Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_FI8EkY8Fxd7-MUT6dj40C_9zN0.roa
File: _FI8EkY8Fxd7-MUT6dj40C_9zN0.roa (raw, json)
Hash identifier: Pc3GOV49pKbv4XflxXvd80uPd3up7Ux46m6CnMVICjw=
Subject key identifier: FC:52:3C:12:46:3C:17:17:7B:F8:C5:13:E9:D8:F8:D0:2F:FD:CC:DD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0308F8ABBDA72FBD0D0B4E3C2D4EB41FD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_FI8EkY8Fxd7-MUT6dj40C_9zN0.roa
Signing time: Sun 23 Aug 2026 21:38:28 +0000
ROA not before: Sun 23 Aug 2026 21:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:8f:8a:bb:da:72:fb:d0:d0:b4:e3:c2:d4:eb:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 23 21:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc523c12463c17177bf8c513e9d8f8d02ffdccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:d9:c8:f3:73:f0:16:e4:de:72:7a:c0:14:
53:a4:00:57:dd:43:9a:6a:b5:fc:20:ff:0c:86:fe:
06:13:0a:b6:d3:9b:3f:f6:95:51:e0:02:1b:d6:d0:
db:dd:5c:64:53:c2:52:02:f1:d2:09:68:38:f5:da:
0e:11:94:20:19:00:ff:9f:68:62:2e:92:7c:8d:96:
bb:27:3d:36:91:33:26:29:91:0d:43:86:1c:c9:75:
b9:75:93:cf:5b:27:41:da:8f:7e:63:45:a0:f5:43:
b9:7d:d3:54:40:a5:ae:e9:9d:5c:6d:ca:2f:84:c6:
82:de:b1:5e:e0:fb:22:6e:73:60:7c:70:7c:b1:f3:
e8:85:bb:37:1a:fd:a6:12:12:c8:8e:0e:b1:98:74:
77:26:d7:10:61:1b:7c:49:e9:f2:9d:1e:cf:11:db:
69:d8:87:85:11:c3:39:41:cd:be:04:b8:9a:86:ee:
e6:34:36:4c:5b:dd:a7:b9:16:e3:be:e1:0b:e8:5e:
51:0d:e9:20:b4:0f:11:07:12:d2:d9:2f:5a:e8:53:
6d:9e:a8:c6:07:62:af:44:44:18:1e:23:3b:64:da:
13:4c:7d:d1:20:91:fb:ad:00:75:6a:ea:ae:84:0e:
6d:ea:88:59:ed:b3:d6:21:cd:cb:c5:92:61:b2:bf:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:52:3C:12:46:3C:17:17:7B:F8:C5:13:E9:D8:F8:D0:2F:FD:CC:DD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_FI8EkY8Fxd7-MUT6dj40C_9zN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.87.0/24
163.5.95.0/24
163.5.117.0/24
163.5.123.0/24
163.5.136.0/24
163.5.181.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7d:8b:e9:93:42:52:ef:b3:1d:0b:15:5a:3b:5d:39:76:ea:
94:b6:06:b9:50:aa:bf:87:01:85:b4:3d:64:36:ec:b5:cd:7e:
d0:fe:ff:99:f6:6c:39:33:64:13:15:e3:fb:da:ec:72:cc:21:
07:48:be:70:bc:89:3f:bb:c1:46:01:ae:fe:9b:dc:b0:d6:09:
35:a0:2c:42:8d:fe:23:57:05:63:09:df:61:7f:46:e0:27:ae:
f7:56:b0:a9:72:5f:7f:1b:8d:fc:c8:2d:60:95:25:a6:aa:8c:
d9:af:10:4f:a9:25:fd:14:dc:cd:18:f7:66:f7:6a:86:b1:34:
ed:44:1a:ac:d5:54:8b:91:b2:1b:94:2f:9d:09:e9:4e:6a:36:
07:6b:12:b1:9c:33:ae:df:59:c2:f7:33:5d:3d:90:95:90:5b:
51:cb:a4:1e:c0:b7:c3:d9:3b:b9:0c:d9:aa:b0:36:82:b1:9c:
dc:11:29:7a:e5:0c:f3:34:b9:a5:42:e1:f2:ac:49:61:07:35:
01:81:99:93:52:89:5b:16:d0:90:28:30:cf:61:a6:16:27:f8:
d7:7e:14:10:31:c0:cb:d5:02:92:43:6c:b2:7d:c0:26:98:6d:
81:bb:2d:80:68:14:4e:ef:97:c0:dc:96:a1:ef:bf:d4:ee:cf:
46:8c:95:3a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaAwj4q72nL70NC048LU60H9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODIzMjEzODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzUyM2MxMjQ2M2MxNzE3N2JmOGM1MTNlOWQ4ZjhkMDJmZmRjY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokfZyPNz8Bbk3nJ6wBRTpABX3UOa
arX8IP8Mhv4GEwq205s/9pVR4AIb1tDb3VxkU8JSAvHSCWg49doOEZQgGQD/n2hi
LpJ8jZa7Jz02kTMmKZENQ4YcyXW5dZPPWydB2o9+Y0Wg9UO5fdNUQKWu6Z1cbcov
hMaC3rFe4PsibnNgfHB8sfPohbs3Gv2mEhLIjg6xmHR3JtcQYRt8SenynR7PEdtp
2IeFEcM5Qc2+BLiahu7mNDZMW92nuRbjvuEL6F5RDekgtA8RBxLS2S9a6FNtnqjG
B2KvREQYHiM7ZNoTTH3RIJH7rQB1auquhA5t6ohZ7bPWIc3LxZJhsr8TUQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPxSPBJGPBcXe/jFE+nY+NAv/czdMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvX0ZJOEVrWThGeGQ3LU1VVDZkajQwQ185ek4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAowUkAwQA
owVXAwQAowVfAwQAowV1AwQAowV7AwQAowWIAwQAowW1MA0GCSqGSIb3DQEBCwUA
A4IBAQBifYvpk0JS77MdCxVaO105duqUtga5UKq/hwGFtD1kNuy1zX7Q/v+Z9mw5
M2QTFeP72uxyzCEHSL5wvIk/u8FGAa7+m9yw1gk1oCxCjf4jVwVjCd9hf0bgJ673
VrCpcl9/G438yC1glSWmqozZrxBPqSX9FNzNGPdm92qGsTTtRBqs1VSLkbIblC+d
CelOajYHaxKxnDOu31nC9zNdPZCVkFtRy6QewLfD2Tu5DNmqsDaCsZzcESl65Qzz
NLmlQuHyrElhBzUBgZmTUolbFtCQKDDPYaYWJ/jXfhQQMcDL1QKSQ2yyfcAmmG2B
uy2AaBRO75fA3Jah77/U7s9GjJU6
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:52 2026 by rpki-client