Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z5pB_Ck-0vCZ_Oy79njdCUu9dyY.roa
File: Z5pB_Ck-0vCZ_Oy79njdCUu9dyY.roa (raw, json)
Hash identifier: TuliFNYQP05Jbk6KI1GqfEwWzclUz8vLbJaDcFhGcOQ=
Subject key identifier: 67:9A:41:FC:29:3E:D2:F0:99:FC:EC:BB:F6:78:DD:09:4B:BD:77:26
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0197AB1225DC6F9AA61973E8C358384B0854
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z5pB_Ck-0vCZ_Oy79njdCUu9dyY.roa
Signing time: Thu 26 Jun 2025 07:09:42 +0000
ROA not before: Thu 26 Jun 2025 07:09:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 163.5.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:12:25:dc:6f:9a:a6:19:73:e8:c3:58:38:4b:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 26 07:09:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=679a41fc293ed2f099fcecbbf678dd094bbd7726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:94:60:d0:81:ef:1a:83:af:1a:a0:98:be:
cb:93:16:26:da:66:ea:fe:4b:cd:e6:50:1f:ed:f9:
ed:48:e7:00:71:c1:2c:fc:9e:e8:95:f1:14:bd:e7:
1b:ab:93:d1:c1:5b:45:5c:b1:56:41:f4:80:ee:cf:
f1:b2:ff:8f:29:0c:37:7d:47:a0:5d:28:11:1c:4b:
28:fa:84:64:87:73:3c:3c:13:f4:3c:a4:21:76:87:
75:08:c0:fa:40:73:5e:c5:a7:49:60:38:be:98:d7:
90:f9:6d:bd:a9:b3:6e:23:cd:fc:60:5f:af:7b:6e:
2a:30:94:5e:92:b2:4f:05:cb:42:a2:cc:9e:48:7c:
03:f9:dd:c5:5a:36:50:da:c9:96:44:8b:c2:38:7d:
6b:e1:a8:97:8e:e5:3b:b0:49:7e:38:3e:38:f3:d6:
ac:63:14:78:f2:c9:22:15:96:92:c7:f8:45:10:d1:
4b:af:91:88:5d:17:a7:ed:ca:08:c8:f9:ee:9c:d6:
cb:77:ac:f3:b8:0f:92:51:c0:56:81:10:88:e5:f1:
da:0c:ba:3c:64:93:da:7b:cf:22:bd:b7:21:d7:6a:
1a:d6:a3:6e:84:6a:27:c7:9d:dd:7a:38:f9:0d:0a:
5f:6e:de:8c:d3:ce:2c:fa:fd:c2:41:40:62:63:f9:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9A:41:FC:29:3E:D2:F0:99:FC:EC:BB:F6:78:DD:09:4B:BD:77:26
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z5pB_Ck-0vCZ_Oy79njdCUu9dyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
21:58:65:3a:be:a8:b8:bd:64:94:a5:79:15:61:4b:16:0c:9e:
6e:8e:5b:e1:ba:f2:a4:11:13:55:ef:71:41:b3:50:ec:56:8d:
b5:e3:a1:32:78:ac:1f:af:8a:c3:d7:10:ae:eb:c0:15:a0:b7:
63:db:06:76:9e:a9:67:08:40:ff:43:80:8b:79:8b:48:04:b1:
d5:ed:37:40:e7:22:1c:e9:8a:3b:a5:7c:af:20:e3:31:77:cd:
b1:63:b1:f0:88:12:66:86:cb:6e:4b:88:e0:22:a3:73:e0:b4:
54:e7:ef:7f:5a:88:8a:2a:62:1f:ba:9c:55:ff:80:5e:ed:ee:
dd:aa:8f:49:45:6c:39:db:dd:0e:1b:3f:30:1e:07:da:1a:02:
fe:01:ed:80:af:d8:17:e7:88:17:f5:c4:04:d2:10:29:6f:48:
0d:27:db:85:b4:47:70:ee:97:61:00:27:70:61:0c:4c:c7:12:
a7:49:e4:a0:90:3c:c9:a9:68:bd:ab:d8:ff:a2:80:23:bb:92:
04:cf:d2:01:27:4e:c8:06:9b:19:7b:d0:a4:6b:a7:ae:a3:1b:
28:2f:58:cb:47:86:77:b4:e1:77:35:28:07:83:68:d9:78:d4:
83:99:53:1d:c0:b4:87:2b:ef:63:6a:a7:e0:d0:7c:f8:4a:8a:
fd:f1:57:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZerEiXcb5qmGXPow1g4SwhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNjI2MDcwOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzlhNDFmYzI5M2VkMmYwOTlmY2VjYmJmNjc4ZGQwOTRiYmQ3NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0imUYNCB7xqDrxqgmL7LkxYm2mbq
/kvN5lAf7fntSOcAccEs/J7olfEUvecbq5PRwVtFXLFWQfSA7s/xsv+PKQw3fUeg
XSgRHEso+oRkh3M8PBP0PKQhdod1CMD6QHNexadJYDi+mNeQ+W29qbNuI838YF+v
e24qMJRekrJPBctCosyeSHwD+d3FWjZQ2smWRIvCOH1r4aiXjuU7sEl+OD4489as
YxR48skiFZaSx/hFENFLr5GIXRen7coIyPnunNbLd6zzuA+SUcBWgRCI5fHaDLo8
ZJPae88ivbch12oa1qNuhGonx53dejj5DQpfbt6M084s+v3CQUBiY/l2ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGeaQfwpPtLwmfzsu/Z43QlLvXcmMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvWjVwQl9Day0wdkNaX095NzluamRDVXU5ZHlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWdMA0G
CSqGSIb3DQEBCwUAA4IBAQAhWGU6vqi4vWSUpXkVYUsWDJ5ujlvhuvKkERNV73FB
s1DsVo2146EyeKwfr4rD1xCu68AVoLdj2wZ2nqlnCED/Q4CLeYtIBLHV7TdA5yIc
6Yo7pXyvIOMxd82xY7HwiBJmhstuS4jgIqNz4LRU5+9/WoiKKmIfupxV/4Be7e7d
qo9JRWw5290OGz8wHgfaGgL+Ae2Ar9gX54gX9cQE0hApb0gNJ9uFtEdw7pdhACdw
YQxMxxKnSeSgkDzJqWi9q9j/ooAju5IEz9IBJ07IBpsZe9Cka6euoxsoL1jLR4Z3
tOF3NSgHg2jZeNSDmVMdwLSHK+9jaqfg0Hz4Sor98Vfl
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:51:06 2025 by rpki-client