Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DusLKnwOcXN8779ioI6eyhtPwMo.roa
File: DusLKnwOcXN8779ioI6eyhtPwMo.roa (raw, json)
Hash identifier: SW75tSiPtntpsCNMuu/MjjYhJGYF0BQ3SPfDQaBvFmg=
Subject key identifier: 0E:EB:0B:2A:7C:0E:71:73:7C:EF:BF:62:A0:8E:9E:CA:1B:4F:C0:CA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E0346E2F32D0B5D01ECCAE2DFD55615B9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DusLKnwOcXN8779ioI6eyhtPwMo.roa
Signing time: Thu 07 May 2026 16:30:37 +0000
ROA not before: Thu 07 May 2026 16:30:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 163.5.8.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:46:e2:f3:2d:0b:5d:01:ec:ca:e2:df:d5:56:15:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 7 16:30:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eeb0b2a7c0e71737cefbf62a08e9eca1b4fc0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:43:ae:d2:bd:de:ab:e6:17:e0:53:c4:aa:
c0:42:fd:40:6c:e4:05:ff:f7:cd:31:58:ba:39:df:
7f:b4:4b:39:ad:6f:9c:bc:2b:19:28:b0:78:3c:d7:
17:07:6e:48:c1:94:81:c7:af:16:77:ef:e1:3a:0e:
63:8c:e1:93:af:6b:7a:a3:4b:a7:df:60:40:1f:72:
61:1d:9c:c5:98:ba:7b:3c:8b:e1:d5:ff:f7:db:bc:
71:65:e9:b7:38:2f:97:54:70:24:a0:62:18:d7:d9:
e8:f7:b0:43:f0:05:41:99:8e:2f:fd:10:1a:08:c8:
2c:da:82:23:c5:61:bc:0a:62:3e:82:1a:d0:3d:06:
3a:c8:e1:31:c6:f6:11:22:1a:d2:67:c1:6d:43:37:
9a:49:57:36:31:9a:14:0c:d2:6d:59:79:ae:43:1d:
e4:34:89:5d:87:e9:81:b1:ec:aa:ff:a1:8f:b7:63:
aa:51:b3:e9:1d:4c:81:5d:6c:e6:b4:8f:07:cf:3a:
0b:90:bd:c7:99:e4:df:a6:69:3a:49:5f:1b:94:86:
86:92:02:9a:c6:c2:11:45:0d:84:4b:d1:a0:31:92:
b0:5e:2c:a6:a1:96:bf:e9:c8:22:bb:70:1a:6b:78:
16:5e:90:1d:d3:cb:a2:e6:42:4a:d9:ff:72:a6:db:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:0B:2A:7C:0E:71:73:7C:EF:BF:62:A0:8E:9E:CA:1B:4F:C0:CA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DusLKnwOcXN8779ioI6eyhtPwMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.8.0/24
163.5.13.0/24
163.5.106.0/24
163.5.109.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4d:12:af:d9:03:3f:1c:5a:d4:b9:46:2a:db:e0:0f:b4:b5:
d6:ee:b3:13:ff:04:96:93:5b:6e:db:b8:5c:32:45:11:38:bb:
66:bf:ee:4d:73:34:fe:cb:7e:6a:13:13:b8:9c:2e:81:42:18:
bd:b2:40:26:e0:3f:c9:42:f3:1e:00:81:6b:f0:7c:e1:e6:72:
75:40:b6:bc:05:4d:7b:87:92:83:40:44:e7:2f:7a:01:aa:8b:
3b:71:4a:44:90:60:63:4a:05:c3:88:20:0a:06:53:12:41:71:
5c:c6:0b:27:c1:87:b1:82:ba:8e:dc:44:31:d3:83:76:ca:9c:
cb:3f:06:bd:9a:89:9b:36:ed:e3:f7:81:1c:76:ac:62:f6:75:
f1:23:36:78:55:ed:60:23:4a:a5:10:3c:16:ae:36:bd:96:08:
ed:49:50:43:6b:af:e0:46:bd:3b:a3:75:1a:a6:2d:62:55:ac:
cd:d1:62:7b:96:2b:e0:ae:b6:16:5e:96:35:ed:52:06:63:8d:
aa:e3:fa:5b:ab:21:5a:85:49:c1:58:3b:b8:48:d5:72:a4:3e:
b7:30:13:8c:24:51:60:40:a4:84:03:e0:48:f1:19:c4:c0:5b:
73:09:ca:81:f3:58:c6:7d:ca:18:fe:79:e1:2c:69:19:b8:1a:
c0:86:b7:67
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ4DRuLzLQtdAezK4t/VVhW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNTA3MTYzMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWViMGIyYTdjMGU3MTczN2NlZmJmNjJhMDhlOWVjYTFiNGZjMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlpDrtK93qvmF+BTxKrAQv1AbOQF
//fNMVi6Od9/tEs5rW+cvCsZKLB4PNcXB25IwZSBx68Wd+/hOg5jjOGTr2t6o0un
32BAH3JhHZzFmLp7PIvh1f/327xxZem3OC+XVHAkoGIY19no97BD8AVBmY4v/RAa
CMgs2oIjxWG8CmI+ghrQPQY6yOExxvYRIhrSZ8FtQzeaSVc2MZoUDNJtWXmuQx3k
NIldh+mBseyq/6GPt2OqUbPpHUyBXWzmtI8HzzoLkL3HmeTfpmk6SV8blIaGkgKa
xsIRRQ2ES9GgMZKwXiymoZa/6cgiu3Aaa3gWXpAd08ui5kJK2f9yptuTPwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFA7rCyp8DnFzfO+/YqCOnsobT8DKMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRHVzTEtud09jWE44Nzc5aW9JNmV5aHRQd01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowUIAwQA
owUNAwQAowVqAwQAowVtAwQAowV/MA0GCSqGSIb3DQEBCwUAA4IBAQAXTRKv2QM/
HFrUuUYq2+APtLXW7rMT/wSWk1tu27hcMkUROLtmv+5NczT+y35qExO4nC6BQhi9
skAm4D/JQvMeAIFr8Hzh5nJ1QLa8BU17h5KDQETnL3oBqos7cUpEkGBjSgXDiCAK
BlMSQXFcxgsnwYexgrqO3EQx04N2ypzLPwa9mombNu3j94Ecdqxi9nXxIzZ4Ve1g
I0qlEDwWrja9lgjtSVBDa6/gRr07o3Uapi1iVazN0WJ7livgrrYWXpY17VIGY42q
4/pbqyFahUnBWDu4SNVypD63MBOMJFFgQKSEA+BI8RnEwFtzCcqB81jGfcoY/nnh
LGkZuBrAhrdn
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:04 2026 by rpki-client