 by rpki-client