Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ANFs84lHNaqIlR-3m4GO-e1OwJI.roa
File: ANFs84lHNaqIlR-3m4GO-e1OwJI.roa (raw, json)
Hash identifier: XgSPlujiRZ5Q7932q352IXOweHnopQdEhJpXcVkJjC0=
Subject key identifier: 00:D1:6C:F3:89:47:35:AA:88:95:1F:B7:9B:81:8E:F9:ED:4E:C0:92
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019CFBB726F73247A73B42EE5D0FC9C50E7D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ANFs84lHNaqIlR-3m4GO-e1OwJI.roa
Signing time: Tue 17 Mar 2026 12:13:30 +0000
ROA not before: Tue 17 Mar 2026 12:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402186
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:b7:26:f7:32:47:a7:3b:42:ee:5d:0f:c9:c5:0e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 17 12:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00d16cf3894735aa88951fb79b818ef9ed4ec092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:5e:0b:4c:33:d2:8a:01:b6:1e:ea:52:77:
fe:4c:6a:5a:cb:fc:56:19:1f:91:b2:43:bf:01:1c:
a4:7c:e6:ef:67:57:9e:e7:8c:c3:c5:1e:ee:00:2b:
44:15:3a:01:c1:f6:fb:73:ff:9d:15:56:65:06:ba:
35:d9:b9:44:49:11:4a:03:b9:47:a4:de:12:8d:de:
83:b2:32:ab:a1:bb:d7:36:98:75:fd:f5:c9:f9:ce:
6e:a2:74:82:77:30:b9:3c:15:f0:c0:ea:33:40:4e:
02:fc:9a:47:03:ad:fa:a7:0c:b0:3a:e2:4c:52:48:
20:27:2c:32:2f:3b:3b:44:ac:4f:b2:78:72:61:5f:
fb:67:a9:fb:bd:53:c1:d4:87:e8:c2:16:1c:3c:96:
42:f2:32:91:b0:11:07:9b:cb:af:70:23:37:ee:30:
06:c9:a4:31:c0:7d:13:75:fd:91:60:30:7f:04:9f:
6a:cd:59:0c:be:ca:58:81:4b:a2:af:94:15:58:47:
f6:81:ad:68:ce:b5:38:0b:bc:76:15:34:17:42:2c:
c6:7c:d9:fb:fb:6b:a7:23:67:fe:9d:04:c8:0a:3f:
5f:0f:02:e2:46:ec:a5:47:90:19:8f:88:08:a3:4c:
2f:8b:74:27:2f:55:e0:bf:76:93:19:a7:a5:77:e4:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:6C:F3:89:47:35:AA:88:95:1F:B7:9B:81:8E:F9:ED:4E:C0:92
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ANFs84lHNaqIlR-3m4GO-e1OwJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.91.0/24
163.5.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4a:ef:80:2e:41:1f:34:83:bc:68:e5:0e:d5:dd:74:40:5b:
b0:af:1c:63:17:9e:c9:c2:60:04:a3:50:e4:ec:fa:ad:43:14:
2b:1f:87:ba:f7:d1:03:9d:29:e3:0b:84:2a:fc:38:98:c4:f6:
6e:34:05:c0:e3:c3:34:60:81:3a:9d:89:36:13:d5:dc:14:00:
83:57:60:74:f4:73:07:3b:15:5e:9d:ac:d7:2d:5a:80:87:84:
67:f0:46:91:cb:f1:a6:dd:1d:a0:46:26:dd:4c:07:af:09:23:
9a:31:1b:24:9e:86:90:94:18:06:cd:0a:29:ff:0e:68:d5:0a:
ab:0e:26:d6:87:09:ad:8d:66:5b:dd:b9:ce:b5:6c:1c:eb:7f:
aa:dc:7b:70:22:e8:d4:4c:9f:89:42:26:38:bd:c3:f7:d5:0a:
eb:88:53:b2:c1:a7:c5:09:0c:d1:da:e3:bb:57:26:25:32:be:
60:92:5f:ab:5a:8d:8f:ee:a6:c4:94:4d:d6:49:d0:a1:63:9b:
d3:21:91:08:ba:12:0e:3f:90:32:39:72:73:85:32:44:dc:6a:
e6:5f:d6:cd:77:f2:20:fd:a9:39:f7:ac:89:1a:f9:83:3f:b5:
1f:b7:73:f5:c4:a3:70:a1:a5:40:05:80:8a:71:2f:d3:b3:41:
c6:2f:38:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZz7tyb3MkenO0LuXQ/JxQ59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMzE3MTIxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGQxNmNmMzg5NDczNWFhODg5NTFmYjc5YjgxOGVmOWVkNGVjMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwJeC0wz0ooBth7qUnf+TGpay/xW
GR+RskO/ARykfObvZ1ee54zDxR7uACtEFToBwfb7c/+dFVZlBro12blESRFKA7lH
pN4Sjd6DsjKrobvXNph1/fXJ+c5uonSCdzC5PBXwwOozQE4C/JpHA636pwywOuJM
UkggJywyLzs7RKxPsnhyYV/7Z6n7vVPB1IfowhYcPJZC8jKRsBEHm8uvcCM37jAG
yaQxwH0Tdf2RYDB/BJ9qzVkMvspYgUuir5QVWEf2ga1ozrU4C7x2FTQXQizGfNn7
+2unI2f+nQTICj9fDwLiRuylR5AZj4gIo0wvi3QnL1Xgv3aTGaeld+T1eQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFADRbPOJRzWqiJUft5uBjvntTsCSMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQU5Gczg0bEhOYXFJbFItM200R08tZTFPd0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowVbAwQA
owV3MA0GCSqGSIb3DQEBCwUAA4IBAQCwSu+ALkEfNIO8aOUO1d10QFuwrxxjF57J
wmAEo1Dk7PqtQxQrH4e699EDnSnjC4Qq/DiYxPZuNAXA48M0YIE6nYk2E9XcFACD
V2B09HMHOxVenazXLVqAh4Rn8EaRy/Gm3R2gRibdTAevCSOaMRsknoaQlBgGzQop
/w5o1QqrDibWhwmtjWZb3bnOtWwc63+q3HtwIujUTJ+JQiY4vcP31QrriFOywafF
CQzR2uO7VyYlMr5gkl+rWo2P7qbElE3WSdChY5vTIZEIuhIOP5AyOXJzhTJE3Grm
X9bNd/Ig/ak596yJGvmDP7Uft3P1xKNwoaVABYCKcS/Ts0HGLzij
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:34 2026 by rpki-client