Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hUyy9pGidWjyWBWppuWy6Sn7u3Q.roa
File: hUyy9pGidWjyWBWppuWy6Sn7u3Q.roa (raw, json)
Hash identifier: hdWI+Y42oS8Ihh9TXTWPK88+Fypk24eTqfA+IN871fo=
Subject key identifier: 85:4C:B2:F6:91:A2:75:68:F2:58:15:A9:A6:E5:B2:E9:29:FB:BB:74
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CE6DB81CCFD7A7D38FCBF8D01C6E28177
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hUyy9pGidWjyWBWppuWy6Sn7u3Q.roa
Signing time: Fri 13 Mar 2026 11:01:11 +0000
ROA not before: Fri 13 Mar 2026 11:01:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.62.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:81:cc:fd:7a:7d:38:fc:bf:8d:01:c6:e2:81:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 11:01:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=854cb2f691a27568f25815a9a6e5b2e929fbbb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:dd:12:fc:25:5e:4b:b9:b0:2d:5d:d0:74:
c2:1a:ae:9c:27:aa:4d:db:4b:5a:38:07:38:df:d7:
14:07:bf:20:d2:17:08:16:f4:23:a3:16:24:92:0d:
ad:6b:32:82:e3:4a:46:81:2e:dd:98:20:ec:be:d1:
62:84:b9:25:07:81:08:30:fc:7a:07:36:90:c2:40:
68:d2:2e:95:83:46:96:4d:12:ed:2d:24:3e:14:54:
16:56:79:da:73:79:71:92:89:38:88:81:ff:f8:7b:
c1:c1:1c:1f:f8:4e:67:c3:03:8f:69:bc:f9:42:0e:
35:bf:8a:cb:32:c5:91:85:1d:b2:34:27:89:56:dc:
fa:72:eb:16:f5:4c:f1:a5:07:7b:b4:cd:96:be:af:
fb:c2:55:16:86:e6:75:7b:a8:31:8a:20:b7:0e:02:
0b:46:c0:1d:10:32:56:cf:66:f6:e5:5e:81:48:c6:
e6:2e:f1:bc:25:f4:b0:43:4f:20:59:95:c3:07:e0:
68:23:70:3d:9e:e0:fe:85:74:97:6f:31:31:2a:87:
74:04:65:11:f5:90:b0:02:e1:b5:2f:d6:89:1c:bf:
64:e4:67:80:8c:71:1d:73:44:81:d1:25:2d:40:d2:
72:0a:fc:23:2b:0f:5b:3b:1b:43:04:6f:04:23:9e:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:B2:F6:91:A2:75:68:F2:58:15:A9:A6:E5:B2:E9:29:FB:BB:74
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hUyy9pGidWjyWBWppuWy6Sn7u3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.62.0/24
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e9:a9:59:22:b6:48:c6:97:b6:d7:f4:07:e6:84:29:c0:fd:
f3:a5:a8:da:ef:ad:37:43:9c:12:22:d2:e8:b1:97:a7:63:d2:
56:3b:a1:75:4a:ef:12:21:30:98:fa:de:43:25:9e:29:b4:e4:
ea:a9:f4:1c:de:77:a3:95:9b:0d:4d:e5:29:4e:da:42:34:bd:
1f:e9:4f:16:5f:06:3b:c4:3c:a2:84:91:9a:72:92:af:58:11:
4f:1a:63:cb:39:48:0c:0d:7b:02:0e:53:04:45:fc:b7:3e:3a:
5d:78:0c:b9:57:a8:f4:a4:82:94:ad:08:38:7f:2c:db:10:42:
33:92:40:df:bd:a5:ef:f3:23:18:1f:52:2b:1a:df:16:48:0e:
e9:40:3c:30:dc:40:e1:90:80:17:22:29:33:9a:68:56:04:90:
91:8c:ec:10:2c:5f:7e:f7:cb:39:53:0d:8e:cb:0d:37:7e:05:
81:f8:76:f8:89:e7:c1:78:b5:03:58:8a:19:b9:6a:8a:73:e9:
dc:06:c7:68:e0:5c:fc:af:11:c5:12:53:ab:11:09:e9:34:22:
21:3a:c5:99:1b:d9:57:c9:dd:69:81:9e:61:4c:00:33:0a:21:
64:77:54:be:04:84:dd:c5:4a:43:7f:34:c5:1e:c4:6e:3d:ac:
c9:c9:e9:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZzm24HM/Xp9OPy/jQHG4oF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMzEzMTEwMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTRjYjJmNjkxYTI3NTY4ZjI1ODE1YTlhNmU1YjJlOTI5ZmJiYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPDdEvwlXku5sC1d0HTCGq6cJ6pN
20taOAc439cUB78g0hcIFvQjoxYkkg2tazKC40pGgS7dmCDsvtFihLklB4EIMPx6
BzaQwkBo0i6Vg0aWTRLtLSQ+FFQWVnnac3lxkok4iIH/+HvBwRwf+E5nwwOPabz5
Qg41v4rLMsWRhR2yNCeJVtz6cusW9UzxpQd7tM2Wvq/7wlUWhuZ1e6gxiiC3DgIL
RsAdEDJWz2b25V6BSMbmLvG8JfSwQ08gWZXDB+BoI3A9nuD+hXSXbzExKod0BGUR
9ZCwAuG1L9aJHL9k5GeAjHEdc0SB0SUtQNJyCvwjKw9bOxtDBG8EI55p4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIVMsvaRonVo8lgVqablsukp+7t0MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvaFV5eTlwR2lkV2p5V0JXcHB1V3k2U243dTNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowU+AwQA
owW7MA0GCSqGSIb3DQEBCwUAA4IBAQAE6alZIrZIxpe21/QH5oQpwP3zpaja7603
Q5wSItLosZenY9JWO6F1Su8SITCY+t5DJZ4ptOTqqfQc3nejlZsNTeUpTtpCNL0f
6U8WXwY7xDyihJGacpKvWBFPGmPLOUgMDXsCDlMERfy3PjpdeAy5V6j0pIKUrQg4
fyzbEEIzkkDfvaXv8yMYH1IrGt8WSA7pQDww3EDhkIAXIikzmmhWBJCRjOwQLF9+
98s5Uw2Oyw03fgWB+Hb4iefBeLUDWIoZuWqKc+ncBsdo4Fz8rxHFElOrEQnpNCIh
OsWZG9lXyd1pgZ5hTAAzCiFkd1S+BITdxUpDfzTFHsRuPazJyek3
-----END CERTIFICATE-----
Generated at Sat Mar 14 06:13:14 2026 by rpki-client