Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/peoGyvDd8CoQ9z2BEaS9reBGwss.roa
File: peoGyvDd8CoQ9z2BEaS9reBGwss.roa (raw, json)
Hash identifier: BSAoyA/x/zgM7OcjAEXcebtQ1qB9W5ZJERrGluYJTKk=
Subject key identifier: A5:EA:06:CA:F0:DD:F0:2A:10:F7:3D:81:11:A4:BD:AD:E0:46:C2:CB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F8F6B8217B72F1C3D4062697ECBC338B8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/peoGyvDd8CoQ9z2BEaS9reBGwss.roa
Signing time: Thu 23 Jul 2026 14:40:15 +0000
ROA not before: Thu 23 Jul 2026 14:40:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:6b:82:17:b7:2f:1c:3d:40:62:69:7e:cb:c3:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 23 14:40:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5ea06caf0ddf02a10f73d8111a4bdade046c2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:fc:c4:23:bf:43:d6:01:51:a1:e3:db:d4:
a4:98:71:5a:d0:bd:d3:40:3b:fa:1a:06:54:6e:87:
65:e2:dc:d0:46:69:e1:6b:f9:9d:38:37:dc:43:66:
34:bd:96:18:f9:f9:2d:16:ac:a6:f7:b2:db:65:d6:
eb:be:99:cc:80:86:cf:36:58:e4:05:78:47:60:a7:
67:4d:24:75:84:21:de:93:4c:71:e6:20:89:7e:2a:
65:03:a5:a0:e5:7e:87:a8:fc:c2:ee:d0:52:ab:f2:
b9:fb:1d:cc:c8:9f:d2:af:55:18:d9:01:fb:be:06:
54:38:a7:2b:25:12:40:0d:78:57:2a:a8:d1:f2:8a:
1e:f1:71:3e:30:3b:5b:66:58:00:ae:5c:18:b3:02:
5a:67:5d:63:ef:dc:46:58:b6:21:d5:62:fe:b2:f5:
a7:94:8b:56:25:8d:a2:3a:6b:d3:c6:9b:cb:0b:b4:
60:99:18:fa:20:c6:ab:d8:ae:11:31:4e:13:71:7e:
53:72:c5:b7:8c:6c:98:18:61:f7:ea:79:3c:81:db:
1c:86:28:a0:71:86:ad:18:bc:72:99:58:90:8c:6c:
d3:2a:d9:59:05:f8:a7:8b:13:09:08:ee:08:b2:0c:
a2:16:97:53:3d:fb:00:df:93:f7:c7:c4:76:dc:2f:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EA:06:CA:F0:DD:F0:2A:10:F7:3D:81:11:A4:BD:AD:E0:46:C2:CB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/peoGyvDd8CoQ9z2BEaS9reBGwss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.54.0/24
163.5.91.0/24
163.5.136.0/24
163.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0b:53:22:dc:f0:43:4a:41:f0:0b:42:37:49:3f:37:2c:ae:
da:55:cb:7b:90:dd:00:6d:32:e1:7b:da:eb:3a:3e:5c:d4:80:
fe:65:6d:c0:35:53:61:7f:1c:4a:f1:3c:ba:32:1c:e8:70:34:
6d:99:99:34:92:e4:94:1e:3c:6e:1f:f5:a4:ed:a8:c4:c8:3f:
eb:b7:e6:50:d3:9c:68:9b:93:96:e2:ba:7c:0f:75:6a:b1:eb:
63:59:d4:46:01:43:bc:56:dc:e9:92:4b:82:a8:53:49:66:00:
6f:03:ab:f8:21:10:62:52:48:4a:57:c1:b6:68:85:62:3a:c7:
a7:76:22:a2:ad:81:d8:79:98:09:3f:5d:36:e7:fa:72:94:fd:
d6:a1:14:52:f2:f9:ec:a4:d4:4e:67:42:52:f8:8b:f9:14:ac:
40:c9:94:66:02:99:d0:32:0c:d8:0c:78:54:0a:27:fd:2c:87:
4c:61:2c:8c:a5:f5:81:f1:65:44:db:18:bc:26:bd:1b:3c:e0:
c2:0e:68:3d:a9:09:2d:40:de:cc:99:19:e9:4b:93:96:c2:5f:
3b:b6:ee:28:4d:9f:96:2f:50:f5:b8:ac:df:eb:eb:17:ac:38:
6d:12:09:89:5c:9c:62:3a:ff:49:3f:d7:b5:09:a9:23:e2:7c:
23:9a:3b:c9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ+Pa4IXty8cPUBiaX7Lwzi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNzIzMTQ0MDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWVhMDZjYWYwZGRmMDJhMTBmNzNkODExMWE0YmRhZGUwNDZjMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4D8xCO/Q9YBUaHj29SkmHFa0L3T
QDv6GgZUbodl4tzQRmnha/mdODfcQ2Y0vZYY+fktFqym97LbZdbrvpnMgIbPNljk
BXhHYKdnTSR1hCHek0xx5iCJfiplA6Wg5X6HqPzC7tBSq/K5+x3MyJ/Sr1UY2QH7
vgZUOKcrJRJADXhXKqjR8ooe8XE+MDtbZlgArlwYswJaZ11j79xGWLYh1WL+svWn
lItWJY2iOmvTxpvLC7RgmRj6IMar2K4RMU4TcX5TcsW3jGyYGGH36nk8gdschiig
cYatGLxymViQjGzTKtlZBfinixMJCO4IsgyiFpdTPfsA35P3x8R23C9dBQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKXqBsrw3fAqEPc9gRGkva3gRsLLMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcGVvR3l2RGQ4Q29ROXoyQkVhUzlyZUJHd3NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowUOAwQA
owU2AwQAowVbAwQAowWIAwQAowWTMA0GCSqGSIb3DQEBCwUAA4IBAQA7C1Mi3PBD
SkHwC0I3ST83LK7aVct7kN0AbTLhe9rrOj5c1ID+ZW3ANVNhfxxK8Ty6MhzocDRt
mZk0kuSUHjxuH/Wk7ajEyD/rt+ZQ05xom5OW4rp8D3VqsetjWdRGAUO8VtzpkkuC
qFNJZgBvA6v4IRBiUkhKV8G2aIViOsendiKirYHYeZgJP1025/pylP3WoRRS8vns
pNROZ0JS+Iv5FKxAyZRmApnQMgzYDHhUCif9LIdMYSyMpfWB8WVE2xi8Jr0bPODC
Dmg9qQktQN7MmRnpS5OWwl87tu4oTZ+WL1D1uKzf6+sXrDhtEgmJXJxiOv9JP9e1
Cakj4nwjmjvJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:51 2026 by rpki-client