Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z6u9a_VoqQmkDHWjl2vRjTdfCg0.roa
File: z6u9a_VoqQmkDHWjl2vRjTdfCg0.roa (raw, json)
Hash identifier: Q+iQfCRAFxArenNW+RKcLEoMEjGX/OOxnIn0U323f6k=
Subject key identifier: CF:AB:BD:6B:F5:68:A9:09:A4:0C:75:A3:97:6B:D1:8D:37:5F:0A:0D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D11F20551A4BC03521A4968F48CA5E763
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z6u9a_VoqQmkDHWjl2vRjTdfCg0.roa
Signing time: Sat 21 Mar 2026 19:49:26 +0000
ROA not before: Sat 21 Mar 2026 19:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:11:f2:05:51:a4:bc:03:52:1a:49:68:f4:8c:a5:e7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 21 19:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfabbd6bf568a909a40c75a3976bd18d375f0a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:d1:c1:36:d1:f0:94:46:78:26:05:0a:94:
28:0d:c5:ce:c5:15:81:25:a0:3c:f6:6b:3d:3c:e3:
64:2a:f7:23:d7:df:43:7c:a1:98:da:78:54:27:56:
dd:93:36:54:d6:75:cc:8a:81:8b:89:9d:dd:7d:3c:
30:08:f7:22:d8:5f:e0:c3:da:b4:57:86:f5:6a:2c:
df:d3:4e:3e:7e:46:94:f7:43:d6:1b:2c:7a:f1:e8:
5f:31:1d:8b:0f:0c:18:af:d0:4c:54:90:5e:36:b3:
67:d5:db:fa:36:3c:bc:fa:47:2f:5a:c8:9a:62:56:
51:f6:c2:a0:5d:36:b7:b8:b3:0c:a4:1a:e8:09:f6:
d8:6d:0e:ec:08:00:06:e2:65:f4:05:7a:78:f3:20:
04:be:8c:fb:29:aa:5f:60:d0:25:e0:cf:d2:1c:0f:
a8:78:17:f0:80:a7:34:09:07:eb:8c:fe:1a:99:43:
de:b0:92:6b:74:42:58:44:b8:ae:60:89:65:6d:4f:
5b:17:b2:5f:17:6e:37:b8:13:e0:87:1d:41:9e:9a:
ed:ce:0c:d5:a0:6a:4f:09:8f:65:4c:e9:e2:79:08:
88:19:65:cb:41:78:a9:57:8d:31:f4:d7:98:23:4b:
4b:f9:66:bd:e3:90:8e:a0:fb:fc:31:00:6c:7d:45:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:BD:6B:F5:68:A9:09:A4:0C:75:A3:97:6B:D1:8D:37:5F:0A:0D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z6u9a_VoqQmkDHWjl2vRjTdfCg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e9:48:15:c4:9c:f4:9f:01:53:1e:48:d4:a5:a6:fa:a6:59:
0a:21:85:1c:6f:8f:13:12:b1:49:6f:c7:0f:1c:62:c0:34:71:
94:ce:89:f6:c8:1a:7d:dd:fb:65:cc:b2:4c:f7:f5:04:87:4d:
bb:99:e4:c1:03:d9:88:da:1f:a4:06:0a:fc:c7:2c:15:c7:e1:
8e:0e:77:7e:9c:e1:d4:31:c1:d4:63:ab:8b:5d:49:3a:49:9f:
48:ed:94:1a:45:ac:15:b5:f1:18:de:08:e6:a9:95:f3:30:34:
24:d6:e6:f4:da:fe:63:4a:01:a3:b4:89:a0:26:ca:10:42:f7:
89:d7:8f:8c:ad:e6:27:31:f0:e6:14:54:bc:ff:da:c4:bb:21:
f7:36:db:8a:49:fd:db:41:87:4d:40:f6:d6:c9:54:d3:86:d1:
21:ae:74:b4:5a:e5:ce:a8:e8:05:de:26:10:d5:6a:ae:b6:6b:
b0:e9:f5:50:3a:1a:c8:69:86:eb:e8:79:10:ce:bf:7a:7e:60:
d7:5e:9a:ee:69:33:51:c7:83:6d:81:2d:e7:80:29:21:ff:58:
4c:ca:8c:b6:16:6a:04:e7:62:21:ec:9e:3d:24:c1:4a:09:2d:
30:e9:8d:b0:7d:19:78:2f:e6:6b:a5:3e:91:8e:3b:19:b1:52:
1b:00:16:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0R8gVRpLwDUhpJaPSMpedjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMzIxMTk0OTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmFiYmQ2YmY1NjhhOTA5YTQwYzc1YTM5NzZiZDE4ZDM3NWYwYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnbRwTbR8JRGeCYFCpQoDcXOxRWB
JaA89ms9PONkKvcj199DfKGY2nhUJ1bdkzZU1nXMioGLiZ3dfTwwCPci2F/gw9q0
V4b1aizf004+fkaU90PWGyx68ehfMR2LDwwYr9BMVJBeNrNn1dv6Njy8+kcvWsia
YlZR9sKgXTa3uLMMpBroCfbYbQ7sCAAG4mX0BXp48yAEvoz7KapfYNAl4M/SHA+o
eBfwgKc0CQfrjP4amUPesJJrdEJYRLiuYIllbU9bF7JfF243uBPghx1BnprtzgzV
oGpPCY9lTOnieQiIGWXLQXipV40x9NeYI0tL+Wa945COoPv8MQBsfUWQZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+rvWv1aKkJpAx1o5dr0Y03XwoNMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvejZ1OWFfVm9xUW1rREhXamwydlJqVGRmQ2cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW0MA0G
CSqGSIb3DQEBCwUAA4IBAQB86UgVxJz0nwFTHkjUpab6plkKIYUcb48TErFJb8cP
HGLANHGUzon2yBp93ftlzLJM9/UEh027meTBA9mI2h+kBgr8xywVx+GODnd+nOHU
McHUY6uLXUk6SZ9I7ZQaRawVtfEY3gjmqZXzMDQk1ub02v5jSgGjtImgJsoQQveJ
14+MreYnMfDmFFS8/9rEuyH3NtuKSf3bQYdNQPbWyVTThtEhrnS0WuXOqOgF3iYQ
1Wqutmuw6fVQOhrIaYbr6HkQzr96fmDXXpruaTNRx4NtgS3ngCkh/1hMyoy2FmoE
52Ih7J49JMFKCS0w6Y2wfRl4L+ZrpT6RjjsZsVIbABbM
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:17 2026 by rpki-client