Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_PbiPAxJrsoF5M8FowjbJHH4qqQ.roa
File: _PbiPAxJrsoF5M8FowjbJHH4qqQ.roa (raw, json)
Hash identifier: Cszo0rdlYpsimhnKFVIenKDHLruNQN0gVqMIPIH4di8=
Subject key identifier: FC:F6:E2:3C:0C:49:AE:CA:05:E4:CF:05:A3:08:DB:24:71:F8:AA:A4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A154C2406E8F7747986F58E31B3BC338F0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_PbiPAxJrsoF5M8FowjbJHH4qqQ.roa
Signing time: Mon 19 Oct 2026 15:22:58 +0000
ROA not before: Mon 19 Oct 2026 15:22:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.50.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:c2:40:6e:8f:77:47:98:6f:58:e3:1b:3b:c3:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 19 15:22:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcf6e23c0c49aeca05e4cf05a308db2471f8aaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:b6:5f:00:76:85:2f:bb:10:a1:2a:33:e5:
97:a7:56:4b:1a:20:19:ad:72:8a:be:e0:69:af:d4:
6a:fb:84:b1:9f:0c:9c:b0:8a:05:49:33:d2:7f:0d:
99:d0:fa:3e:d3:2e:6f:1e:e3:4d:fd:8c:57:b2:78:
33:e1:06:03:60:cf:03:7a:7e:0a:e2:56:17:1d:1e:
33:34:ed:5a:41:17:f0:93:eb:f9:c0:cc:0e:a1:53:
7c:a4:56:c6:a6:d0:f2:a4:1f:7a:11:85:51:43:e0:
97:55:d1:13:11:16:99:3a:90:23:27:79:29:ec:1e:
56:52:56:4f:36:9d:99:c5:4a:51:30:b5:4b:4c:92:
d1:a7:29:f2:e4:89:71:84:08:9e:5c:bd:5a:92:28:
84:7b:1f:e6:53:76:c0:48:10:0f:07:6f:78:bd:e8:
b5:f0:ad:eb:9e:cb:18:10:ca:64:5d:41:45:e3:ce:
92:ef:99:84:10:1d:d9:ec:b6:c0:ef:28:2f:b2:f0:
14:d4:e4:35:2d:f9:87:1f:24:f5:d8:71:f7:4f:98:
89:04:28:89:17:52:5d:87:b0:6a:7b:39:d5:2b:aa:
5a:5e:f0:66:08:2b:a1:04:22:52:12:43:b6:73:5d:
e2:53:12:37:e3:77:9b:99:7c:0a:ed:bb:8d:96:f3:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:E2:3C:0C:49:AE:CA:05:E4:CF:05:A3:08:DB:24:71:F8:AA:A4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_PbiPAxJrsoF5M8FowjbJHH4qqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.50.0/23
163.5.117.0/24
163.5.125.0/24
163.5.135.0/24
163.5.190.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a5:a9:7a:5a:24:9e:c3:31:a7:5b:b3:5d:06:e3:13:39:66:
c1:66:fc:f4:db:bd:3c:f2:30:69:bc:b4:1d:7b:dd:dc:1c:18:
76:cb:de:7e:f3:b3:5c:06:f7:7c:bd:92:ea:3e:d9:10:0c:c9:
18:ad:d7:17:c6:d6:d6:6f:08:a2:ca:d8:67:d3:9c:87:b1:d0:
15:06:d2:e0:ff:e4:59:79:2d:51:9d:8e:40:38:ff:5f:d9:61:
ab:40:d4:89:9d:6d:c7:85:a5:18:94:85:62:82:a0:f4:71:ae:
de:79:a8:0c:31:07:ea:df:3b:41:a2:9f:a3:2b:60:ca:49:62:
2f:b3:11:d5:64:cf:6b:57:72:2d:fd:f4:67:8b:ee:a0:2b:85:
19:53:03:3c:15:5c:cc:a8:38:5a:ac:4e:f7:48:59:1d:6d:24:
55:68:73:a7:2c:0d:6a:50:14:d5:88:ca:ed:79:d6:d5:c2:de:
41:6f:f6:52:e9:33:12:34:c4:1b:6e:46:9e:f6:d7:ad:1d:af:
d9:29:06:52:6a:73:9d:1a:49:0c:d4:56:ad:44:79:1e:b1:e7:
11:bd:db:8f:fe:43:49:69:91:1a:f5:a8:dc:a3:6d:4a:5b:eb:
21:8b:c4:ef:68:f1:31:92:35:dd:11:94:91:46:c2:3f:ba:82:
92:3b:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:33:35 2026 by rpki-client