Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kc_V2XdFAfHSPr-OMjoeL9DWMOc.roa
File: kc_V2XdFAfHSPr-OMjoeL9DWMOc.roa (raw, json)
Hash identifier: HUwU47ZNrsdkYGxlOf7Evi7e71gVt4gkWiVx5Ns6BU4=
Subject key identifier: 91:CF:D5:D9:77:45:01:F1:D2:3E:BF:8E:32:3A:1E:2F:D0:D6:30:E7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A1D6626043899B114E564BCCA24C5B9F0B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kc_V2XdFAfHSPr-OMjoeL9DWMOc.roa
Signing time: Fri 13 Nov 2026 19:28:53 +0000
ROA not before: Fri 13 Nov 2026 19:28:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.16.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.41.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d6:62:60:43:89:9b:11:4e:56:4b:cc:a2:4c:5b:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 13 19:28:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91cfd5d9774501f1d23ebf8e323a1e2fd0d630e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:3a:7f:5e:72:a5:53:2f:59:96:15:a3:fa:
dd:f3:e8:b6:c4:65:aa:62:10:23:0e:e8:cf:84:ed:
8c:e6:c1:e2:1d:28:8d:fb:e7:f8:4f:29:e4:35:15:
93:88:f0:8c:a1:26:7c:02:6f:e2:63:24:bb:b6:5f:
36:c9:c3:c4:b5:bc:12:aa:1b:cf:12:84:10:76:7f:
ae:ba:c3:18:f1:05:f9:3e:c8:7c:43:55:9a:6d:f7:
74:98:a1:03:3e:ae:1d:72:b1:63:de:f5:50:fc:d8:
1f:72:60:39:02:c0:50:63:18:53:48:f6:db:56:95:
14:7d:f7:e7:24:11:c0:78:4f:f7:b3:63:d0:f3:26:
f3:12:c3:0d:03:6b:d9:f3:78:bd:c2:19:ed:90:c6:
bd:87:51:ef:38:d4:58:46:4c:1b:3b:41:c4:1f:19:
30:cb:24:69:2b:9a:e6:a5:50:4d:00:b9:4d:3b:a6:
38:34:8a:6f:08:8f:20:f9:36:b7:2e:43:9f:ae:66:
78:3f:01:1b:a9:77:6c:0a:3d:7c:28:15:90:30:45:
e0:6c:2e:49:9a:18:f1:ae:aa:8f:0f:cf:a7:5d:fc:
62:10:cc:84:d3:a3:16:6e:61:70:22:64:a2:c9:d6:
8c:06:9f:79:d7:33:d9:e8:54:da:cb:a6:45:41:1c:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:D5:D9:77:45:01:F1:D2:3E:BF:8E:32:3A:1E:2F:D0:D6:30:E7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kc_V2XdFAfHSPr-OMjoeL9DWMOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.16.0/24
163.5.29.0/24
163.5.41.0/24
163.5.97.0/24
163.5.180.0/24
163.5.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5e:0b:db:b1:c3:75:92:13:67:65:e4:56:de:95:d6:fc:0b:
d0:1b:1f:da:0b:ba:4a:09:52:11:8b:b7:f6:e5:20:3c:c0:fe:
cf:8f:fd:bc:ea:fa:4c:9f:b8:27:96:3e:b9:86:62:68:89:61:
ef:9a:2c:90:6a:db:a2:7b:43:59:99:b2:52:b9:00:4a:78:9e:
eb:71:10:13:56:41:70:88:2b:68:7e:a9:58:b4:7f:68:37:72:
24:ba:74:de:d4:f0:9c:03:8e:35:a9:f5:b4:be:48:e0:b3:b3:
b1:d2:27:c5:5b:95:e8:1d:86:be:83:6c:94:56:7d:3d:4d:75:
14:d4:19:46:c3:6e:6a:b0:a7:e4:ff:40:a8:fe:ce:9d:b1:7b:
1c:1f:3a:db:31:e2:03:d7:d9:70:2f:06:d8:92:ec:51:ad:c6:
33:1c:80:96:a3:be:8f:7d:b8:8c:2d:93:7b:90:29:b9:84:3c:
37:03:05:39:80:8f:d7:04:e3:24:25:d9:1a:2d:7d:23:50:9f:
2b:f6:26:e0:9c:67:55:bc:82:c5:6b:fa:22:fa:0e:f9:36:f6:
59:42:8b:46:d9:7e:66:e6:14:06:af:40:74:7d:73:1d:39:fe:
ca:bb:a2:4a:e5:00:8a:4c:9e:6f:35:9e:cc:da:e2:cb:36:48:
2b:51:4b:97
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaHWYmBDiZsRTlZLzKJMW58LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYxMTEzMTkyODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWNmZDVkOTc3NDUwMWYxZDIzZWJmOGUzMjNhMWUyZmQwZDYzMGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPQ6f15ypVMvWZYVo/rd8+i2xGWq
YhAjDujPhO2M5sHiHSiN++f4TynkNRWTiPCMoSZ8Am/iYyS7tl82ycPEtbwSqhvP
EoQQdn+uusMY8QX5Psh8Q1Wabfd0mKEDPq4dcrFj3vVQ/NgfcmA5AsBQYxhTSPbb
VpUUfffnJBHAeE/3s2PQ8ybzEsMNA2vZ83i9whntkMa9h1HvONRYRkwbO0HEHxkw
yyRpK5rmpVBNALlNO6Y4NIpvCI8g+Ta3LkOfrmZ4PwEbqXdsCj18KBWQMEXgbC5J
mhjxrqqPD8+nXfxiEMyE06MWbmFwImSiydaMBp951zPZ6FTay6ZFQRxLSwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJHP1dl3RQHx0j6/jjI6Hi/Q1jDnMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEva2NfVjJYZEZBZkhTUHItT01qb2VMOURXTU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAowUQAwQA
owUdAwQAowUpAwQAowVhAwQAowW0AwQAowXuMA0GCSqGSIb3DQEBCwUAA4IBAQAt
XgvbscN1khNnZeRW3pXW/AvQGx/aC7pKCVIRi7f25SA8wP7Pj/286vpMn7gnlj65
hmJoiWHvmiyQatuie0NZmbJSuQBKeJ7rcRATVkFwiCtofqlYtH9oN3IkunTe1PCc
A441qfW0vkjgs7Ox0ifFW5XoHYa+g2yUVn09TXUU1BlGw25qsKfk/0Co/s6dsXsc
HzrbMeID19lwLwbYkuxRrcYzHICWo76PfbiMLZN7kCm5hDw3AwU5gI/XBOMkJdka
LX0jUJ8r9ibgnGdVvILFa/oi+g75NvZZQotG2X5m5hQGr0B0fXMdOf7Ku6JK5QCK
TJ5vNZ7M2uLLNkgrUUuX
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:16 2026 by rpki-client