Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mV2c4WYI7x7psO1G8-ft47eSF_Y.roa
File: mV2c4WYI7x7psO1G8-ft47eSF_Y.roa (raw, json)
Hash identifier: dC+Dc67YO+egctnfTRoxPDD+F3r8cBYc2H49OgzwtBE=
Subject key identifier: 99:5D:9C:E1:66:08:EF:1E:E9:B0:ED:46:F3:E7:ED:E3:B7:92:17:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0197E91A5E9D981251C7D940013FAB3DEEC9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mV2c4WYI7x7psO1G8-ft47eSF_Y.roa
Signing time: Tue 08 Jul 2025 08:15:08 +0000
ROA not before: Tue 08 Jul 2025 08:15:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:1a:5e:9d:98:12:51:c7:d9:40:01:3f:ab:3d:ee:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 8 08:15:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=995d9ce16608ef1ee9b0ed46f3e7ede3b79217f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:a1:3b:f8:ee:af:e9:d4:34:b2:22:95:66:
db:ab:83:42:b0:03:56:cf:3a:3d:72:bc:95:21:af:
4e:8f:b4:a0:a5:9e:2d:2c:0e:1f:df:ef:4e:82:0c:
8b:8b:56:3b:38:b7:73:01:0c:79:53:3d:ef:57:f0:
23:1a:80:da:74:4a:ca:d3:00:f6:7a:6f:75:7b:0e:
29:88:f8:2c:ee:67:6c:1f:61:b3:2e:9e:9b:78:be:
26:91:37:e3:90:57:90:2a:ba:7f:2a:65:1e:90:85:
11:88:fd:db:81:36:3e:71:8a:03:d5:17:8c:a0:ac:
33:43:5e:2d:40:61:e5:d6:27:64:9b:ef:fc:6c:20:
00:70:4f:fa:12:ec:76:32:80:f7:1b:27:75:7d:6d:
c2:05:c8:9a:44:01:e5:03:8f:39:04:f3:ad:56:1f:
a3:3e:8e:dc:29:bf:cb:af:af:ff:7c:45:4a:4c:e4:
e3:c3:da:41:d7:d2:0e:cd:b5:90:3b:98:38:13:ca:
e1:63:1e:ec:b7:bc:33:eb:d9:09:1b:37:01:a6:ff:
d7:ad:10:68:7a:e8:2d:91:81:9f:7f:11:fa:39:46:
dc:ce:2d:3b:45:8f:80:8e:72:fc:34:04:44:d6:13:
58:b1:50:a9:17:b4:09:c5:89:7f:ba:f0:c7:eb:04:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5D:9C:E1:66:08:EF:1E:E9:B0:ED:46:F3:E7:ED:E3:B7:92:17:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mV2c4WYI7x7psO1G8-ft47eSF_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.118.0/23
163.5.153.0-163.5.154.255
163.5.177.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f9:85:84:ed:c9:d2:4c:9f:6e:be:47:d7:79:e6:f5:cd:8d:
0e:db:9f:b1:df:a8:bd:f3:2a:cc:56:46:88:9c:82:73:bd:c2:
25:e3:a2:0c:bd:5d:1f:61:74:06:1b:ad:e8:3b:95:8a:c3:5a:
b2:cf:5b:05:54:6a:5c:bf:b1:5d:0e:64:59:83:30:3d:08:a7:
3f:29:85:7f:e2:91:7d:96:c4:82:a3:92:47:ad:5a:36:18:39:
5c:8b:3e:e8:f1:e2:d7:ba:7f:fb:a3:8d:b3:d9:49:59:6d:45:
57:c4:13:a7:54:67:96:f2:28:84:fa:e5:44:c9:d4:99:66:2c:
ac:68:69:97:19:3a:da:04:23:5c:63:c8:94:0d:98:02:b4:e8:
60:30:10:c1:9e:24:34:ae:cb:13:ca:5f:7b:23:de:65:b5:20:
80:f4:c5:7d:11:f6:09:99:e1:cd:7c:cc:0e:9b:ff:44:0c:d9:
7b:7e:2e:89:ff:40:e6:82:73:41:50:ea:16:63:68:c4:cd:61:
5c:74:04:92:40:32:e5:9a:de:75:36:e3:cd:58:c8:f4:73:a4:
d7:35:80:4f:6b:45:59:3b:5a:a3:f6:98:fe:f8:05:63:50:12:
85:b6:2c:12:32:8b:a7:a0:43:5c:4c:26:42:48:e4:90:9d:5c:
64:f7:a5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:47:50 2025 by rpki-client