Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kEtHWR9Q8MpnNcfDoFfIqlD5cuY.roa
File: kEtHWR9Q8MpnNcfDoFfIqlD5cuY.roa (raw, json)
Hash identifier: JxlOuS/dRrmP5TVQYEcY/fUaWkC417OD11moBOwI8QY=
Subject key identifier: 90:4B:47:59:1F:50:F0:CA:67:35:C7:C3:A0:57:C8:AA:50:F9:72:E6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A01F129B14A2BFFFE47C28720872698766
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kEtHWR9Q8MpnNcfDoFfIqlD5cuY.roa
Signing time: Thu 20 Aug 2026 12:08:28 +0000
ROA not before: Thu 20 Aug 2026 12:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.46.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:12:9b:14:a2:bf:ff:e4:7c:28:72:08:72:69:87:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 20 12:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904b47591f50f0ca6735c7c3a057c8aa50f972e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:ee:99:7a:22:7f:87:25:c3:20:40:04:78:
e6:81:a2:da:34:b7:f9:6c:9d:d4:83:00:ce:be:ae:
41:c4:24:70:51:a5:ca:0a:79:4b:da:0c:9a:9e:e4:
73:9d:30:5b:b0:70:0e:36:dc:53:e2:c5:af:8a:65:
5d:1e:18:d9:78:bd:89:ce:be:a4:c2:9a:ef:ba:63:
e4:47:b0:0c:b5:d7:b2:53:51:5f:77:89:47:f5:b4:
87:65:8d:50:cd:93:8e:8f:b2:c3:35:43:03:69:bd:
d5:58:44:05:f2:f9:ea:27:f0:11:9a:73:1e:cb:94:
23:bc:1e:44:c3:40:ca:06:ce:af:a2:d7:67:2d:59:
c2:0d:5c:81:ec:d7:16:f2:d3:e9:a5:17:2b:b1:90:
4d:80:9c:7d:13:f4:17:e4:d9:28:72:82:ca:ba:57:
86:a6:52:65:cd:b8:e2:09:8d:22:a0:28:09:fd:67:
0a:6b:c1:f4:e9:72:67:95:6c:1c:36:47:bd:04:bd:
4d:84:14:5f:0f:00:48:4a:75:1d:8e:44:07:32:10:
51:43:32:b6:36:73:30:d7:8d:67:57:47:6f:6f:cd:
15:f9:da:28:1c:4e:de:c2:58:64:3a:e6:c2:20:fc:
96:88:75:19:66:11:8a:21:4c:b8:03:b2:75:fd:94:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:47:59:1F:50:F0:CA:67:35:C7:C3:A0:57:C8:AA:50:F9:72:E6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kEtHWR9Q8MpnNcfDoFfIqlD5cuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.46.0/24
163.5.52.0/24
163.5.71.0/24
163.5.82.0/24
163.5.101.0/24
163.5.227.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
81:25:4d:0f:32:7a:c2:75:b9:86:c3:0f:1b:23:0e:a3:a9:9c:
8a:67:91:20:da:94:90:1a:ec:05:c9:fc:e8:8a:cd:eb:ed:42:
e7:64:b1:e5:a1:fa:55:c8:e9:be:27:eb:ce:0e:96:d9:34:20:
61:4b:96:9f:47:3d:d3:22:0d:66:7a:82:a4:6a:a8:a5:62:a8:
1d:23:99:29:33:a2:92:b0:40:2e:02:9a:9a:fd:11:1b:43:35:
2f:85:a9:89:55:f4:30:03:87:88:fb:c7:f4:f4:c1:72:ff:8c:
ac:c9:0f:4c:d3:f6:ed:32:ba:2b:c8:c4:23:2a:ee:a3:5e:00:
60:fb:06:c4:46:34:6e:e2:89:dc:74:2a:93:af:38:15:7a:ca:
19:1a:e3:a1:8d:c7:3a:01:37:4a:f7:d1:cd:91:f9:d9:5a:dd:
7a:72:8d:c4:d1:ea:74:6d:e9:10:5a:a5:29:25:86:62:93:6d:
2b:32:96:e6:16:5f:57:2c:fe:99:50:0b:3f:d0:7d:24:c4:61:
70:3b:26:a3:9e:9f:c2:2d:99:f2:e2:75:fe:e1:b8:53:fd:0f:
05:00:94:e7:b9:e8:fd:7c:aa:0f:d1:70:30:1f:ed:ec:cb:46:
74:21:b6:76:d5:92:bb:9a:67:62:86:fa:f7:7a:07:f3:63:c5:
1f:ac:ba:e0
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaAfEpsUor//5HwocghyaYdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODIwMTIwODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDRiNDc1OTFmNTBmMGNhNjczNWM3YzNhMDU3YzhhYTUwZjk3MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxerumXoif4clwyBABHjmgaLaNLf5
bJ3UgwDOvq5BxCRwUaXKCnlL2gyanuRznTBbsHAONtxT4sWvimVdHhjZeL2Jzr6k
wprvumPkR7AMtdeyU1Ffd4lH9bSHZY1QzZOOj7LDNUMDab3VWEQF8vnqJ/ARmnMe
y5QjvB5Ew0DKBs6votdnLVnCDVyB7NcW8tPppRcrsZBNgJx9E/QX5NkocoLKuleG
plJlzbjiCY0ioCgJ/WcKa8H06XJnlWwcNke9BL1NhBRfDwBISnUdjkQHMhBRQzK2
NnMw141nV0dvb80V+dooHE7ewlhkOubCIPyWiHUZZhGKIUy4A7J1/ZT7DQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFJBLR1kfUPDKZzXHw6BXyKpQ+XLmMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEva0V0SFdSOVE4TXBuTmNmRG9GZklxbEQ1Y3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAowUuAwQA
owU0AwQAowVHAwQAowVSAwQAowVlAwQAowXjMAwDBACjBfcDBACjBfgwDQYJKoZI
hvcNAQELBQADggEBAIElTQ8yesJ1uYbDDxsjDqOpnIpnkSDalJAa7AXJ/OiKzevt
QudkseWh+lXI6b4n684Oltk0IGFLlp9HPdMiDWZ6gqRqqKViqB0jmSkzopKwQC4C
mpr9ERtDNS+FqYlV9DADh4j7x/T0wXL/jKzJD0zT9u0yuivIxCMq7qNeAGD7BsRG
NG7iidx0KpOvOBV6yhka46GNxzoBN0r30c2R+dla3XpyjcTR6nRt6RBapSklhmKT
bSsyluYWX1cs/plQCz/QfSTEYXA7JqOen8ItmfLidf7huFP9DwUAlOe56P18qg/R
cDAf7ezLRnQhtnbVkruaZ2KG+vd6B/NjxR+suuA=
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:46 2026 by rpki-client