Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iZg8wB3XhZdWtOdMf1IBbfMr7yE.roa
File: iZg8wB3XhZdWtOdMf1IBbfMr7yE.roa (raw, json)
Hash identifier: FEPsDP3HQpKv/EeJxmb/yI/z1aVrHAJcwXrgGoPyNmc=
Subject key identifier: 89:98:3C:C0:1D:D7:85:97:56:B4:E7:4C:7F:52:01:6D:F3:2B:EF:21
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D66F8ACA59C82D2602AAE2513378CA472
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iZg8wB3XhZdWtOdMf1IBbfMr7yE.roa
Signing time: Tue 07 Apr 2026 08:04:26 +0000
ROA not before: Tue 07 Apr 2026 08:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 08:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:f8:ac:a5:9c:82:d2:60:2a:ae:25:13:37:8c:a4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 7 08:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89983cc01dd7859756b4e74c7f52016df32bef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:6e:a2:d9:5c:e4:03:74:de:20:a1:83:9b:
66:11:a2:33:3a:81:bf:5f:cd:e4:df:f9:e1:4a:99:
74:06:a7:82:e8:a4:15:c4:b9:4c:e2:a0:37:d4:c8:
0e:96:61:68:2a:90:d0:f4:37:e6:1c:4e:c8:b1:2c:
d2:d7:31:6b:6d:74:92:6f:1b:d9:9e:73:c7:d8:76:
65:54:33:dc:86:15:77:84:2e:17:02:24:fe:36:16:
8b:af:a3:69:83:33:4b:d8:af:10:6b:db:f9:3b:71:
aa:84:a3:11:4a:f4:94:b4:c3:dd:34:d2:40:c8:d8:
ad:25:4f:41:44:a5:4c:f8:c7:64:71:9f:77:4f:f1:
5a:10:1b:69:26:2a:3f:97:eb:d5:f8:ee:d9:64:26:
c1:b4:55:97:ab:3e:06:a5:4c:4d:22:cc:1e:10:0f:
e2:01:d2:36:d9:47:7c:1a:58:a5:19:12:cb:df:2f:
e7:08:f3:bb:62:2c:bb:dd:87:ba:59:74:c1:b7:76:
24:dc:ed:48:ac:93:11:a0:73:4a:59:e7:40:d7:c3:
84:40:e6:81:b1:b5:47:44:2f:d1:67:54:28:98:b7:
02:8e:99:e7:83:7e:17:e3:c9:5b:99:b9:41:20:5b:
a2:fc:33:63:c5:dc:62:d9:9d:a8:bd:f6:a1:d9:7f:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:3C:C0:1D:D7:85:97:56:B4:E7:4C:7F:52:01:6D:F3:2B:EF:21
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iZg8wB3XhZdWtOdMf1IBbfMr7yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.179.0/24
163.5.192.0/24
163.5.195.0/24
Signature Algorithm: sha256WithRSAEncryption
24:96:32:67:c8:ac:82:7a:3a:9b:5a:12:41:a9:59:12:6e:c5:
3c:98:88:9b:5d:c4:7f:0e:41:32:49:40:ec:ac:15:2a:a2:21:
b6:2f:7e:dc:b7:68:93:47:bd:aa:19:df:fc:68:91:1e:69:c8:
85:4f:f6:c0:7f:cf:af:64:0a:99:f1:ce:a4:36:24:ca:46:33:
c7:b7:bc:c7:ae:a9:fe:a2:40:a8:da:6b:3b:49:ed:0e:3a:6d:
6b:22:ea:00:25:e8:89:5e:64:99:b1:7d:67:e9:6f:33:17:65:
f3:5c:22:0b:3b:8d:1f:94:68:70:0b:70:96:b1:24:86:36:f8:
56:5b:db:59:3d:8c:f8:a8:fd:2c:75:10:2b:db:e5:00:c6:c2:
1b:f6:13:44:e7:76:a3:4e:22:8a:82:9b:fd:31:0f:98:a8:61:
7c:fe:73:e5:ee:34:5c:69:26:7e:3a:c9:4b:97:e3:df:07:57:
eb:11:98:c2:5c:77:a0:12:94:a0:41:e0:33:ea:82:13:3d:19:
79:38:0c:42:8e:83:c5:bf:17:22:da:c5:d0:e8:3a:59:8b:51:
03:00:f8:09:b5:bd:be:a3:c4:22:1e:51:97:a8:e2:61:c5:98:
c6:a9:3e:79:f1:f6:32:22:e0:d7:db:dd:91:a3:48:93:a3:2f:
57:d4:68:f1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ1m+KylnILSYCquJRM3jKRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNDA3MDgwNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTk4M2NjMDFkZDc4NTk3NTZiNGU3NGM3ZjUyMDE2ZGYzMmJlZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvINuotlc5AN03iChg5tmEaIzOoG/
X83k3/nhSpl0BqeC6KQVxLlM4qA31MgOlmFoKpDQ9DfmHE7IsSzS1zFrbXSSbxvZ
nnPH2HZlVDPchhV3hC4XAiT+NhaLr6NpgzNL2K8Qa9v5O3GqhKMRSvSUtMPdNNJA
yNitJU9BRKVM+MdkcZ93T/FaEBtpJio/l+vV+O7ZZCbBtFWXqz4GpUxNIsweEA/i
AdI22Ud8GlilGRLL3y/nCPO7Yiy73Ye6WXTBt3Yk3O1IrJMRoHNKWedA18OEQOaB
sbVHRC/RZ1QomLcCjpnng34X48lbmblBIFui/DNjxdxi2Z2ovfah2X/P6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFImYPMAd14WXVrTnTH9SAW3zK+8hMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvaVpnOHdCM1hoWmRXdE9kTWYxSUJiZk1yN3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowWzAwQA
owXAAwQAowXDMA0GCSqGSIb3DQEBCwUAA4IBAQAkljJnyKyCejqbWhJBqVkSbsU8
mIibXcR/DkEySUDsrBUqoiG2L37ct2iTR72qGd/8aJEeaciFT/bAf8+vZAqZ8c6k
NiTKRjPHt7zHrqn+okCo2ms7Se0OOm1rIuoAJeiJXmSZsX1n6W8zF2XzXCILO40f
lGhwC3CWsSSGNvhWW9tZPYz4qP0sdRAr2+UAxsIb9hNE53ajTiKKgpv9MQ+YqGF8
/nPl7jRcaSZ+OslLl+PfB1frEZjCXHegEpSgQeAz6oITPRl5OAxCjoPFvxci2sXQ
6DpZi1EDAPgJtb2+o8QiHlGXqOJhxZjGqT558fYyIuDX292Ro0iToy9X1Gjx
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:48 2026 by rpki-client