Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mi4qepvvNeZYRdYKnVTjhUAgWC8.roa
File: mi4qepvvNeZYRdYKnVTjhUAgWC8.roa (raw, json)
Hash identifier: a2pbh+9j4OHLGjKxjYx4YgVjcWg4Aph+tT8rHb3TjTQ=
Subject key identifier: 9A:2E:2A:7A:9B:EF:35:E6:58:45:D6:0A:9D:54:E3:85:40:20:58:2F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A12B0D9600240CF81C1A4BCA9C360059DE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mi4qepvvNeZYRdYKnVTjhUAgWC8.roa
Signing time: Sun 11 Oct 2026 13:01:12 +0000
ROA not before: Sun 11 Oct 2026 13:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.62.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:96:00:24:0c:f8:1c:1a:4b:ca:9c:36:00:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 11 13:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a2e2a7a9bef35e65845d60a9d54e3854020582f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:ec:ec:fa:ca:07:dd:d9:76:1d:18:83:28:
5c:de:23:bb:7c:66:8e:70:8b:95:1f:11:12:41:76:
e5:d8:68:f2:58:77:91:4e:cf:87:17:d1:5a:48:64:
3a:5d:08:24:74:2d:68:3c:fd:c7:0b:a5:ef:8c:94:
84:96:20:66:eb:3d:67:63:98:e2:76:12:a7:e2:fe:
67:99:72:40:e2:53:9b:b2:f3:dc:83:3a:23:91:84:
80:5d:94:64:fb:18:7e:68:87:ec:0c:f8:c4:7b:71:
d4:82:0f:0e:d0:05:5b:88:d5:06:d8:8c:a7:bb:ac:
76:7c:d6:ab:3a:60:f8:37:70:ca:4f:f5:09:68:e9:
60:04:37:0c:97:cc:c5:70:f6:c4:fc:53:7f:e5:a5:
b9:69:0a:e0:d7:e5:c7:7e:f5:c6:15:fa:d0:d4:ff:
77:b0:d2:6f:4c:6c:ef:60:5d:be:89:30:44:a2:96:
4d:37:9c:62:d8:e7:17:e5:13:44:f4:78:53:2b:e0:
a4:bf:b8:f3:cb:57:f2:fb:de:d8:b1:4d:29:12:18:
ea:df:b8:39:43:98:f2:f7:7e:e0:84:fb:57:fa:48:
de:d9:f5:64:e0:4c:a6:49:a8:6c:ed:3c:e7:c6:83:
43:9e:f4:71:ab:91:2a:ec:4a:28:78:b5:2c:47:e0:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:2A:7A:9B:EF:35:E6:58:45:D6:0A:9D:54:E3:85:40:20:58:2F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mi4qepvvNeZYRdYKnVTjhUAgWC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.62.0/24
163.5.131.0-163.5.132.255
163.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e1:50:e6:c2:32:bb:3a:22:5f:a7:0b:e1:d6:6e:08:eb:58:
48:f3:f9:c5:f6:cb:68:6f:44:ff:3b:f9:7f:3b:c1:4e:3d:30:
65:db:b6:c0:83:d1:d7:bb:bb:df:29:72:3b:b4:c6:51:78:cf:
31:a9:ee:aa:12:55:a7:32:ac:54:9b:ed:ef:9c:60:6e:fc:ba:
b2:60:9d:b5:0c:02:e6:d3:8c:62:b9:13:f3:5f:64:64:f3:56:
99:50:0a:fb:db:f7:f7:58:4a:3f:d3:ae:4b:ed:67:6a:4c:78:
29:62:77:d1:39:a4:e7:61:ff:af:ac:bc:5f:49:a3:e8:ca:14:
19:2e:ff:4d:06:b2:b6:ac:68:8c:3f:81:43:47:dd:4a:43:34:
f7:33:b5:3b:db:0e:70:8a:5d:0b:f5:e5:0d:e0:ea:75:22:bc:
ca:6d:13:2e:f3:00:60:17:a5:38:78:55:ad:21:b4:fa:11:2a:
8a:6b:fd:b6:7c:7e:de:0d:c2:69:3b:9e:57:5c:c4:ad:d5:2d:
80:ac:39:23:a3:92:3f:0f:9b:e0:fb:83:28:d7:ad:f5:75:01:
ad:de:67:94:b3:90:6f:cc:4b:da:29:6c:68:4a:bf:df:96:38:
06:4e:b3:e3:61:ef:6f:6e:33:0a:72:72:d8:f1:b2:57:1a:27:
3a:61:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:10:57 2026 by rpki-client