Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dwk6JT5ydx8aHOWV4CsCZLIEDpA.roa
File: Dwk6JT5ydx8aHOWV4CsCZLIEDpA.roa (raw, json)
Hash identifier: XQwW3oDmo4kJLxh6hN+8GJqsAnn1YWaSx+j3vne1zrM=
Subject key identifier: 0F:09:3A:25:3E:72:77:1F:1A:1C:E5:95:E0:2B:02:64:B2:04:0E:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D1ABE45DCA959B3C598AD1FFEFFE11DBF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dwk6JT5ydx8aHOWV4CsCZLIEDpA.roa
Signing time: Mon 23 Mar 2026 12:49:30 +0000
ROA not before: Mon 23 Mar 2026 12:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214730
IP address blocks: 163.5.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:be:45:dc:a9:59:b3:c5:98:ad:1f:fe:ff:e1:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 23 12:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f093a253e72771f1a1ce595e02b0264b2040e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:87:97:ef:af:ff:03:d5:88:97:7f:64:3b:
6b:62:16:f0:90:df:57:23:3d:3b:5a:f3:03:f1:80:
57:4e:2f:0b:7e:9b:4d:a9:13:2e:5c:f7:59:40:64:
b6:90:db:73:a4:96:0f:22:e4:e7:53:5d:9d:6d:7c:
0c:87:0e:23:60:89:99:fe:cc:77:fc:d9:47:6d:65:
53:5a:31:51:a5:14:ed:13:58:16:fe:ed:a9:4e:a2:
01:51:33:3e:53:eb:f8:a9:d9:05:bf:56:2a:75:b7:
d7:1f:4a:d7:72:44:80:a9:1e:81:7a:0e:0d:37:20:
78:b7:e3:32:da:4c:b8:30:ca:66:7d:b8:42:5b:78:
64:2e:b3:39:a3:e9:da:b8:0b:7d:83:b5:97:71:d5:
41:eb:7a:19:8a:39:ea:ff:e7:7a:c0:59:c5:b5:f0:
14:be:00:bd:3a:11:b7:8b:ed:5b:ed:9b:d2:3c:58:
c6:c8:2e:ff:ee:14:bb:15:53:0d:11:0c:79:40:69:
9a:5d:c2:fe:3d:21:6d:91:50:90:ec:83:13:a3:f6:
60:93:a8:78:db:ea:f4:5e:41:9f:44:e8:ce:9f:5a:
fb:89:fc:1a:fb:51:de:3b:16:1f:15:95:78:e5:4d:
be:33:e5:0e:e8:29:a4:c3:e0:ab:80:cf:e3:64:37:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:3A:25:3E:72:77:1F:1A:1C:E5:95:E0:2B:02:64:B2:04:0E:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dwk6JT5ydx8aHOWV4CsCZLIEDpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fa:7b:0a:a7:7d:01:91:bf:ad:c1:9e:25:ee:ac:ab:f8:48:
26:7b:b4:1b:99:58:70:a1:3e:0d:99:38:1c:be:0c:31:98:5d:
7b:c6:7a:f0:50:0d:13:d4:2c:c5:19:dc:13:72:12:52:59:0d:
c3:7d:62:33:e3:bf:0b:68:6c:a0:a2:07:58:49:0a:f9:31:ee:
c6:b9:28:7a:c9:85:94:f6:6e:cb:89:b9:73:b2:af:7d:25:03:
68:d0:6a:82:80:a2:fd:09:6b:34:4f:02:64:b8:fd:06:89:04:
14:74:17:b2:84:c1:0e:37:33:b4:de:9d:a6:3c:e1:37:0b:f5:
e1:c4:74:a5:57:69:ed:37:e8:80:e8:2c:dc:87:51:2e:c8:74:
be:54:c8:79:8c:69:07:3d:9c:78:71:ef:90:ec:86:f8:b8:18:
69:1a:77:3b:1f:0c:66:83:2e:b9:13:c0:16:64:78:5a:a4:06:
74:f4:97:84:01:8d:17:8b:77:92:ad:11:49:f1:22:bd:46:f0:
5c:b4:6c:38:55:ad:4c:1d:ba:86:c4:2f:f7:ae:de:88:ef:10:
01:91:33:e0:f7:77:5b:cd:d2:90:40:89:2d:b1:7c:1f:b2:69:
5e:ee:8f:18:4c:ab:c2:87:64:41:37:9b:69:43:7c:b8:af:b5:
bd:f3:fe:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0avkXcqVmzxZitH/7/4R2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMzIzMTI0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjA5M2EyNTNlNzI3NzFmMWExY2U1OTVlMDJiMDI2NGIyMDQwZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiaHl++v/wPViJd/ZDtrYhbwkN9X
Iz07WvMD8YBXTi8LfptNqRMuXPdZQGS2kNtzpJYPIuTnU12dbXwMhw4jYImZ/sx3
/NlHbWVTWjFRpRTtE1gW/u2pTqIBUTM+U+v4qdkFv1YqdbfXH0rXckSAqR6Beg4N
NyB4t+My2ky4MMpmfbhCW3hkLrM5o+nauAt9g7WXcdVB63oZijnq/+d6wFnFtfAU
vgC9OhG3i+1b7ZvSPFjGyC7/7hS7FVMNEQx5QGmaXcL+PSFtkVCQ7IMTo/Zgk6h4
2+r0XkGfROjOn1r7ifwa+1HeOxYfFZV45U2+M+UO6Cmkw+CrgM/jZDcrvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA8JOiU+cncfGhzlleArAmSyBA6QMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRHdrNkpUNXlkeDhhSE9XVjRDc0NaTElFRHBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXYMA0G
CSqGSIb3DQEBCwUAA4IBAQB1+nsKp30Bkb+twZ4l7qyr+Egme7QbmVhwoT4NmTgc
vgwxmF17xnrwUA0T1CzFGdwTchJSWQ3DfWIz478LaGygogdYSQr5Me7GuSh6yYWU
9m7Liblzsq99JQNo0GqCgKL9CWs0TwJkuP0GiQQUdBeyhMEONzO03p2mPOE3C/Xh
xHSlV2ntN+iA6Czch1EuyHS+VMh5jGkHPZx4ce+Q7Ib4uBhpGnc7Hwxmgy65E8AW
ZHhapAZ09JeEAY0Xi3eSrRFJ8SK9RvBctGw4Va1MHbqGxC/3rt6I7xABkTPg93db
zdKQQIktsXwfsmle7o8YTKvCh2RBN5tpQ3y4r7W98/7q
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:45:07 2026 by rpki-client