Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SpU4A27vyOx9z-U5MKCnb_Dv0C8.roa
File: SpU4A27vyOx9z-U5MKCnb_Dv0C8.roa (raw, json)
Hash identifier: LqM8XRhfRvUOoJS/DN1QQ5kV/bjC7njgxTvekg1Oi2E=
Subject key identifier: 4A:95:38:03:6E:EF:C8:EC:7D:CF:E5:39:30:A0:A7:6F:F0:EF:D0:2F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019823DDA913FC86231159EE9CCD65059758
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SpU4A27vyOx9z-U5MKCnb_Dv0C8.roa
Signing time: Sat 19 Jul 2025 18:06:25 +0000
ROA not before: Sat 19 Jul 2025 18:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 163.5.123.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:23:dd:a9:13:fc:86:23:11:59:ee:9c:cd:65:05:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 19 18:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9538036eefc8ec7dcfe53930a0a76ff0efd02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:fa:03:08:b7:82:af:0c:2a:8b:5e:fb:ce:
bf:b1:82:32:f9:ec:0f:b5:ec:e2:3c:0d:76:9c:4a:
e5:2f:f8:54:85:92:62:65:64:c9:3f:45:be:5a:c8:
0d:82:b9:a2:3c:6e:bb:87:65:37:25:25:ab:ee:56:
91:c0:27:fc:71:27:13:5f:23:d7:d7:9e:00:ab:f7:
08:01:9b:70:c6:19:b9:1c:8b:1b:aa:db:96:60:fb:
aa:ba:42:d9:cc:af:5d:de:4b:d5:37:9e:a1:0a:e4:
ca:f9:a0:67:d4:a8:63:91:7e:a8:31:bc:da:70:70:
2f:9e:d3:2f:62:43:c5:84:3d:1e:3e:d1:39:1b:93:
76:4b:4a:0d:25:32:aa:59:aa:89:df:ac:3b:bf:f6:
8e:c5:a1:0c:61:0b:a5:34:ea:19:3b:18:59:97:d5:
c1:f1:0d:a0:d6:ca:1b:91:86:2a:b9:bc:81:f3:85:
ae:8d:67:c1:5b:92:07:05:d0:59:cf:38:bd:1b:f2:
10:b2:d8:5d:de:ac:0a:12:7a:7c:93:2a:94:0d:fe:
e0:59:ae:30:ea:c4:9e:fb:19:c0:cb:fa:45:ed:9d:
17:f4:af:87:e3:e1:5c:1a:db:44:32:4d:09:3d:d1:
c9:c9:b2:e5:b0:ac:21:5b:02:f1:4b:05:6c:1c:18:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:38:03:6E:EF:C8:EC:7D:CF:E5:39:30:A0:A7:6F:F0:EF:D0:2F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SpU4A27vyOx9z-U5MKCnb_Dv0C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.123.0/24
163.5.131.0/24
163.5.192.0/23
163.5.195.0/24
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
96:e6:0a:1e:6e:c9:f2:dc:5a:af:8c:ba:6a:d0:7c:83:74:24:
b2:f4:e1:8a:5b:bf:e3:b7:9c:6e:ad:0c:30:07:30:ae:ec:6b:
85:48:c8:c0:ad:97:83:f5:03:d0:9a:94:29:2b:d8:25:2b:05:
1e:09:c1:7d:36:08:3d:6a:e3:db:f1:cd:fe:a4:33:fb:8a:fa:
06:2c:f6:7e:9a:82:76:6d:ce:2c:83:20:d1:57:ef:3e:ab:3d:
f4:2a:fe:3b:43:b6:d3:73:81:2a:4d:f0:9f:68:7f:a0:a8:8c:
f9:f5:9e:de:17:57:cd:82:1b:4a:8c:83:7e:0c:b8:be:d9:01:
fc:d2:28:0e:06:e8:e5:63:4b:ad:c1:b4:ba:fe:8b:b2:5f:0f:
7f:64:fb:5a:d1:9d:4f:d4:69:45:42:3b:e2:6b:f5:bf:e1:f7:
5b:a0:42:bd:59:4e:5e:cc:df:74:fd:59:b1:1a:33:f1:74:84:
cb:8d:c2:f6:a0:0a:45:3c:1e:93:06:ba:ac:4a:5b:5e:19:a9:
fc:2a:33:11:88:a6:e8:4b:fe:6d:e6:e5:2a:cf:b3:c0:bd:bb:
8f:5d:18:5a:6c:88:50:3f:fe:4d:7b:f9:4a:a9:1f:c4:f5:aa:
26:ab:be:a6:88:fd:9f:1b:d2:6e:f2:13:40:29:e8:81:91:36:
dd:82:10:99
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZgj3akT/IYjEVnunM1lBZdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNzE5MTgwNjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTk1MzgwMzZlZWZjOGVjN2RjZmU1MzkzMGEwYTc2ZmYwZWZkMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Nr6Awi3gq8MKote+86/sYIy+ewP
teziPA12nErlL/hUhZJiZWTJP0W+WsgNgrmiPG67h2U3JSWr7laRwCf8cScTXyPX
154Aq/cIAZtwxhm5HIsbqtuWYPuqukLZzK9d3kvVN56hCuTK+aBn1KhjkX6oMbza
cHAvntMvYkPFhD0ePtE5G5N2S0oNJTKqWaqJ36w7v/aOxaEMYQulNOoZOxhZl9XB
8Q2g1sobkYYqubyB84WujWfBW5IHBdBZzzi9G/IQsthd3qwKEnp8kyqUDf7gWa4w
6sSe+xnAy/pF7Z0X9K+H4+FcGttEMk0JPdHJybLlsKwhWwLxSwVsHBi0FQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFEqVOANu78jsfc/lOTCgp2/w79AvMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvU3BVNEEyN3Z5T3g5ei1VNU1LQ25iX0R2MEM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAowV7AwQA
owWDAwQBowXAAwQAowXDMAwDBACjBdUDBACjBdYwDQYJKoZIhvcNAQELBQADggEB
AJbmCh5uyfLcWq+MumrQfIN0JLL04Ypbv+O3nG6tDDAHMK7sa4VIyMCtl4P1A9Ca
lCkr2CUrBR4JwX02CD1q49vxzf6kM/uK+gYs9n6agnZtziyDINFX7z6rPfQq/jtD
ttNzgSpN8J9of6CojPn1nt4XV82CG0qMg34MuL7ZAfzSKA4G6OVjS63BtLr+i7Jf
D39k+1rRnU/UaUVCO+Jr9b/h91ugQr1ZTl7M33T9WbEaM/F0hMuNwvagCkU8HpMG
uqxKW14ZqfwqMxGIpuhL/m3m5SrPs8C9u49dGFpsiFA//k17+UqpH8T1qiarvqaI
/Z8b0m7yE0Ap6IGRNt2CEJk=
-----END CERTIFICATE-----
Generated at Mon Jul 21 06:49:24 2025 by rpki-client