Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FpLAoTfHMxkj21uFu0c8r3XiyHk.roa
File: FpLAoTfHMxkj21uFu0c8r3XiyHk.roa (raw, json)
Hash identifier: GrBpivM8xuUH2kZRPmyGl0AsCbHZhavRRFi/aH86UlU=
Subject key identifier: 16:92:C0:A1:37:C7:33:19:23:DB:5B:85:BB:47:3C:AF:75:E2:C8:79
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A1B0B58709A58D9341462129080B762BF9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FpLAoTfHMxkj21uFu0c8r3XiyHk.roa
Signing time: Fri 06 Nov 2026 11:54:08 +0000
ROA not before: Fri 06 Nov 2026 11:54:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 163.5.56.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:b5:87:09:a5:8d:93:41:46:21:29:08:0b:76:2b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 6 11:54:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1692c0a137c7331923db5b85bb473caf75e2c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:77:3d:1e:b8:cd:98:0e:c2:80:1d:49:a3:
66:5c:15:6b:bf:88:b3:b2:1d:3d:13:8a:b3:ac:d4:
24:e9:92:ff:09:b7:a0:69:cd:40:a6:a4:23:1c:21:
2e:d8:3a:1c:cd:f4:2c:60:87:aa:1a:25:39:86:1a:
8e:63:de:13:ec:d8:87:3b:b8:ae:65:1e:ca:7a:ee:
8a:91:ae:88:aa:95:94:f7:a8:d8:6d:f7:d3:84:1e:
38:25:33:53:b2:57:fe:ad:f0:51:53:2d:8c:20:e0:
d1:1c:10:79:bd:40:72:49:0d:a6:e9:1c:f5:be:56:
7f:58:ee:89:46:39:9a:ed:ee:3b:7f:25:e8:02:90:
f8:2f:51:5a:da:18:0a:54:2c:fa:42:8c:ca:6e:c4:
7c:5f:89:67:ad:08:e5:49:b5:21:8b:4a:16:ad:89:
99:91:c8:16:26:29:8a:20:27:86:fb:c1:c7:ff:51:
73:02:2f:82:58:f3:da:5a:20:57:12:1e:8e:20:81:
8f:59:75:b7:6e:9e:d3:e6:ef:ae:6f:98:6c:35:5d:
1c:d9:14:d8:03:86:25:ea:6c:52:dd:6c:6f:85:79:
78:85:f5:06:6b:3d:b8:e5:36:9b:3e:af:80:94:a0:
ed:bf:48:f1:d9:05:8c:cf:26:dc:4b:69:b1:76:58:
0a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:C0:A1:37:C7:33:19:23:DB:5B:85:BB:47:3C:AF:75:E2:C8:79
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FpLAoTfHMxkj21uFu0c8r3XiyHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.56.0/24
163.5.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ca:9c:e1:c6:33:b9:0d:d3:a5:70:17:8e:1b:bd:8d:a2:60:
d6:90:63:fd:a5:3f:51:62:06:40:aa:bb:5d:d5:77:59:a5:86:
7f:fa:c0:f8:73:87:72:c9:74:9b:71:d2:cb:75:3c:d7:de:98:
d0:5c:e6:44:ea:31:ed:19:a6:d1:29:4d:cd:6b:61:b5:93:15:
5c:7a:c0:b6:0b:ec:23:cf:ba:2c:84:ec:37:56:9c:fe:f0:7f:
75:52:67:fb:4d:c2:28:15:b2:21:65:15:fe:17:7e:e9:bd:5c:
86:4c:31:81:c0:bb:e0:d3:de:b0:00:6d:ee:38:e8:97:1d:fa:
e2:99:a8:25:61:ec:0c:5c:b5:e1:07:fd:a4:84:aa:0e:d4:3e:
09:c3:cb:28:bd:27:3c:e1:cb:9a:81:5b:b6:c5:77:fd:7e:5f:
4c:d1:79:dc:ac:c5:1f:6c:f1:f0:83:45:97:73:1a:e8:c0:ef:
49:2f:ee:6b:ac:5d:03:bf:b9:c2:f3:6f:a3:7b:19:b3:3a:50:
48:33:4b:f3:56:1e:09:56:99:03:7b:37:14:da:c1:d2:3f:a1:
33:79:f0:06:3e:c0:b5:27:a8:57:72:9e:81:5b:0f:e7:66:0a:
58:39:7f:53:16:bf:c6:11:18:24:cd:92:5f:59:53:85:7a:4d:
c8:e5:ec:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGwtYcJpY2TQUYhKQgLdiv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYxMTA2MTE1NDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjkyYzBhMTM3YzczMzE5MjNkYjViODViYjQ3M2NhZjc1ZTJjODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQN3PR64zZgOwoAdSaNmXBVrv4iz
sh09E4qzrNQk6ZL/Cbegac1ApqQjHCEu2DoczfQsYIeqGiU5hhqOY94T7NiHO7iu
ZR7Keu6Kka6IqpWU96jYbffThB44JTNTslf+rfBRUy2MIODRHBB5vUBySQ2m6Rz1
vlZ/WO6JRjma7e47fyXoApD4L1Fa2hgKVCz6QozKbsR8X4lnrQjlSbUhi0oWrYmZ
kcgWJimKICeG+8HH/1FzAi+CWPPaWiBXEh6OIIGPWXW3bp7T5u+ub5hsNV0c2RTY
A4Yl6mxS3WxvhXl4hfUGaz245TabPq+AlKDtv0jx2QWMzybcS2mxdlgKSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBaSwKE3xzMZI9tbhbtHPK914sh5MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRnBMQW9UZkhNeGtqMjF1RnUwYzhyM1hpeUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowU4AwQA
owXRMA0GCSqGSIb3DQEBCwUAA4IBAQBKypzhxjO5DdOlcBeOG72NomDWkGP9pT9R
YgZAqrtd1XdZpYZ/+sD4c4dyyXSbcdLLdTzX3pjQXOZE6jHtGabRKU3Na2G1kxVc
esC2C+wjz7oshOw3Vpz+8H91Umf7TcIoFbIhZRX+F37pvVyGTDGBwLvg096wAG3u
OOiXHfrimaglYewMXLXhB/2khKoO1D4Jw8sovSc84cuagVu2xXf9fl9M0XncrMUf
bPHwg0WXcxrowO9JL+5rrF0Dv7nC82+jexmzOlBIM0vzVh4JVpkDezcU2sHSP6Ez
efAGPsC1J6hXcp6BWw/nZgpYOX9TFr/GERgkzZJfWVOFek3I5ez/
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:50 2026 by rpki-client