Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-VgGzfgYSd0Lmv7WkvcNEjiiMg.roa
File: 3-VgGzfgYSd0Lmv7WkvcNEjiiMg.roa (raw, json)
Hash identifier: 6Qb6TzG+P5rchg/r8lgBOa1e1ecFj9tx2IryhTQ3FiI=
Subject key identifier: DF:E5:60:1B:37:E0:61:27:74:2E:6B:FB:5A:4B:DC:34:48:E2:88:C8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F2E4A8A1889BCB30F746C58B9A1AA8ACC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-VgGzfgYSd0Lmv7WkvcNEjiiMg.roa
Signing time: Sat 04 Jul 2026 18:01:04 +0000
ROA not before: Sat 04 Jul 2026 18:01:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.62.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:4a:8a:18:89:bc:b3:0f:74:6c:58:b9:a1:aa:8a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 4 18:01:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfe5601b37e06127742e6bfb5a4bdc3448e288c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:09:1c:15:ea:03:ea:34:ff:07:9c:91:b4:f2:
d5:4e:d6:e2:67:63:cc:ef:5a:5c:92:67:85:ac:ce:
1f:fd:e8:a4:02:b8:2e:8e:fd:2a:6e:55:06:93:a0:
d6:e6:7e:1d:64:7e:0d:7b:b2:f1:e7:83:24:7b:21:
63:c7:53:4c:0b:a0:37:7d:4a:c6:58:95:fd:dc:e6:
06:e7:1d:31:a3:64:a0:11:5c:88:b2:dd:ff:42:b6:
05:2f:28:58:2e:0d:64:74:38:79:0c:06:58:ef:ed:
bf:6d:d1:2c:66:cf:e7:92:1f:6e:d5:da:aa:e9:86:
08:37:b6:57:81:7d:d7:d6:ea:99:d9:97:08:b8:92:
1c:3e:7e:a3:fc:37:32:7f:1e:c1:a7:03:a5:fe:aa:
8b:f2:6f:24:3e:cf:a6:06:d1:4b:5b:6c:55:b9:5b:
aa:c3:c5:db:ec:54:4f:76:75:01:2a:0f:5c:0d:89:
3b:60:4a:34:6c:3e:82:0d:c8:79:b3:1a:98:53:82:
eb:0f:1e:5f:7b:51:40:31:e2:e5:cd:90:ef:35:84:
2c:77:f3:c2:ee:17:8d:51:5a:9d:41:ed:dc:85:d2:
f9:13:4f:04:9e:6f:91:8b:9c:e2:42:ed:6f:42:97:
a4:81:24:54:9a:df:54:95:f9:63:cc:d1:3d:7b:6e:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:60:1B:37:E0:61:27:74:2E:6B:FB:5A:4B:DC:34:48:E2:88:C8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-VgGzfgYSd0Lmv7WkvcNEjiiMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.62.0/24
163.5.71.0/24
163.5.131.0-163.5.132.255
163.5.149.0/24
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5d:5a:44:39:92:23:cb:25:bb:9b:d1:fc:85:e0:12:c2:65:
e6:f5:1e:96:49:58:b5:ae:4e:97:dc:66:21:c2:0b:ad:a2:6f:
b7:b0:8c:84:31:1c:9e:37:9f:ef:dd:ee:5b:95:ec:4c:3f:90:
0b:61:90:6b:a4:ed:25:0a:31:dd:41:01:db:0c:fe:ff:2a:d1:
eb:b8:3d:82:9b:91:6b:bb:96:07:b6:0e:25:44:5f:f7:34:08:
09:b6:9a:e6:58:80:c8:16:38:21:79:39:5d:e4:01:7f:5b:a4:
50:26:30:6c:cc:87:a1:45:30:01:91:56:5d:40:98:a6:42:b3:
9f:12:79:7d:ed:ce:a4:01:f9:f7:d9:42:8a:8d:a0:f0:3d:f4:
97:f9:bc:67:a8:cd:5c:8d:f4:56:72:20:b3:c3:84:c4:37:94:
06:97:b3:6d:c5:dc:6d:a9:12:c3:2f:53:da:b6:b9:63:e4:93:
ef:ee:4b:33:b0:3f:dc:e3:45:8c:a0:33:d9:71:b6:75:3e:47:
30:bb:f9:5c:4c:68:6c:eb:04:ee:e4:92:71:15:57:c1:75:79:
ac:32:ce:55:9f:72:ee:14:68:97:aa:ba:79:51:28:2a:4e:49:
1c:8d:aa:cd:a6:34:fb:b4:de:35:3d:d4:fb:26:c9:80:8d:8e:
84:76:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client