Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7gvNMdpGRAkIicIPmQARZTYOha4.roa
File: 7gvNMdpGRAkIicIPmQARZTYOha4.roa (raw, json)
Hash identifier: W1iQ52fw6mtK7NtkV6KdTDBa0WKbbSsq8enJtYc17io=
Subject key identifier: EE:0B:CD:31:DA:46:44:09:08:89:C2:0F:99:00:11:65:36:0E:85:AE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A07B4518AF1B765F6F38B1B3677497B57B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7gvNMdpGRAkIicIPmQARZTYOha4.roa
Signing time: Mon 07 Sep 2026 09:48:40 +0000
ROA not before: Mon 07 Sep 2026 09:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.46.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:45:18:af:1b:76:5f:6f:38:b1:b3:67:74:97:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 7 09:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee0bcd31da4644090889c20f99001165360e85ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:b2:aa:2b:c9:ab:29:16:4c:3f:20:60:74:
c4:d8:8d:11:a4:0b:22:b5:0d:3c:52:58:61:ac:1f:
b1:50:ec:0f:02:5b:1a:4d:1a:ba:52:fc:27:be:61:
cf:49:ce:89:22:b4:a5:df:b1:16:d3:4e:d3:f8:72:
98:24:49:09:3d:78:2f:77:c8:25:39:42:25:e8:fc:
59:bd:4b:f5:ff:54:f4:fb:43:d5:da:9c:09:77:f8:
28:2a:ae:ef:0b:a4:57:02:e8:cc:e7:9d:10:37:e3:
92:48:11:11:73:2a:d3:10:dd:4c:13:94:4a:91:ee:
15:ad:49:de:91:d4:d1:cd:0d:66:42:9b:e2:7d:09:
5f:1d:0d:09:52:48:c3:e1:d0:f0:b7:53:06:9c:fe:
d1:a3:b6:eb:0b:bd:16:df:16:fa:0c:dc:91:61:43:
b2:08:88:24:81:4f:7a:f1:97:6f:f9:0b:55:2b:c0:
3e:ab:15:83:13:3b:56:c3:15:e9:98:c4:a1:0e:20:
52:96:51:72:78:38:79:63:1e:5c:af:41:b5:bf:fc:
8f:b7:1c:1e:8f:9f:22:48:c6:2c:7e:ba:0d:70:e6:
a4:9a:a4:ca:b7:0f:2f:ea:1c:23:9c:53:65:c6:0c:
cd:18:80:ba:ec:3e:ed:9a:c4:00:06:fe:cb:43:f1:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:CD:31:DA:46:44:09:08:89:C2:0F:99:00:11:65:36:0E:85:AE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7gvNMdpGRAkIicIPmQARZTYOha4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.46.0/24
163.5.52.0/24
163.5.82.0/24
163.5.101.0/24
163.5.227.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
32:93:9e:a2:58:b2:fe:dd:37:31:40:d0:c8:7f:8e:c6:d3:1b:
c1:71:6a:58:c6:bc:b7:83:f8:12:43:92:ba:4e:b2:f7:83:35:
09:a0:d2:38:77:25:f3:51:4f:47:e2:db:7b:65:b4:17:ae:df:
d2:63:d9:37:09:22:63:2e:06:f3:c5:ab:a7:cb:57:96:e0:cf:
b8:cb:ff:8d:a3:b5:18:0b:03:e9:8b:53:29:d4:50:7f:77:0a:
54:54:58:66:cf:33:97:90:b6:61:85:13:5b:8a:60:d9:91:00:
0a:9b:98:72:eb:9b:da:f1:e7:22:4f:41:bb:17:7e:b0:42:85:
36:6d:f1:63:63:b1:e7:3e:2d:61:1c:65:db:12:75:cb:a8:8b:
d8:42:a6:ca:6f:9c:7d:7d:44:36:48:22:d1:70:c8:c6:a1:0b:
0a:cb:f1:0b:58:fd:89:27:5d:32:37:e5:16:08:ba:8a:00:54:
27:12:8b:28:ed:7b:98:0c:ed:98:ec:5b:df:7d:13:48:1e:e4:
e9:48:4d:97:91:e1:6d:51:82:1b:0e:b7:c5:a0:6c:85:25:d6:
25:e6:46:a6:20:b4:a2:dd:0e:ba:20:25:1b:16:0f:2c:32:21:
61:97:95:a3:b9:08:17:46:f1:18:3f:c0:91:d3:bd:dc:81:02:
7e:28:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:43 2026 by rpki-client