Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_KtTz4kfl_-8ZFBcAmhpQOl-Uvg.roa
File: _KtTz4kfl_-8ZFBcAmhpQOl-Uvg.roa (raw, json)
Hash identifier: ZjtsEr81LLH+k2nV2nR+mh1fnF6TDvOW/UnrVp+WFMI=
Subject key identifier: FC:AB:53:CF:89:1F:97:FF:BC:64:50:5C:02:68:69:40:E9:7E:52:F8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E445626DB6067BD09763C043580D3CBDD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_KtTz4kfl_-8ZFBcAmhpQOl-Uvg.roa
Signing time: Wed 20 May 2026 07:42:37 +0000
ROA not before: Wed 20 May 2026 07:42:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:56:26:db:60:67:bd:09:76:3c:04:35:80:d3:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 20 07:42:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcab53cf891f97ffbc64505c02686940e97e52f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:df:a2:c1:67:04:dd:d4:87:52:b4:b8:0d:
cd:e2:09:94:69:a4:53:8d:ad:ac:59:8b:36:50:2b:
84:03:23:f7:4b:32:9e:d0:81:ac:f0:55:c2:b6:aa:
f8:1d:63:ba:2b:32:cc:b0:9d:8f:c7:f2:9c:ef:17:
e2:01:0d:17:e7:6c:7c:66:41:6d:c4:f0:d7:8b:e1:
ee:77:ef:4b:7a:91:f9:48:6d:9d:76:24:94:3f:1a:
b0:b1:9f:b8:e9:26:9e:be:4d:ad:a1:33:0e:9a:1b:
2b:11:d4:4f:c4:c5:10:97:c0:08:ce:3b:03:7f:bb:
84:86:aa:fd:7e:75:9d:bd:80:2c:ec:2e:7f:1a:21:
12:ec:10:12:6c:7c:f8:9e:23:bb:b2:8f:91:03:bd:
c8:11:da:97:de:20:14:64:7b:84:a7:71:ab:04:8e:
3c:e3:ef:54:53:f3:e4:6b:55:52:3a:1d:34:a3:95:
19:40:ee:1f:a3:40:c6:a8:e7:bb:42:fc:25:1d:70:
8d:71:82:17:51:67:93:76:03:73:98:5a:43:47:28:
9f:c8:90:17:b3:a9:6d:a7:2a:e8:49:34:34:ca:68:
61:fd:18:79:88:99:12:f2:13:0c:4e:dc:93:5c:24:
bf:48:81:f0:43:cc:e3:e7:52:99:e3:82:6d:dd:b0:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AB:53:CF:89:1F:97:FF:BC:64:50:5C:02:68:69:40:E9:7E:52:F8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_KtTz4kfl_-8ZFBcAmhpQOl-Uvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.91.0/24
163.5.109.0/24
163.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:13:a1:7d:53:28:63:b4:79:ff:db:80:11:56:7a:fe:89:a5:
24:3b:3e:09:a0:30:0e:bd:d6:80:fa:40:7f:58:0d:e8:4e:70:
c0:3c:a9:0e:fb:e0:f3:ab:20:ab:25:ad:e7:b1:ff:cf:47:bb:
34:69:f0:35:3f:15:dd:d4:28:18:ac:67:d7:33:26:57:f9:c7:
7d:82:c4:20:71:6b:8a:e1:6f:06:93:7a:4f:c8:8a:dd:d2:c3:
9f:7b:75:9d:a6:85:a2:cd:9f:de:4f:4a:bb:b1:e1:38:e2:0b:
86:be:cd:e5:20:5c:a7:56:f5:97:6a:7e:f9:20:9f:26:58:c1:
03:6d:96:09:4f:a6:4c:76:97:91:02:88:4b:d2:e7:bc:71:f5:
80:0d:d2:ce:09:88:c8:08:4d:23:07:9e:4d:e3:89:7f:fe:fb:
e9:9a:db:dd:44:cc:3b:7f:f2:ed:8c:df:bb:4a:87:a5:c2:7b:
a7:cf:1f:5d:95:32:59:b7:f5:d2:c1:cc:ed:19:83:5a:37:c8:
cf:15:03:9c:b9:1d:7f:fa:19:94:27:37:44:d1:24:2f:fd:5a:
85:cb:c7:3a:ec:82:8b:f2:51:81:7d:0d:3e:86:4a:54:91:da:
d2:c8:66:c3:43:46:61:48:9a:fb:7e:cf:9b:67:09:55:4b:8b:
10:9f:89:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ5EVibbYGe9CXY8BDWA08vdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNTIwMDc0MjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2FiNTNjZjg5MWY5N2ZmYmM2NDUwNWMwMjY4Njk0MGU5N2U1MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm/fosFnBN3Uh1K0uA3N4gmUaaRT
ja2sWYs2UCuEAyP3SzKe0IGs8FXCtqr4HWO6KzLMsJ2Px/Kc7xfiAQ0X52x8ZkFt
xPDXi+Hud+9LepH5SG2ddiSUPxqwsZ+46Saevk2toTMOmhsrEdRPxMUQl8AIzjsD
f7uEhqr9fnWdvYAs7C5/GiES7BASbHz4niO7so+RA73IEdqX3iAUZHuEp3GrBI48
4+9UU/Pka1VSOh00o5UZQO4fo0DGqOe7QvwlHXCNcYIXUWeTdgNzmFpDRyifyJAX
s6ltpyroSTQ0ymhh/Rh5iJkS8hMMTtyTXCS/SIHwQ8zj51KZ44Jt3bAX8wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPyrU8+JH5f/vGRQXAJoaUDpflL4MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvX0t0VHo0a2ZsXy04WkZCY0FtaHBRT2wtVXZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowVbAwQA
owVtAwQAowWTMA0GCSqGSIb3DQEBCwUAA4IBAQBKE6F9UyhjtHn/24ARVnr+iaUk
Oz4JoDAOvdaA+kB/WA3oTnDAPKkO++DzqyCrJa3nsf/PR7s0afA1PxXd1CgYrGfX
MyZX+cd9gsQgcWuK4W8Gk3pPyIrd0sOfe3WdpoWizZ/eT0q7seE44guGvs3lIFyn
VvWXan75IJ8mWMEDbZYJT6ZMdpeRAohL0ue8cfWADdLOCYjICE0jB55N44l//vvp
mtvdRMw7f/LtjN+7Soelwnunzx9dlTJZt/XSwcztGYNaN8jPFQOcuR1/+hmUJzdE
0SQv/VqFy8c67IKL8lGBfQ0+hkpUkdrSyGbDQ0ZhSJr7fs+bZwlVS4sQn4lB
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:08 2026 by rpki-client