Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zvu16YV9TzF6Hr5fJI-0pK2rXx0.roa
File: Zvu16YV9TzF6Hr5fJI-0pK2rXx0.roa (raw, json)
Hash identifier: Ez6daJR5ZYmPzLssfmxypAKgzljkZLkCQLMdwFLZY38=
Subject key identifier: 66:FB:B5:E9:85:7D:4F:31:7A:1E:BE:5F:24:8F:B4:A4:AD:AB:5F:1D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F26DE81ED3979DDE99DF08A95639B5B99
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zvu16YV9TzF6Hr5fJI-0pK2rXx0.roa
Signing time: Fri 03 Jul 2026 07:25:44 +0000
ROA not before: Fri 03 Jul 2026 07:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 163.5.35.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:de:81:ed:39:79:dd:e9:9d:f0:8a:95:63:9b:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 07:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66fbb5e9857d4f317a1ebe5f248fb4a4adab5f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:88:58:74:1f:10:10:08:26:26:07:12:d4:
2c:fb:92:d6:55:2f:5c:05:87:ba:9b:2d:05:51:66:
54:11:d3:c8:8a:b2:65:22:9d:e8:c0:87:c1:cb:38:
ff:28:a7:b6:f0:c2:78:6a:b0:6f:3b:d5:3f:30:ed:
1c:7c:a5:da:64:38:54:ae:de:55:40:60:ab:25:80:
ab:e4:f5:59:cc:0d:8a:ca:4b:0e:03:57:c6:e8:01:
1b:ed:e3:ed:73:cd:e8:e5:f5:01:2e:1e:9e:41:b4:
55:ab:c9:c1:57:d7:f6:e9:cb:b4:2c:c8:17:15:d4:
65:0f:e0:9e:4b:ed:35:42:2d:ee:4e:de:ab:81:c6:
1e:29:1a:ae:45:75:10:d7:b5:e6:c5:54:98:49:b2:
57:c5:cb:db:0f:b6:8e:05:31:a0:55:ad:81:45:3b:
0f:6a:05:e8:bf:cf:60:22:ad:2b:f5:a5:c2:0d:a9:
69:78:84:29:38:23:d1:60:48:dc:a9:19:43:81:f4:
86:d3:32:33:a8:4e:a1:0b:0c:c0:66:c1:ba:e1:69:
6d:a7:54:66:c3:ad:92:67:f6:bc:e1:cf:4e:6e:16:
98:63:20:1c:74:c9:a3:2b:e2:c8:b1:75:59:b9:c6:
49:63:bf:72:73:df:12:34:2f:af:c9:8d:f4:51:f0:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:B5:E9:85:7D:4F:31:7A:1E:BE:5F:24:8F:B4:A4:AD:AB:5F:1D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zvu16YV9TzF6Hr5fJI-0pK2rXx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.44.0/24
163.5.110.0/24
163.5.126.0/24
163.5.179.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:97:77:5f:64:f8:72:57:38:a0:c2:57:98:09:0c:2d:82:87:
ca:26:e3:3f:c8:28:53:5d:f3:18:a4:96:b9:29:d4:af:bc:49:
ff:79:24:45:0f:60:33:a0:17:51:88:48:96:8c:3b:2b:30:82:
90:64:76:11:6a:aa:fc:4c:1a:36:c4:02:ba:ed:87:dc:27:c5:
68:aa:fc:24:28:e3:13:b8:86:1c:0b:9a:6d:0e:9d:67:b1:f2:
79:8d:df:7b:92:e7:1f:d4:90:19:0d:b3:d1:6c:09:6f:e2:68:
db:0e:a3:2c:fd:dc:a1:b7:a6:d9:25:54:6a:dc:89:cd:0d:57:
61:b7:0f:70:de:a9:8e:ce:58:d1:ac:4a:9f:2e:14:73:4d:c2:
fa:78:b7:5b:f3:84:b2:a5:fc:25:a3:a8:8c:d0:bc:95:2a:6b:
bd:17:5b:7d:b1:8e:26:0b:d2:4c:12:a5:bb:fd:4a:49:46:f7:
8d:24:07:2b:43:23:e1:01:ff:5f:26:f4:24:d5:55:7c:dc:0f:
9b:26:8e:ab:ae:f4:be:6a:91:6c:81:02:01:60:89:e2:4d:98:
18:51:c5:ff:a9:c9:6d:c2:a5:ed:03:45:89:92:28:3a:36:36:
ad:46:dd:11:ad:36:d0:d6:8e:fb:73:84:79:18:dd:5a:f0:60:
8b:f3:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:53 2026 by rpki-client