Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u-qbvlSiWK0uvXug6M-WKSZ6_8c.roa
File: u-qbvlSiWK0uvXug6M-WKSZ6_8c.roa (raw, json)
Hash identifier: IQx7bnToZ3dZM+uJZD9WnbiPrVzCafSU+ls3dLoXLi8=
Subject key identifier: BB:EA:9B:BE:54:A2:58:AD:2E:BD:7B:A0:E8:CF:96:29:26:7A:FF:C7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0CD6A4016DA34C591B1D74716A5C4BAEE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u-qbvlSiWK0uvXug6M-WKSZ6_8c.roa
Signing time: Wed 23 Sep 2026 08:38:07 +0000
ROA not before: Wed 23 Sep 2026 08:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:6a:40:16:da:34:c5:91:b1:d7:47:16:a5:c4:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 08:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbea9bbe54a258ad2ebd7ba0e8cf9629267affc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:84:94:f6:65:b1:76:43:8f:9b:20:36:15:da:
5c:7c:b0:1d:a8:77:e2:b9:9a:61:ff:fb:21:32:6f:
37:5e:9c:ab:dc:e9:00:05:3d:d8:95:b6:26:d6:e0:
b7:46:46:49:8c:cd:7b:ac:70:f8:e1:11:7c:29:e8:
7f:e0:c6:0b:ca:b1:a7:94:a4:6e:d8:bc:ce:34:b7:
4d:3a:30:d5:22:7c:9d:48:09:f1:60:6e:84:78:6f:
57:6c:3f:48:4a:fd:a0:b6:3a:6b:e9:ce:b8:43:2d:
8a:bb:df:b1:79:18:17:a5:02:bb:c0:b6:6d:1f:94:
70:38:d6:2e:cf:52:dd:f8:10:34:7e:8a:57:68:7b:
55:2d:a6:bf:65:06:4d:5d:a8:d0:2b:bb:93:2f:ac:
3d:dc:39:79:ef:0f:66:32:89:c2:03:8f:10:b9:ca:
23:7f:66:62:79:67:0b:44:30:91:55:46:f1:7d:5c:
f6:84:60:64:30:4b:9a:25:a0:b8:97:26:70:42:98:
a6:2f:a5:2d:54:ca:4b:4f:f3:f0:07:2c:b8:f7:52:
e3:50:38:7f:2e:ae:ea:1a:4e:42:1a:f0:4f:84:21:
e1:f6:0e:aa:96:bb:f4:58:2d:52:ef:cf:45:04:d3:
d0:92:39:bf:f6:e7:34:95:be:4b:24:df:46:27:8d:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EA:9B:BE:54:A2:58:AD:2E:BD:7B:A0:E8:CF:96:29:26:7A:FF:C7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u-qbvlSiWK0uvXug6M-WKSZ6_8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.54.0/24
163.5.56.0/24
163.5.59.0/24
163.5.112.0/24
163.5.114.0/24
163.5.121.0/24
163.5.125.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.200.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.238.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a5:23:6e:af:3f:ee:aa:ab:24:e5:8e:fa:ef:2f:4b:81:a4:
fc:85:7f:98:0b:de:6d:85:27:f5:e7:fc:a3:d2:8b:a5:48:2e:
37:ce:28:02:0f:22:aa:01:41:54:7d:70:e2:04:4a:24:ef:20:
78:c9:6d:e8:ad:fa:b4:f0:ff:87:d3:13:05:a7:f8:58:f6:b7:
68:34:a1:06:0a:46:27:a4:97:d7:d5:a2:de:a4:ce:ae:22:6e:
c4:98:b1:35:69:e1:a1:a4:86:15:fc:32:53:99:f7:1d:41:ad:
3a:d6:b9:ba:21:1f:c7:b2:7c:e3:ab:32:41:ae:e2:95:30:68:
3a:1b:5c:fd:0d:45:77:ad:30:42:13:3b:a7:c6:2f:0f:01:ba:
4a:2e:a4:0a:76:3e:c5:e8:e6:dc:a0:06:30:78:ad:ec:ee:77:
8a:31:74:bb:62:90:e6:50:b4:82:31:57:d3:19:9b:2c:c8:cb:
4a:2b:99:2c:bc:91:21:e6:5a:63:db:37:31:be:54:b6:52:29:
44:58:01:19:6b:01:cd:9f:e7:f0:c9:0e:de:e1:29:5c:f8:67:
59:72:ee:50:ba:df:5f:0e:ed:4d:13:4c:03:5a:9e:0f:17:7e:
65:f0:b8:6c:5b:e3:7c:63:4e:ff:4f:07:e1:8f:c0:8f:2e:d0:
f0:54:28:dc
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAaDNakAW2jTFkbHXRxalxLruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwOTIzMDgzODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmVhOWJiZTU0YTI1OGFkMmViZDdiYTBlOGNmOTYyOTI2N2FmZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4SU9mWxdkOPmyA2FdpcfLAdqHfi
uZph//shMm83Xpyr3OkABT3YlbYm1uC3RkZJjM17rHD44RF8Keh/4MYLyrGnlKRu
2LzONLdNOjDVInydSAnxYG6EeG9XbD9ISv2gtjpr6c64Qy2Ku9+xeRgXpQK7wLZt
H5RwONYuz1Ld+BA0fopXaHtVLaa/ZQZNXajQK7uTL6w93Dl57w9mMonCA48Qucoj
f2ZieWcLRDCRVUbxfVz2hGBkMEuaJaC4lyZwQpimL6UtVMpLT/PwByy491LjUDh/
Lq7qGk5CGvBPhCHh9g6qlrv0WC1S789FBNPQkjm/9uc0lb5LJN9GJ42PgQIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFLvqm75UolitLr17oOjPlikmev/HMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvdS1xYnZsU2lXSzB1dlh1ZzZNLVdLU1o2XzhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBACj
BRwDBACjBTYDBACjBTgDBACjBTsDBACjBXADBACjBXIDBACjBXkDBACjBX0DBACj
BYEDBACjBYsDBACjBY8DBACjBZIDBACjBaADBACjBacDBACjBbIDBACjBcQDBACj
BcgDBACjBdgDBACjBdoDBACjBeADBACjBeQDBACjBekDBACjBe4DBACjBfEwDQYJ
KoZIhvcNAQELBQADggEBAGylI26vP+6qqyTljvrvL0uBpPyFf5gL3m2FJ/Xn/KPS
i6VILjfOKAIPIqoBQVR9cOIESiTvIHjJbeit+rTw/4fTEwWn+Fj2t2g0oQYKRiek
l9fVot6kzq4ibsSYsTVp4aGkhhX8MlOZ9x1BrTrWubohH8eyfOOrMkGu4pUwaDob
XP0NRXetMEITO6fGLw8BukoupAp2PsXo5tygBjB4rezud4oxdLtikOZQtIIxV9MZ
myzIy0ormSy8kSHmWmPbNzG+VLZSKURYARlrAc2f5/DJDt7hKVz4Z1ly7lC6318O
7U0TTANang8XfmXwuGxb43xjTv9PB+GPwI8u0PBUKNw=
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:06 2026 by rpki-client