Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wYE0RlvINBdJKfKRMo1q3dT1O0U.roa
File: wYE0RlvINBdJKfKRMo1q3dT1O0U.roa (raw, json)
Hash identifier: fj+8IFdDF7BT1Mp9mKZeN++GMKxA2egYG3uXk4m/Ljg=
Subject key identifier: C1:81:34:46:5B:C8:34:17:49:29:F2:91:32:8D:6A:DD:D4:F5:3B:45
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DEDDA2521D77109FA32409925E2D87C36
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wYE0RlvINBdJKfKRMo1q3dT1O0U.roa
Signing time: Sun 03 May 2026 12:39:49 +0000
ROA not before: Sun 03 May 2026 12:39:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.50.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:da:25:21:d7:71:09:fa:32:40:99:25:e2:d8:7c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 3 12:39:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c18134465bc834174929f291328d6addd4f53b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:85:65:1e:f9:ce:1b:9e:3f:4e:9e:9a:3d:
43:14:13:d4:50:36:03:d6:d7:9f:66:0f:b3:25:d1:
8a:a9:1b:69:d2:d1:1f:f3:c4:0d:8b:bd:7e:73:47:
7f:85:a6:27:dc:7c:f4:6f:3a:20:20:99:88:64:dd:
cd:94:32:83:05:e0:0a:84:01:f0:8c:3a:ed:20:2b:
a8:7e:0e:48:68:32:c7:f5:0f:73:7e:0a:38:52:ff:
28:44:46:13:0b:0a:ce:97:67:8e:e3:17:15:4b:b5:
1e:04:c0:04:bc:88:1e:4f:ab:e4:07:b9:54:7c:66:
10:ec:46:13:4e:d1:bf:bc:5e:15:cc:39:fd:2f:49:
ba:22:37:ea:92:66:36:b3:b7:54:35:4e:e4:82:ed:
5a:95:87:ca:5a:22:32:82:39:0f:7f:ec:78:67:14:
10:db:49:98:de:00:68:75:eb:dd:86:d4:aa:b5:7f:
d0:6f:46:0d:ac:8c:0f:92:c6:81:73:3d:2a:c6:bf:
f7:16:12:42:23:3f:46:0a:49:9f:34:cf:6f:14:79:
fa:86:e5:2b:3b:56:1f:d1:f5:2e:4d:8b:f0:67:b2:
9f:fd:c7:8e:5a:f7:98:ef:cf:d3:1a:73:99:13:1e:
55:89:9f:37:36:be:d0:50:a1:f0:7f:bd:90:12:6d:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:34:46:5B:C8:34:17:49:29:F2:91:32:8D:6A:DD:D4:F5:3B:45
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wYE0RlvINBdJKfKRMo1q3dT1O0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.50.0/24
163.5.62.0/24
163.5.131.0/24
163.5.149.0/24
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2b:dc:15:a3:7a:51:9f:9c:e3:b8:6a:d9:1d:1d:f0:24:68:
f0:3e:d5:88:74:8a:80:7e:c0:10:bc:f9:78:a4:cf:33:ec:6d:
8e:17:0c:25:c2:03:e8:b5:4a:21:3b:6a:83:f5:a3:ed:7f:ca:
63:57:11:39:b9:b3:52:05:c5:1e:ea:c8:d8:9c:60:cd:56:8b:
df:43:7b:1e:19:82:ec:ed:3b:6b:4a:c3:4e:bf:49:ad:d7:08:
7f:e2:dd:77:4f:cf:44:c5:fe:28:c8:c2:62:1b:54:05:13:1a:
8f:f8:3b:a9:c5:8e:65:ce:b9:48:a7:b9:53:92:ef:6f:2b:0e:
f9:85:ed:04:cf:87:08:4c:2b:f9:fa:ea:b4:cb:8d:0c:d0:a5:
2f:8b:9b:6e:fe:7d:22:96:99:53:4b:a8:9d:09:42:3c:50:19:
9c:4f:22:1a:ce:93:2f:3e:8c:cd:a5:8f:96:ca:58:9a:be:6d:
19:ba:52:42:bd:8a:02:db:a3:ac:be:d2:3f:06:36:bc:87:ed:
44:53:41:1d:55:b6:6a:5f:10:43:5e:34:a4:f7:40:29:ca:3a:
27:c4:9c:45:54:21:bd:42:ef:e6:a8:51:25:24:ef:32:0a:8a:
f1:75:11:19:1a:f2:90:40:aa:1a:4a:5e:0a:80:6f:3b:13:ae:
63:05:a1:c2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ3t2iUh13EJ+jJAmSXi2Hw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNTAzMTIzOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTgxMzQ0NjViYzgzNDE3NDkyOWYyOTEzMjhkNmFkZGQ0ZjUzYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNqFZR75zhueP06emj1DFBPUUDYD
1tefZg+zJdGKqRtp0tEf88QNi71+c0d/haYn3Hz0bzogIJmIZN3NlDKDBeAKhAHw
jDrtICuofg5IaDLH9Q9zfgo4Uv8oREYTCwrOl2eO4xcVS7UeBMAEvIgeT6vkB7lU
fGYQ7EYTTtG/vF4VzDn9L0m6IjfqkmY2s7dUNU7kgu1alYfKWiIygjkPf+x4ZxQQ
20mY3gBodevdhtSqtX/Qb0YNrIwPksaBcz0qxr/3FhJCIz9GCkmfNM9vFHn6huUr
O1Yf0fUuTYvwZ7Kf/ceOWveY78/TGnOZEx5ViZ83Nr7QUKHwf72QEm3uywIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMGBNEZbyDQXSSnykTKNat3U9TtFMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvd1lFMFJsdklOQmRKS2ZLUk1vMXEzZFQxTzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowUyAwQA
owU+AwQAowWDAwQAowWVAwQAowW7MA0GCSqGSIb3DQEBCwUAA4IBAQCDK9wVo3pR
n5zjuGrZHR3wJGjwPtWIdIqAfsAQvPl4pM8z7G2OFwwlwgPotUohO2qD9aPtf8pj
VxE5ubNSBcUe6sjYnGDNVovfQ3seGYLs7TtrSsNOv0mt1wh/4t13T89Exf4oyMJi
G1QFExqP+DupxY5lzrlIp7lTku9vKw75he0Ez4cITCv5+uq0y40M0KUvi5tu/n0i
lplTS6idCUI8UBmcTyIazpMvPozNpY+Wyliavm0ZulJCvYoC26OsvtI/Bja8h+1E
U0EdVbZqXxBDXjSk90ApyjonxJxFVCG9Qu/mqFElJO8yCorxdREZGvKQQKoaSl4K
gG87E65jBaHC
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:56 2026 by rpki-client