Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PMENgo5--OMqPeLHxHknJz-EJZA.roa
File: PMENgo5--OMqPeLHxHknJz-EJZA.roa (raw, json)
Hash identifier: qFQcdr5i0wqrTS0fBq377cNFmfYyEEhejobwjoFNOIc=
Subject key identifier: 3C:C1:0D:82:8E:7E:F8:E3:2A:3D:E2:C7:C4:79:27:27:3F:84:25:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E1AFBE943925D38BF1E719BF2D6C94765
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PMENgo5--OMqPeLHxHknJz-EJZA.roa
Signing time: Tue 12 May 2026 06:59:37 +0000
ROA not before: Tue 12 May 2026 06:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:fb:e9:43:92:5d:38:bf:1e:71:9b:f2:d6:c9:47:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 12 06:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cc10d828e7ef8e32a3de2c7c47927273f842590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:61:95:5d:b5:a6:2f:98:87:85:fe:d5:2a:
90:9f:5f:44:0d:fb:0d:54:b5:54:f5:51:06:fd:84:
d8:57:ab:e6:92:f0:f3:e3:ea:e5:92:ce:c2:91:e4:
c4:69:62:9d:11:d9:17:d7:fe:a1:87:34:b6:0f:07:
40:8d:e5:38:fe:26:31:95:ff:f1:dc:da:66:74:48:
d4:64:6d:0d:e3:3f:b5:49:ce:ce:f1:a4:46:aa:ab:
52:13:f6:c7:58:af:7c:f6:8a:f9:0d:14:e0:4e:26:
bf:64:44:2a:db:c1:b5:c3:5a:f1:89:c3:90:dd:98:
e0:04:9a:11:81:18:64:4d:14:1c:a4:1c:19:7a:b2:
32:1d:ad:43:ac:d5:69:9c:23:0d:6b:60:32:34:a8:
17:f5:91:c4:57:41:39:93:cf:17:28:c9:1e:bd:1c:
ba:3f:04:88:63:21:1f:a9:25:f4:53:0b:da:e1:89:
16:85:e8:e4:00:8a:0e:46:13:34:ed:db:86:74:54:
f0:c9:3b:7e:18:f6:ce:93:82:99:7d:23:b9:2b:0d:
e4:bb:2b:eb:88:5d:a3:4c:27:d2:c1:22:1b:3c:04:
da:1c:1f:a4:a8:75:75:87:07:7c:cd:2f:3e:3c:4e:
1c:2b:42:dc:93:9e:17:83:87:7c:4a:9c:e7:4b:a6:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:0D:82:8E:7E:F8:E3:2A:3D:E2:C7:C4:79:27:27:3F:84:25:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PMENgo5--OMqPeLHxHknJz-EJZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.147.0/24
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9d:2f:e7:1d:32:04:ec:8c:64:eb:e3:2d:1a:dd:d1:11:36:
8f:43:cd:c9:cd:39:da:81:76:2e:71:99:4c:fe:22:7a:fa:5b:
32:ac:34:80:9c:a1:1e:c2:8e:5f:b0:e4:f6:0f:35:8f:8f:24:
f6:bd:2d:4c:0a:9a:65:e8:c4:d3:9b:77:e1:65:f6:4c:ac:0f:
e1:6f:9b:69:87:e0:7c:96:35:be:8f:56:6c:3d:a9:19:19:a1:
ad:b1:71:12:78:95:e1:bc:91:f0:8a:41:38:f6:4e:ba:cb:67:
c1:d6:42:d3:e9:60:d2:c2:29:b6:08:47:21:1d:0c:ea:68:df:
ff:b3:43:e5:fd:12:10:1b:20:07:4b:48:69:07:fe:84:96:2f:
4b:d9:9c:39:f0:26:91:e3:95:3b:c5:92:29:e3:14:3a:46:43:
85:a8:38:8f:6c:7d:77:ac:9f:fd:ae:9c:2b:0b:9a:a2:45:8d:
47:5c:f6:74:94:cc:90:40:13:52:7c:00:f5:1b:39:9d:77:d9:
1b:b7:2d:c8:eb:9c:02:46:35:e1:68:ed:9b:d9:09:a1:f1:c5:
aa:e4:e1:0f:83:a2:45:89:83:85:8d:a4:f8:d1:1f:31:cd:f8:
2d:ae:58:b5:32:a1:d2:80:34:b4:db:0b:7a:af:32:b4:c3:52:
8c:d6:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:51 2026 by rpki-client