Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0X8DD5lF2yS0YzCSyt3ZnDuRoCE.roa
File: 0X8DD5lF2yS0YzCSyt3ZnDuRoCE.roa (raw, json)
Hash identifier: lbVOTQwKoZ1QwhqgDz5DwtBfGo+RzFtfsXQSuR8QUng=
Subject key identifier: D1:7F:03:0F:99:45:DB:24:B4:63:30:92:CA:DD:D9:9C:3B:91:A0:21
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A05BF9CD824F60332FB1F2912E9A419C3E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0X8DD5lF2yS0YzCSyt3ZnDuRoCE.roa
Signing time: Tue 01 Sep 2026 07:58:12 +0000
ROA not before: Tue 01 Sep 2026 07:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f9:cd:82:4f:60:33:2f:b1:f2:91:2e:9a:41:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 1 07:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d17f030f9945db24b4633092caddd99c3b91a021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:cb:e1:a2:dd:4c:5a:cb:b3:b0:a5:05:28:
a1:36:c2:a1:f2:1c:26:7e:5d:0e:4e:4d:5f:5f:95:
98:9e:11:b5:3b:08:00:0e:0a:86:55:9a:44:9d:f6:
0d:bb:d0:fa:91:96:35:e7:ca:35:bd:fc:95:8b:6e:
8e:94:f8:6d:d7:f4:c5:90:5c:94:37:96:92:e6:01:
1e:fe:1a:41:7d:5f:57:a1:f1:53:eb:1a:13:52:2b:
59:56:8a:88:d1:b6:b6:08:0a:65:ab:17:04:c2:5e:
df:84:6c:74:e4:99:40:2f:68:ad:c4:6c:f1:cb:56:
1c:13:a6:18:66:db:6e:98:a5:df:74:a1:f8:93:da:
08:14:38:ad:d7:d6:ec:20:bd:92:e3:39:6b:ee:39:
4d:59:03:63:09:89:81:3c:40:c1:05:c4:3b:8a:d7:
00:41:2b:dd:e4:b1:e0:64:34:8a:59:8c:b3:3c:0a:
05:4c:5d:f2:67:24:32:7a:c8:c5:5a:dd:90:9b:fe:
54:58:12:0f:ad:17:bd:9f:5f:ab:f1:55:41:e3:47:
96:ac:76:30:03:47:d6:41:d4:2d:0e:43:13:71:c0:
e5:b4:b3:1d:4b:79:f3:3b:d1:6a:98:29:8c:88:b9:
f0:5f:33:b7:b1:d9:eb:29:bb:4f:3f:65:45:8e:6c:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7F:03:0F:99:45:DB:24:B4:63:30:92:CA:DD:D9:9C:3B:91:A0:21
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0X8DD5lF2yS0YzCSyt3ZnDuRoCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.60.0/24
163.5.88.0/24
163.5.93.0/24
163.5.100.0/24
163.5.108.0/24
163.5.116.0/24
163.5.174.0/24
163.5.189.0/24
163.5.225.0/24
163.5.228.0/24
Signature Algorithm: sha256WithRSAEncryption
08:02:8e:f9:c5:f9:2d:3c:43:a2:39:ff:97:5a:2a:00:1c:7e:
0f:61:16:8e:2a:cf:44:43:06:55:4f:15:ef:50:33:01:5f:c8:
7c:32:11:bb:c1:44:15:9d:e7:f0:a3:1c:05:5d:1f:82:c4:4d:
4f:b9:11:93:f1:9f:bd:60:24:cc:47:cf:58:12:e3:61:32:17:
b8:17:30:05:4c:fb:d5:2f:4c:86:d9:5a:57:8a:59:87:1e:f1:
35:2e:bd:1e:82:e2:fb:c5:78:1a:09:52:5d:f1:39:ec:2d:38:
8f:fd:da:e2:64:9a:e3:6c:1c:8e:81:c0:05:ab:79:5e:95:70:
0b:ed:e4:f3:64:b6:85:b6:be:ea:5d:b7:22:26:10:c8:0a:8c:
69:33:7d:07:dd:bf:0d:8f:51:3f:74:93:1e:90:e7:95:b5:37:
13:72:21:e3:da:cb:eb:02:d3:d4:7e:6c:58:64:37:46:d4:fa:
94:1c:3a:84:44:75:c6:3d:40:fd:71:6d:c8:c2:14:82:64:5a:
57:75:17:7e:1d:24:08:8c:96:76:6a:0f:6e:93:15:f2:a6:b6:
2c:fa:00:91:1a:94:69:53:ae:72:3f:63:c7:81:48:6f:33:d6:
ac:ad:c0:bb:83:f8:bb:21:9f:19:78:bf:fc:9d:00:55:85:d2:
da:e6:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:47 2026 by rpki-client