Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ai8f-9ghs59qTSRCtFU0BCkLUYQ.roa
File: Ai8f-9ghs59qTSRCtFU0BCkLUYQ.roa (raw, json)
Hash identifier: I7xum4X2xwb6XorImWsJHQamd0n8G/UcccBydVD4/X4=
Subject key identifier: 02:2F:1F:FB:D8:21:B3:9F:6A:4D:24:42:B4:55:34:04:29:0B:51:84
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019967F0E2B1E5E76BA5A69B2480BA7DE9FC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ai8f-9ghs59qTSRCtFU0BCkLUYQ.roa
Signing time: Sat 20 Sep 2025 16:24:23 +0000
ROA not before: Sat 20 Sep 2025 16:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:67:f0:e2:b1:e5:e7:6b:a5:a6:9b:24:80:ba:7d:e9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 20 16:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=022f1ffbd821b39f6a4d2442b4553404290b5184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:4a:0f:ae:27:19:87:c3:22:b6:0a:fd:dd:
a3:01:a1:9e:ac:5e:4d:a6:c0:4a:b6:de:e3:0f:92:
eb:22:9c:1b:e6:86:69:09:18:46:5f:31:a5:4a:17:
d8:62:66:36:ae:1c:77:14:5a:eb:4d:0e:be:ac:0f:
35:ca:09:13:f7:9f:94:3d:3d:32:cd:2b:49:69:be:
ea:0f:f4:90:a8:7c:01:88:fc:33:7a:9a:71:3c:50:
75:35:fe:75:c7:5e:cf:84:af:87:92:87:8c:6e:0c:
a8:9a:b8:0d:b8:9c:c2:82:0e:b8:20:da:3f:fb:d3:
f1:b1:c4:c0:62:c8:da:bd:76:53:d4:b9:29:ab:b1:
52:f7:86:fb:25:1d:f3:c0:f7:04:3f:54:9b:13:6f:
38:7a:aa:ab:c0:01:16:6f:f2:63:1a:3c:6d:cc:eb:
6c:61:98:2a:64:ec:6b:b0:99:33:79:a9:26:a9:31:
cc:91:5f:86:69:44:e8:14:8f:c9:01:94:2b:e0:1d:
d7:fb:c9:f6:26:3d:8c:9c:ab:60:ea:f0:f2:8a:85:
d2:1e:04:7d:ca:19:15:1a:7f:12:a4:11:32:a8:52:
bf:07:25:7d:5f:9f:dd:6a:1d:03:16:1f:ed:ca:bf:
a8:b5:52:bf:83:90:73:e2:b1:db:fd:77:fa:f6:09:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:1F:FB:D8:21:B3:9F:6A:4D:24:42:B4:55:34:04:29:0B:51:84
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ai8f-9ghs59qTSRCtFU0BCkLUYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.199.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a8:93:7a:6c:45:9b:f9:63:37:7e:30:94:93:c3:ef:59:f3:
9a:a4:2c:f4:79:75:06:51:b4:e0:40:5c:1b:40:c0:19:d3:cc:
2b:ae:d1:d1:52:bd:3e:a0:46:b1:e6:02:49:f7:d3:49:93:31:
67:8a:35:b6:ff:c2:5d:f4:62:6c:b8:25:b7:c4:53:b4:e8:3c:
ea:27:5e:c2:60:6e:ce:ee:e3:7e:d0:3d:ee:3b:9b:30:02:9a:
ba:bc:44:41:ae:c5:cf:93:ef:3b:d0:12:3b:73:ec:a0:4c:1a:
f8:8a:43:ac:3f:dd:34:8a:25:35:c3:eb:9a:8c:18:4e:35:64:
51:8e:18:c0:10:64:29:f8:a5:f8:58:d8:e3:b2:bf:f0:7f:68:
ab:c4:24:ab:5b:03:45:5d:14:34:cd:42:9e:fe:6f:b4:c6:df:
c8:92:b0:a0:d8:c1:52:7f:23:68:12:8c:0a:fa:e6:6c:4a:f7:
20:eb:52:5c:a9:37:83:bb:8d:67:0f:02:38:14:d1:37:91:fb:
39:a8:f0:ad:ec:f9:f7:76:64:c9:07:69:52:c1:cb:68:89:ac:
b2:52:d4:4e:57:ed:e5:97:5f:c1:3c:0c:d4:ff:79:d1:90:db:
02:a1:21:59:41:81:6d:f6:e9:a4:c2:9e:a5:af:96:be:81:72:
1b:b1:47:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZln8OKx5edrpaabJIC6fen8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwOTIwMTYyNDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjJmMWZmYmQ4MjFiMzlmNmE0ZDI0NDJiNDU1MzQwNDI5MGI1MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNJKD64nGYfDIrYK/d2jAaGerF5N
psBKtt7jD5LrIpwb5oZpCRhGXzGlShfYYmY2rhx3FFrrTQ6+rA81ygkT95+UPT0y
zStJab7qD/SQqHwBiPwzeppxPFB1Nf51x17PhK+HkoeMbgyomrgNuJzCgg64INo/
+9PxscTAYsjavXZT1Lkpq7FS94b7JR3zwPcEP1SbE284eqqrwAEWb/JjGjxtzOts
YZgqZOxrsJkzeakmqTHMkV+GaUToFI/JAZQr4B3X+8n2Jj2MnKtg6vDyioXSHgR9
yhkVGn8SpBEyqFK/ByV9X5/dah0DFh/tyr+otVK/g5Bz4rHb/Xf69gl2aQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAIvH/vYIbOfak0kQrRVNAQpC1GEMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQWk4Zi05Z2hzNTlxVFNSQ3RGVTBCQ2tMVVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUeAwQA
owXHMA0GCSqGSIb3DQEBCwUAA4IBAQA1qJN6bEWb+WM3fjCUk8PvWfOapCz0eXUG
UbTgQFwbQMAZ08wrrtHRUr0+oEax5gJJ99NJkzFnijW2/8Jd9GJsuCW3xFO06Dzq
J17CYG7O7uN+0D3uO5swApq6vERBrsXPk+870BI7c+ygTBr4ikOsP900iiU1w+ua
jBhONWRRjhjAEGQp+KX4WNjjsr/wf2irxCSrWwNFXRQ0zUKe/m+0xt/IkrCg2MFS
fyNoEowK+uZsSvcg61JcqTeDu41nDwI4FNE3kfs5qPCt7Pn3dmTJB2lSwctoiayy
UtROV+3ll1/BPAzU/3nRkNsCoSFZQYFt9umkwp6lr5a+gXIbsUfr
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:15 2025 by rpki-client