Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BBMsKmes0khdscsJ8umjavoshqg.roa
File: BBMsKmes0khdscsJ8umjavoshqg.roa (raw, json)
Hash identifier: ob3eSh+TFfs4cUQbOT7hzXdR4J823hCfsV1U7odfElc=
Subject key identifier: 04:13:2C:2A:67:AC:D2:48:5D:B1:CB:09:F2:E9:A3:6A:FA:2C:86:A8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A07D5386BFD1EDDD46236CE22AF282A7E8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BBMsKmes0khdscsJ8umjavoshqg.roa
Signing time: Mon 07 Sep 2026 19:23:41 +0000
ROA not before: Mon 07 Sep 2026 19:23:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:53:86:bf:d1:ed:dd:46:23:6c:e2:2a:f2:82:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 7 19:23:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04132c2a67acd2485db1cb09f2e9a36afa2c86a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:e2:ac:53:4f:12:15:3a:cf:6f:4b:c1:7c:
b5:b7:05:8c:ce:51:cd:92:bf:02:0d:29:19:05:30:
9a:f4:a5:cf:b2:c1:6d:3a:29:d2:bc:b3:b5:2f:05:
c1:7d:00:46:d0:cb:23:45:d7:d5:20:ee:f8:e5:c6:
e7:dd:81:76:e6:45:4c:d3:8c:30:33:71:d1:75:6c:
ec:a8:78:82:98:77:f8:ad:fd:aa:67:6e:09:97:9f:
99:9c:6b:90:77:55:67:de:dc:ca:14:97:f8:c0:56:
87:bd:8c:fc:bd:06:b6:55:89:42:0e:60:8b:f7:95:
d8:cb:48:44:fe:5f:8d:92:a3:79:e5:ec:cb:47:3c:
1a:84:7c:de:86:e7:68:38:56:ba:b3:08:e1:d8:ec:
db:66:59:18:55:8e:e9:d8:34:60:9b:ae:97:e7:c5:
b4:08:63:2e:c9:48:c4:c6:98:91:60:58:51:d4:19:
ac:23:e8:9c:1a:1b:5f:bf:1e:00:a4:56:a9:1d:50:
a1:6e:d7:1e:32:4f:90:86:57:5f:00:82:2a:81:d7:
4f:32:ce:8d:f5:eb:42:ef:0f:79:d8:93:f8:41:90:
3e:2a:02:cc:e4:5e:29:ac:f6:00:de:b1:ff:3d:f6:
e3:9e:8f:1a:58:3d:9f:b6:77:81:08:39:b3:3f:73:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:2C:2A:67:AC:D2:48:5D:B1:CB:09:F2:E9:A3:6A:FA:2C:86:A8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BBMsKmes0khdscsJ8umjavoshqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.97.0/24
163.5.99.0/24
163.5.130.0/24
163.5.161.0/24
163.5.190.0/24
163.5.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:8d:59:57:8b:73:80:45:02:c9:59:d2:d6:1d:66:6e:3f:a6:
77:25:33:5f:f9:0b:e7:ef:46:b5:8a:51:be:41:8a:cf:da:c1:
e9:26:57:27:4f:cc:44:d2:96:03:f0:84:42:19:06:fc:d5:dd:
47:a0:34:41:de:54:e3:f7:92:15:67:7a:f1:7f:5b:b8:f0:3e:
94:7d:7b:30:a3:ed:22:19:5d:c3:45:27:1e:8c:85:ef:14:7e:
ff:56:79:ca:86:1b:a3:55:93:c9:23:b7:46:83:37:29:52:08:
0c:0e:c2:43:cc:cb:39:b5:a3:cd:6d:cb:30:a9:c1:ec:36:fb:
35:d6:b2:3c:f3:e5:de:6f:fe:87:b5:82:74:3f:c5:19:da:19:
8c:81:b8:85:bb:fb:ce:57:56:64:cc:99:0b:8a:ce:51:79:b3:
e1:35:17:0a:f4:bc:3e:5c:ee:67:c6:e5:09:8a:3c:f7:1f:84:
e5:b1:c6:9a:02:98:63:99:e8:2b:db:04:37:5d:ac:03:84:f0:
d1:99:3e:5f:bc:8f:42:7b:38:d2:28:4f:db:57:e0:8b:77:3c:
76:b5:2c:be:53:e6:5e:b2:f7:31:11:6f:28:25:30:b3:40:c2:
3c:38:eb:9b:bb:1e:82:be:9e:7e:8a:61:d4:64:1c:a7:0a:52:
a3:96:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:10:05 2026 by rpki-client