Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uZ1E8Ty5E1tUsbKihCwsxgCdcfw.roa
File: uZ1E8Ty5E1tUsbKihCwsxgCdcfw.roa (raw, json)
Hash identifier: S6dF3U49zWuyMmOnB1PwryaHPmGTc+JAzyzBAcbGHIQ=
Subject key identifier: B9:9D:44:F1:3C:B9:13:5B:54:B1:B2:A2:84:2C:2C:C6:00:9D:71:FC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DA7AF10E58FE28BB6D4F90A956BA8B893
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uZ1E8Ty5E1tUsbKihCwsxgCdcfw.roa
Signing time: Sun 19 Apr 2026 21:39:21 +0000
ROA not before: Sun 19 Apr 2026 21:39:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202792
IP address blocks: 163.5.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:af:10:e5:8f:e2:8b:b6:d4:f9:0a:95:6b:a8:b8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 19 21:39:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b99d44f13cb9135b54b1b2a2842c2cc6009d71fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:ea:da:af:7a:46:0f:2d:e5:31:c9:4d:1a:
6b:7c:52:d3:3f:c0:22:76:7e:38:ff:47:ca:13:7e:
ea:6c:36:2c:04:9d:8d:27:34:8a:e2:52:29:fa:fc:
aa:a0:9c:f7:ef:64:6b:66:10:75:2b:b0:e9:90:4b:
89:fa:f5:3f:b0:cd:a4:34:53:ba:8c:82:41:66:00:
e5:10:54:b2:12:31:03:57:30:9a:f8:54:16:7e:12:
d6:d5:02:da:9e:6e:4b:51:e2:f4:8f:14:9e:72:cf:
c7:fa:45:e2:42:db:12:ba:64:bf:d2:e1:ce:a5:91:
7f:b2:3f:d3:d0:06:60:f0:03:8d:24:30:ff:fb:7d:
bd:fd:10:3c:68:2d:50:68:d5:47:68:78:cd:b4:04:
d8:fa:a3:74:d7:72:ab:07:f2:a8:25:4f:e6:01:26:
0e:c7:d8:3b:01:98:62:bf:7a:b0:20:a8:0b:3d:79:
6e:57:4d:1c:99:b1:27:ca:29:02:72:c4:34:98:a7:
f7:4e:37:8c:61:13:a3:a1:b9:2e:2e:da:9f:d2:ee:
33:f4:e4:5d:10:fe:5e:c2:ec:02:db:11:09:15:14:
fa:20:bd:5d:c7:cd:36:bd:f7:34:11:bd:08:6b:f2:
a0:86:7e:11:d0:b9:5a:8a:e6:6e:6b:9e:99:97:60:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9D:44:F1:3C:B9:13:5B:54:B1:B2:A2:84:2C:2C:C6:00:9D:71:FC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uZ1E8Ty5E1tUsbKihCwsxgCdcfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
65:44:83:d5:79:4f:56:1a:33:db:d2:e6:3e:f3:f2:5d:e0:77:
64:0e:4c:15:0d:09:16:cb:75:6b:cc:53:38:26:fe:e8:70:55:
55:90:46:62:c2:55:4c:37:ce:07:90:d2:4b:ab:93:6d:f3:b7:
04:2c:7f:92:e3:c2:e4:de:5f:0e:b4:b4:4e:86:0e:00:61:a6:
ed:39:7a:b2:15:da:b8:c6:eb:cc:19:8d:b2:b8:8b:df:90:03:
a2:e8:4b:c0:8e:23:7d:d0:68:4a:ed:2e:33:77:7d:ad:b8:08:
26:4c:43:f6:19:d2:70:4b:64:cf:8e:98:3e:6c:18:b4:d0:04:
1f:75:10:71:0d:12:04:b5:ff:7f:07:4a:84:3b:61:0e:08:8f:
b6:21:e0:8c:3e:0e:75:a9:46:e7:17:f2:32:70:56:f2:27:da:
7a:1c:7c:39:1f:67:e0:fc:fb:09:f7:9b:07:71:b4:0b:34:9f:
5c:93:29:b0:6e:1e:3c:70:f9:ce:ed:75:2f:f8:19:3c:13:ff:
9c:ed:a9:06:7f:e2:ba:86:c1:a3:ac:63:32:ea:56:55:c0:72:
a4:2b:7a:48:30:2d:54:f1:15:10:28:55:af:0d:b5:36:53:5b:
ed:24:d6:6e:d8:d6:3b:4e:15:f7:37:99:92:9a:ce:71:8c:88:
6f:d6:2e:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2nrxDlj+KLttT5CpVrqLiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNDE5MjEzOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTlkNDRmMTNjYjkxMzViNTRiMWIyYTI4NDJjMmNjNjAwOWQ3MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWLq2q96Rg8t5THJTRprfFLTP8Ai
dn44/0fKE37qbDYsBJ2NJzSK4lIp+vyqoJz372RrZhB1K7DpkEuJ+vU/sM2kNFO6
jIJBZgDlEFSyEjEDVzCa+FQWfhLW1QLanm5LUeL0jxSecs/H+kXiQtsSumS/0uHO
pZF/sj/T0AZg8AONJDD/+329/RA8aC1QaNVHaHjNtATY+qN013KrB/KoJU/mASYO
x9g7AZhiv3qwIKgLPXluV00cmbEnyikCcsQ0mKf3TjeMYROjobkuLtqf0u4z9ORd
EP5ewuwC2xEJFRT6IL1dx802vfc0Eb0Ia/Kghn4R0LlaiuZua56Zl2A+6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmdRPE8uRNbVLGyooQsLMYAnXH8MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvdVoxRThUeTVFMXRVc2JLaWhDd3N4Z0NkY2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWdMA0G
CSqGSIb3DQEBCwUAA4IBAQBlRIPVeU9WGjPb0uY+8/Jd4HdkDkwVDQkWy3VrzFM4
Jv7ocFVVkEZiwlVMN84HkNJLq5Nt87cELH+S48Lk3l8OtLROhg4AYabtOXqyFdq4
xuvMGY2yuIvfkAOi6EvAjiN90GhK7S4zd32tuAgmTEP2GdJwS2TPjpg+bBi00AQf
dRBxDRIEtf9/B0qEO2EOCI+2IeCMPg51qUbnF/IycFbyJ9p6HHw5H2fg/PsJ95sH
cbQLNJ9ckymwbh48cPnO7XUv+Bk8E/+c7akGf+K6hsGjrGMy6lZVwHKkK3pIMC1U
8RUQKFWvDbU2U1vtJNZu2NY7ThX3N5mSms5xjIhv1i6e
-----END CERTIFICATE-----
Generated at Mon Apr 20 04:58:43 2026 by rpki-client