Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mwO2P7phMo2mTsGXFx3DkDOlwZw.roa
File: mwO2P7phMo2mTsGXFx3DkDOlwZw.roa (raw, json)
Hash identifier: Efqrh6aiSaSFeLgMYXOfL2aOJdCyZ46Dyv7fpPoDEX8=
Subject key identifier: 9B:03:B6:3F:BA:61:32:8D:A6:4E:C1:97:17:1D:C3:90:33:A5:C1:9C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F93F8F787BFF02474A24A6C10D425FE7F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mwO2P7phMo2mTsGXFx3DkDOlwZw.roa
Signing time: Fri 24 Jul 2026 11:53:14 +0000
ROA not before: Fri 24 Jul 2026 11:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 163.5.43.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:f8:f7:87:bf:f0:24:74:a2:4a:6c:10:d4:25:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 24 11:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b03b63fba61328da64ec197171dc39033a5c19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:8b:59:4b:de:2a:c3:7f:68:52:09:7f:e0:
09:d9:47:af:97:9e:93:c1:89:d5:0b:1f:2d:28:8b:
d5:c3:b8:96:c4:ec:c3:94:61:56:cc:17:8f:c2:6d:
e4:cd:e5:ea:c1:f5:ae:f7:e6:03:ce:45:d7:e5:57:
d2:9b:ab:5e:2f:d0:f8:06:75:54:99:45:32:36:8d:
21:2b:c7:1d:5a:14:9f:0c:e2:29:4b:e2:8c:12:41:
68:bd:c1:22:f5:da:66:47:5b:84:66:a9:4f:cc:49:
2f:70:82:23:08:f8:50:62:64:e8:76:14:0d:04:d7:
d5:14:5e:23:d3:18:36:e0:d6:05:57:56:63:22:29:
9c:c5:9a:64:f3:b9:19:01:48:8f:9c:51:5c:f6:ee:
e4:3a:48:f0:51:a9:47:83:24:cf:76:75:9f:6c:37:
27:8c:9e:96:69:31:ba:ac:c5:45:76:81:de:c9:d0:
a5:ea:55:5a:10:40:90:5e:ba:6f:a7:4e:c1:97:60:
a9:cb:e5:00:08:50:13:89:ad:3f:87:af:90:ff:a4:
30:e5:04:bd:41:b7:a6:ed:d9:5d:14:d9:73:e3:7d:
ee:9d:19:6b:43:9f:6a:2c:e2:41:c6:5a:d0:f3:67:
a2:21:28:f2:d8:8a:9b:e8:45:5e:4b:e4:38:d6:1c:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:03:B6:3F:BA:61:32:8D:A6:4E:C1:97:17:1D:C3:90:33:A5:C1:9C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mwO2P7phMo2mTsGXFx3DkDOlwZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.43.0/24
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f9:10:f9:11:cc:70:b1:32:70:90:d3:03:f7:42:9e:21:f5:
f4:34:0a:90:d1:6a:6b:98:9e:78:46:2c:fe:ae:93:e9:f1:e4:
b3:b9:1e:80:25:f7:d6:fc:c0:81:ce:0e:c6:9d:07:d7:fc:86:
f9:ab:f7:f1:d4:47:00:20:ba:e6:50:6e:3c:4b:97:57:cb:e0:
8b:00:7b:02:2f:d1:9a:a6:0e:ce:82:1b:09:7e:55:aa:d9:fd:
ff:8e:3c:e9:04:83:54:a3:71:2a:14:03:f6:6d:7f:39:a0:8b:
c9:3e:27:c7:fa:d1:c7:f0:ed:85:83:ef:a9:d1:9c:c3:eb:db:
f1:35:21:e7:68:c0:75:04:3b:e4:94:12:21:0f:b2:aa:2e:58:
83:35:63:c8:51:6f:54:88:e0:22:05:43:81:c6:73:55:82:9e:
b3:ea:d5:cd:af:07:a8:53:ed:b0:95:44:5e:24:71:d9:ba:ed:
9c:4b:d0:87:c2:4b:fd:1c:ef:13:1c:d5:a5:31:82:a5:93:b6:
dc:be:ce:49:f4:d5:d8:63:e0:67:ba:f5:73:15:9e:b4:8f:bf:
77:96:81:c5:6a:1f:33:bf:16:aa:6b:c2:70:31:f5:a3:78:b9:
9e:03:f6:f4:55:a1:2c:9a:4e:ac:39:2f:59:96:cf:9f:2e:a5:
7d:90:b1:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+T+PeHv/AkdKJKbBDUJf5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNzI0MTE1MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjAzYjYzZmJhNjEzMjhkYTY0ZWMxOTcxNzFkYzM5MDMzYTVjMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVWLWUveKsN/aFIJf+AJ2Uevl56T
wYnVCx8tKIvVw7iWxOzDlGFWzBePwm3kzeXqwfWu9+YDzkXX5VfSm6teL9D4BnVU
mUUyNo0hK8cdWhSfDOIpS+KMEkFovcEi9dpmR1uEZqlPzEkvcIIjCPhQYmTodhQN
BNfVFF4j0xg24NYFV1ZjIimcxZpk87kZAUiPnFFc9u7kOkjwUalHgyTPdnWfbDcn
jJ6WaTG6rMVFdoHeydCl6lVaEECQXrpvp07Bl2Cpy+UACFATia0/h6+Q/6Qw5QS9
Qbem7dldFNlz433unRlrQ59qLOJBxlrQ82eiISjy2Iqb6EVeS+Q41hxuHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJsDtj+6YTKNpk7Blxcdw5AzpcGcMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbXdPMlA3cGhNbzJtVHNHWEZ4M0RrRE9sd1p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUrAwQA
owWdMA0GCSqGSIb3DQEBCwUAA4IBAQA9+RD5EcxwsTJwkNMD90KeIfX0NAqQ0Wpr
mJ54Riz+rpPp8eSzuR6AJffW/MCBzg7GnQfX/Ib5q/fx1EcAILrmUG48S5dXy+CL
AHsCL9Gapg7OghsJflWq2f3/jjzpBINUo3EqFAP2bX85oIvJPifH+tHH8O2Fg++p
0ZzD69vxNSHnaMB1BDvklBIhD7KqLliDNWPIUW9UiOAiBUOBxnNVgp6z6tXNrweo
U+2wlUReJHHZuu2cS9CHwkv9HO8THNWlMYKlk7bcvs5J9NXYY+BnuvVzFZ60j793
loHFah8zvxaqa8JwMfWjeLmeA/b0VaEsmk6sOS9Zls+fLqV9kLGv
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:15:47 2026 by rpki-client