Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mfkGJNsuSHRTmV-KbuXoATph76I.roa
File: mfkGJNsuSHRTmV-KbuXoATph76I.roa (raw, json)
Hash identifier: LD7GmVztg3e6U4eEmLDVlTzagoR7Bz0c5UwJFByQUuY=
Subject key identifier: 99:F9:06:24:DB:2E:48:74:53:99:5F:8A:6E:E5:E8:01:3A:61:EF:A2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F3B3B84C1679E76C7F89266B04D0A22FC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mfkGJNsuSHRTmV-KbuXoATph76I.roa
Signing time: Tue 07 Jul 2026 06:19:44 +0000
ROA not before: Tue 07 Jul 2026 06:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.49.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 06:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:3b:84:c1:67:9e:76:c7:f8:92:66:b0:4d:0a:22:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 7 06:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99f90624db2e487453995f8a6ee5e8013a61efa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:37:cb:8f:df:29:9e:98:c0:6b:b1:62:ea:
62:d6:ec:0c:a8:2b:ba:e7:61:7d:c6:20:ea:fb:d7:
53:4a:36:61:23:09:5c:0e:1f:f8:ea:b1:53:52:d9:
8c:ea:49:36:20:53:d1:86:1e:e4:73:51:8d:10:eb:
a1:22:b6:75:d0:3b:2e:c8:f0:f5:ee:4d:30:ec:dc:
80:23:1c:eb:73:09:26:c3:84:40:bf:28:05:a4:95:
d8:07:49:6b:49:cb:f0:0c:66:91:fe:c8:25:9d:b6:
44:a3:d1:c2:7e:52:82:a8:ef:38:26:a1:97:95:f0:
13:a8:d3:2b:ce:62:8e:e7:a3:99:ac:ba:9a:16:55:
2b:e5:94:7c:d9:84:18:d7:6a:b2:dd:b5:60:b8:21:
fc:75:b1:6f:a9:af:7f:18:61:e3:31:62:d2:38:02:
b6:63:a8:fc:ea:02:f9:b2:cd:20:eb:6b:d3:a0:16:
d5:8c:d1:01:09:b2:2e:33:a8:c7:84:a9:26:9b:10:
56:af:41:79:fe:df:3c:7d:a8:a9:86:5a:55:c8:e1:
68:b3:7f:15:36:91:5b:e6:75:1b:53:2b:48:e0:10:
eb:e9:f8:01:d6:4a:fc:a2:43:c5:aa:3f:c5:a3:82:
2c:6c:af:86:51:df:32:62:db:e4:12:87:51:62:b4:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:06:24:DB:2E:48:74:53:99:5F:8A:6E:E5:E8:01:3A:61:EF:A2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mfkGJNsuSHRTmV-KbuXoATph76I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.49.0/24
163.5.66.0/24
163.5.212.0/24
163.5.226.0/24
163.5.237.0/24
163.5.243.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a2:de:0a:4f:ce:e6:49:c1:4a:2f:3f:a8:ac:b9:30:19:13:
c3:43:33:c5:33:c9:f6:ad:08:00:3f:a6:fb:2b:6e:2e:de:70:
aa:9f:75:d0:2b:c6:bf:7f:50:d4:65:68:c2:71:39:92:75:73:
11:86:b3:4f:d6:ea:ae:5b:04:43:be:f5:c7:c1:f6:b1:aa:75:
22:2c:d5:33:0f:f0:ee:8f:ef:b8:a8:cc:61:0b:6e:3f:11:a4:
02:2a:af:9b:97:22:33:ba:b6:1b:95:8f:e1:ae:83:b5:87:25:
db:bf:57:6d:a3:c2:14:7c:cb:3b:ae:cb:d2:46:95:ae:dc:34:
93:8e:bf:21:a9:78:6f:f5:05:16:94:a7:3c:96:54:f6:70:be:
19:4f:51:e6:2e:5b:22:93:86:f0:78:d9:d8:99:e7:ef:27:c6:
05:85:0b:6b:11:54:9f:2c:8e:6b:08:94:af:81:77:05:36:d8:
d0:aa:74:1e:22:5f:46:c9:0a:fb:a3:71:e9:df:8d:3a:66:6e:
ed:e5:0c:5b:e8:93:7c:77:28:98:55:c2:0a:af:a8:b2:c7:94:
bd:7e:45:7c:63:9a:69:c3:8b:17:0b:40:7f:fa:af:da:94:c5:
aa:cf:dd:6f:43:6b:eb:44:5f:14:d8:a7:b2:8a:70:f6:65:a7:
f1:17:00:65
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ87O4TBZ552x/iSZrBNCiL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNzA3MDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWY5MDYyNGRiMmU0ODc0NTM5OTVmOGE2ZWU1ZTgwMTNhNjFlZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYw3y4/fKZ6YwGuxYupi1uwMqCu6
52F9xiDq+9dTSjZhIwlcDh/46rFTUtmM6kk2IFPRhh7kc1GNEOuhIrZ10DsuyPD1
7k0w7NyAIxzrcwkmw4RAvygFpJXYB0lrScvwDGaR/sglnbZEo9HCflKCqO84JqGX
lfATqNMrzmKO56OZrLqaFlUr5ZR82YQY12qy3bVguCH8dbFvqa9/GGHjMWLSOAK2
Y6j86gL5ss0g62vToBbVjNEBCbIuM6jHhKkmmxBWr0F5/t88faiphlpVyOFos38V
NpFb5nUbUytI4BDr6fgB1kr8okPFqj/Fo4IsbK+GUd8yYtvkEodRYrR9rwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJn5BiTbLkh0U5lfim7l6AE6Ye+iMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbWZrR0pOc3VTSFJUbVYtS2J1WG9BVHBoNzZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAowUnAwQA
owUxAwQAowVCAwQAowXUAwQAowXiAwQAowXtAwQAowXzAwQAowX2MA0GCSqGSIb3
DQEBCwUAA4IBAQBDot4KT87mScFKLz+orLkwGRPDQzPFM8n2rQgAP6b7K24u3nCq
n3XQK8a/f1DUZWjCcTmSdXMRhrNP1uquWwRDvvXHwfaxqnUiLNUzD/Duj++4qMxh
C24/EaQCKq+blyIzurYblY/hroO1hyXbv1dto8IUfMs7rsvSRpWu3DSTjr8hqXhv
9QUWlKc8llT2cL4ZT1HmLlsik4bweNnYmefvJ8YFhQtrEVSfLI5rCJSvgXcFNtjQ
qnQeIl9GyQr7o3Hp3406Zm7t5Qxb6JN8dyiYVcIKr6iyx5S9fkV8Y5ppw4sXC0B/
+q/alMWqz91vQ2vrRF8U2KeyinD2ZafxFwBl
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:17 2026 by rpki-client