Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9UHlUKryPntyRBi-g4ZAVqcBxTU.roa
File: 9UHlUKryPntyRBi-g4ZAVqcBxTU.roa (raw, json)
Hash identifier: Z+hXaQoFgKoXvQNXogcWds4l5f3Hksqw4tXW2U+/KxE=
Subject key identifier: F5:41:E5:50:AA:F2:3E:7B:72:44:18:BE:83:86:40:56:A7:01:C5:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A1D415B150CA32ECF0AEE4E2F3CAC19E2F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9UHlUKryPntyRBi-g4ZAVqcBxTU.roa
Signing time: Fri 13 Nov 2026 08:45:53 +0000
ROA not before: Fri 13 Nov 2026 08:45:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218253
IP address blocks: 163.5.85.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:15:b1:50:ca:32:ec:f0:ae:e4:e2:f3:ca:c1:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 13 08:45:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f541e550aaf23e7b724418be83864056a701c535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:b0:f9:e9:4a:86:72:16:5c:5b:cd:26:58:
0b:93:10:ba:b4:92:1f:cf:d0:a9:d1:7a:76:e2:f4:
68:ac:a6:70:6a:f2:2a:73:f0:cb:3f:ab:f7:62:41:
a1:1c:0e:3e:06:77:a8:9a:f5:06:e2:95:6a:81:20:
cf:46:34:5d:a8:f7:f1:8e:0c:3a:8e:ec:19:55:0b:
ca:f2:98:a3:1d:b1:81:10:fd:bd:f6:d4:0a:56:7c:
b8:c8:63:6b:5d:bc:e0:f2:6a:dc:47:a2:20:5b:c5:
3d:2f:b4:b6:8e:32:6b:62:bd:83:ac:7a:f8:c1:a7:
b5:6d:0f:0a:3d:e3:a5:9a:fb:87:69:bf:4e:38:c5:
f3:c5:2e:35:66:a9:d8:60:18:c1:ac:e3:fc:30:d7:
0b:aa:4a:22:cc:81:74:f3:a8:29:57:a2:9a:a9:56:
8c:60:47:f1:a2:48:d0:43:3d:4a:b3:26:80:5f:2f:
9d:b6:be:7d:c5:58:cc:21:ba:28:d1:b8:bc:1c:ff:
45:10:03:eb:f1:05:e4:05:8c:d5:0f:33:27:21:af:
4d:f0:5e:cb:32:81:26:4d:9b:d4:e1:e7:ef:36:3d:
71:93:22:dc:78:e8:81:c9:98:64:4a:d7:bd:d5:fd:
92:25:e3:f2:8f:c3:55:9e:fa:74:e8:1f:83:a1:1c:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:E5:50:AA:F2:3E:7B:72:44:18:BE:83:86:40:56:A7:01:C5:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9UHlUKryPntyRBi-g4ZAVqcBxTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.85.0/24
163.5.102.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f8:e4:a8:7e:58:d3:fb:84:63:94:f6:d1:a4:e5:21:c0:1f:
f9:e9:5d:c8:8f:4f:5a:0b:5a:23:a2:ba:ee:25:b8:0e:01:e7:
fc:a9:87:9d:84:ab:13:98:25:bf:4d:c5:99:5d:6f:0e:f2:3d:
30:35:10:0b:64:bf:37:58:83:e6:46:7a:6f:a2:aa:91:9d:4e:
58:89:b4:3a:2c:da:4d:fb:fa:f0:05:31:39:9c:6f:30:ec:e8:
40:5e:29:52:22:69:3e:58:e0:9b:5b:e0:d8:e5:31:73:e8:29:
fe:44:b3:c3:04:3d:36:c8:73:b0:1a:ba:a6:30:79:d6:35:10:
85:95:b4:c5:1c:16:f1:6c:5e:59:4e:8d:ec:f7:eb:7f:24:a3:
49:c0:b3:6c:aa:92:92:0b:86:53:4d:f0:ce:83:91:6b:41:5b:
36:06:b3:a5:3b:08:fa:ea:cc:df:14:8e:59:c6:80:12:01:4c:
89:5a:d6:7e:52:c9:d3:a8:1e:a7:43:d2:7e:e9:7a:99:26:8b:
35:96:b8:af:80:ea:d0:73:e3:0e:29:f0:4d:9c:ae:a4:23:89:
50:cd:77:da:c6:30:c3:83:e9:66:87:0b:d4:70:a2:14:b3:ba:
16:e5:5b:81:79:52:5b:0f:6e:07:a8:d9:c4:21:96:14:5f:35:
5e:c2:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:51 2026 by rpki-client