Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s0YS4iZ7hX5FChHk71V4VOPzyCg.roa
File: s0YS4iZ7hX5FChHk71V4VOPzyCg.roa (raw, json)
Hash identifier: /7s1GL73wwkbQY9HCLL/PRMe5549OTIuv0hqiuIvHhM=
Subject key identifier: B3:46:12:E2:26:7B:85:7E:45:0A:11:E4:EF:55:78:54:E3:F3:C8:28
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A02A426059EF4D44B8FCA76FA4E72985A8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s0YS4iZ7hX5FChHk71V4VOPzyCg.roa
Signing time: Sat 22 Aug 2026 16:16:28 +0000
ROA not before: Sat 22 Aug 2026 16:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 163.5.120.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:42:60:59:ef:4d:44:b8:fc:a7:6f:a4:e7:29:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 22 16:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b34612e2267b857e450a11e4ef557854e3f3c828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:fb:71:43:11:6f:e9:2a:cb:69:04:f1:d2:
56:5a:f5:1f:ef:dd:f3:1c:07:96:86:c5:3a:27:a0:
8a:4d:a8:32:57:d2:37:24:b3:fa:5d:06:c3:86:ad:
0b:63:6e:84:60:97:63:9d:bc:19:f4:54:6e:7e:15:
aa:4a:13:ee:94:9c:46:ea:84:c0:dd:27:48:d1:4d:
ed:b1:09:ad:93:d1:1c:e1:79:9a:aa:08:8e:7e:b2:
38:85:89:fb:6f:aa:42:79:d9:28:a7:0f:cb:76:be:
31:12:37:e3:0e:f0:77:ff:d2:5b:4a:90:0a:f4:5e:
f4:08:a5:45:13:c8:b7:3f:6e:64:ec:0f:5b:d9:36:
8a:90:12:d5:32:1f:81:be:72:44:16:d3:51:5b:2c:
15:bb:fd:4f:20:f1:8d:56:23:c0:24:8b:cd:e3:ff:
bb:fc:09:88:35:ac:26:d4:d5:d3:4a:4b:94:b2:55:
7a:a9:c4:2f:a7:61:24:9d:d5:e1:a7:fc:ff:2c:d6:
63:7e:bf:99:eb:7f:92:03:f9:65:f2:7d:58:da:3f:
8e:69:27:6f:04:cb:6f:85:b4:16:75:0a:d0:00:76:
56:86:68:a9:0b:94:24:f3:f9:9a:03:8c:e2:c3:e7:
70:a5:06:9c:cc:0f:85:73:e8:4f:58:d8:14:c7:74:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:12:E2:26:7B:85:7E:45:0A:11:E4:EF:55:78:54:E3:F3:C8:28
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/s0YS4iZ7hX5FChHk71V4VOPzyCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
163.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c0:12:ac:ca:78:99:da:7e:44:30:eb:25:4b:1c:ac:a5:d6:
e7:ed:6c:e6:91:bb:7c:fa:1f:c7:5f:06:a0:e2:17:d4:f1:4d:
2f:71:d9:f4:16:17:a6:30:2b:a4:e8:09:97:69:42:17:e6:4b:
4a:45:f7:d5:4b:5e:6b:d4:2c:ce:4c:7a:00:42:4a:1b:15:a9:
c9:18:6e:b3:1d:57:89:07:74:8f:99:d0:8a:65:6a:8a:9c:17:
8e:e3:f3:a8:0c:8f:5c:c5:a0:98:b7:3b:21:e6:e6:49:2e:ab:
14:4a:36:a3:f8:25:03:c0:3d:bf:8a:e6:a8:08:7f:3d:84:49:
ab:38:a0:db:49:fc:dd:35:1b:72:21:7b:f3:5c:65:87:43:18:
c2:26:45:40:19:fa:8c:81:3c:40:a8:aa:4b:be:5d:a5:b7:2f:
36:94:42:54:97:ab:c7:5b:9d:ec:b0:d0:2b:20:09:e6:dd:27:
21:a4:4a:65:96:89:80:42:5e:05:47:f7:73:6f:a7:f8:ca:cd:
2d:2b:0e:c6:7c:7b:1a:0e:1d:b4:f5:a8:43:61:47:28:8a:66:
8d:59:f6:df:48:fc:dc:33:4b:b7:14:0f:c8:7c:f9:d1:d0:9f:
fc:38:b8:2b:2d:cf:f8:08:71:77:d1:29:a8:d1:1c:b6:dd:80:
1a:f9:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:00 2026 by rpki-client