Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tYVVFT8eAUFgT23M5th012J8AQ8.roa
File: tYVVFT8eAUFgT23M5th012J8AQ8.roa (raw, json)
Hash identifier: uPABqE/+CXhTzzsflqWrE5R/NLfATJCiQK4zH/uX41U=
Subject key identifier: B5:85:55:15:3F:1E:01:41:60:4F:6D:CC:E6:D8:74:D7:62:7C:01:0F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F42C2B4CE6162D43F19AE375EA98C9A84
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tYVVFT8eAUFgT23M5th012J8AQ8.roa
Signing time: Wed 08 Jul 2026 17:24:44 +0000
ROA not before: Wed 08 Jul 2026 17:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62651
IP address blocks: 163.5.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:c2:b4:ce:61:62:d4:3f:19:ae:37:5e:a9:8c:9a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 8 17:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b58555153f1e0141604f6dcce6d874d7627c010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:8b:23:48:44:4e:aa:da:e2:ec:af:7f:69:
72:ca:2d:e7:82:9d:4e:6c:4d:d3:5e:26:58:bf:b4:
70:57:83:7b:c4:f0:db:91:bc:47:4b:5e:1d:4d:57:
11:67:59:24:bc:a8:ae:d3:40:bc:67:fa:0b:4b:23:
09:de:a4:13:32:04:ae:ff:31:5e:0d:ef:f4:fe:c7:
6b:fb:3e:17:17:8b:57:05:1f:ae:02:f6:e7:6a:23:
e8:9f:9f:c5:41:1c:a2:27:09:ac:3e:16:d5:46:b9:
89:e2:c6:ce:77:ac:92:86:11:f6:fd:42:1a:35:00:
f0:a1:19:51:0d:76:5e:8b:a5:81:c7:f5:f3:19:82:
80:9d:d3:90:76:33:39:2c:cc:e1:e2:54:15:70:7f:
1c:65:2c:ae:9b:a8:a0:97:43:66:d4:58:52:6f:4e:
e8:a4:64:1a:7b:5b:cd:48:09:6e:48:b7:32:61:80:
d9:e5:50:57:6c:ff:65:ca:be:c8:dc:60:1f:fc:4c:
cb:8a:5f:12:b8:98:46:ed:e7:da:97:b8:0d:1c:31:
03:08:8e:f6:31:75:9f:d0:93:c1:cf:4b:ba:0b:e4:
2f:17:12:fa:55:9e:63:97:c2:5f:f5:e0:22:d4:f5:
13:96:c3:df:c3:ef:26:f1:da:76:dc:01:34:d9:5b:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:85:55:15:3F:1E:01:41:60:4F:6D:CC:E6:D8:74:D7:62:7C:01:0F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tYVVFT8eAUFgT23M5th012J8AQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
47:20:2f:05:ac:65:81:2a:cb:fe:73:e1:44:62:b4:b9:2d:41:
f7:13:fa:11:0a:ef:1e:d4:55:48:c8:b6:40:36:6d:7c:17:7e:
36:f5:ee:6d:80:f6:9d:d5:ca:cb:cd:4c:5f:38:6d:a3:d8:8d:
cd:90:62:94:28:6d:c6:97:0d:77:6b:b9:17:47:72:e4:fb:51:
13:b8:3d:1e:dd:c4:9d:c0:4d:73:cb:25:5c:84:6d:fd:85:55:
d4:89:09:a3:79:79:d4:53:3c:4f:5d:72:50:1f:b1:83:2d:de:
f4:8e:34:a2:3a:69:38:a2:6e:a4:50:f8:58:63:a2:cd:09:16:
a4:4c:0f:ac:a6:0a:b1:60:7a:6b:31:dc:41:2a:51:99:df:cd:
72:10:b5:70:13:44:8c:1a:c8:df:9f:9d:a4:72:80:4c:04:49:
36:48:70:55:9e:ef:20:e3:20:3c:3a:62:de:9a:11:68:a8:53:
27:5c:5b:21:46:5b:d7:d7:7d:77:ca:ae:b2:c4:10:58:ed:1f:
d7:13:e6:b0:c8:46:29:76:86:b2:16:27:5c:3f:30:5a:88:bb:
c1:57:72:ee:b6:2a:59:ad:18:9f:35:dd:47:d6:0d:d8:12:e4:
2f:7f:de:b7:04:0b:54:6e:1d:74:67:c8:5b:5d:bb:92:d0:de:
f0:a9:53:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9CwrTOYWLUPxmuN16pjJqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNzA4MTcyNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTg1NTUxNTNmMWUwMTQxNjA0ZjZkY2NlNmQ4NzRkNzYyN2MwMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY6LI0hETqra4uyvf2lyyi3ngp1O
bE3TXiZYv7RwV4N7xPDbkbxHS14dTVcRZ1kkvKiu00C8Z/oLSyMJ3qQTMgSu/zFe
De/0/sdr+z4XF4tXBR+uAvbnaiPon5/FQRyiJwmsPhbVRrmJ4sbOd6yShhH2/UIa
NQDwoRlRDXZei6WBx/XzGYKAndOQdjM5LMzh4lQVcH8cZSyum6igl0Nm1FhSb07o
pGQae1vNSAluSLcyYYDZ5VBXbP9lyr7I3GAf/EzLil8SuJhG7efal7gNHDEDCI72
MXWf0JPBz0u6C+QvFxL6VZ5jl8Jf9eAi1PUTlsPfw+8m8dp23AE02VvwfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLWFVRU/HgFBYE9tzObYdNdifAEPMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvdFlWVkZUOGVBVUZnVDIzTTV0aDAxMko4QVE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXUMA0G
CSqGSIb3DQEBCwUAA4IBAQBHIC8FrGWBKsv+c+FEYrS5LUH3E/oRCu8e1FVIyLZA
Nm18F3429e5tgPad1crLzUxfOG2j2I3NkGKUKG3Glw13a7kXR3Lk+1ETuD0e3cSd
wE1zyyVchG39hVXUiQmjeXnUUzxPXXJQH7GDLd70jjSiOmk4om6kUPhYY6LNCRak
TA+spgqxYHprMdxBKlGZ381yELVwE0SMGsjfn52kcoBMBEk2SHBVnu8g4yA8OmLe
mhFoqFMnXFshRlvX1313yq6yxBBY7R/XE+awyEYpdoayFidcPzBaiLvBV3LutipZ
rRifNd1H1g3YEuQvf963BAtUbh10Z8hbXbuS0N7wqVPu
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client