Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BeE4s7H8IIyupNPtmL4-kiWzqAg.roa
File: BeE4s7H8IIyupNPtmL4-kiWzqAg.roa (raw, json)
Hash identifier: bN+OdPvfjzmU2ga+aQzjBU/uxbEcb0EA5wxB8cTirWs=
Subject key identifier: 05:E1:38:B3:B1:FC:20:8C:AE:A4:D3:ED:98:BE:3E:92:25:B3:A8:08
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F26E400708399278C2B337969A8D32CF8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BeE4s7H8IIyupNPtmL4-kiWzqAg.roa
Signing time: Fri 03 Jul 2026 07:31:44 +0000
ROA not before: Fri 03 Jul 2026 07:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.88.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:e4:00:70:83:99:27:8c:2b:33:79:69:a8:d3:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 07:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05e138b3b1fc208caea4d3ed98be3e9225b3a808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:e1:e7:94:1d:fc:04:1b:02:ee:19:12:7f:
b0:6a:c1:10:97:93:5b:3c:80:6b:9f:8e:f6:d4:cd:
25:7c:53:f1:e4:01:86:be:99:c1:68:c7:80:79:b5:
2e:df:f4:7e:d3:68:aa:a9:cc:74:77:6d:38:dd:c2:
fc:29:ef:de:55:34:18:bb:c2:2f:5d:9d:34:de:b1:
eb:12:b6:13:61:c0:fc:8b:0f:e2:e2:04:a3:d1:51:
ca:71:4c:41:8c:4c:52:67:32:d9:9a:8a:9a:90:37:
74:36:b3:e1:7d:84:61:29:0e:61:4e:ae:46:3b:0d:
ff:9c:55:5e:87:8a:1b:3f:c5:cf:c7:c2:b0:88:09:
98:d6:89:29:b4:22:1b:c2:7e:d2:01:89:86:a4:a4:
8b:10:e4:01:be:0e:f3:c2:86:7e:55:fd:34:58:4b:
6e:dd:17:89:8e:0b:11:de:d9:6b:13:6b:34:c0:60:
6b:cb:8d:c5:31:6d:e9:6e:33:c7:2d:b8:59:c3:d5:
5f:f2:97:28:6a:b9:da:f2:49:22:71:a4:2b:94:06:
32:65:c9:9b:4a:20:c3:7e:b0:20:2f:a0:75:fe:e9:
43:86:3b:25:8b:a1:f1:7d:07:4c:ed:0f:62:fc:6f:
fe:6a:cf:23:1c:1b:2f:bd:20:19:f1:2e:72:56:13:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:38:B3:B1:FC:20:8C:AE:A4:D3:ED:98:BE:3E:92:25:B3:A8:08
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BeE4s7H8IIyupNPtmL4-kiWzqAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.88.0/24
163.5.100.0/24
163.5.117.0/24
163.5.130.0/24
163.5.154.0/24
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.240.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ec:a3:17:23:92:2f:34:50:25:cc:55:10:e0:5c:59:a5:45:
85:77:f9:cf:58:e2:a5:15:28:a9:a7:56:1f:2d:66:36:1d:33:
e2:7d:f3:3c:3d:72:32:f2:2b:3c:eb:a3:99:c3:ae:81:db:65:
f6:52:7e:12:3a:2e:b5:8a:32:ae:d3:86:11:88:53:30:91:b2:
d0:f3:8c:35:63:f4:6c:74:e0:62:a8:1c:3e:f3:61:97:48:53:
36:ea:c6:9d:5a:0b:35:79:1d:20:d1:b0:8f:23:ad:d7:ef:f8:
8f:b6:b7:1a:6f:44:42:da:2d:05:6a:55:34:ba:df:58:87:05:
7b:28:1f:6d:d5:4e:2c:cd:3b:8c:5c:62:47:5d:f3:5e:73:1f:
fb:d9:77:1c:6f:37:ca:2c:39:4d:26:bf:52:84:a5:11:73:51:
aa:55:da:45:36:60:56:d1:be:c9:eb:c1:69:00:d7:6e:ef:2e:
be:64:03:55:cd:07:37:f3:f8:01:e5:ca:1d:e5:e9:5e:55:ca:
c6:3b:73:4f:35:ea:93:70:36:8e:54:a0:95:78:84:c1:e3:e8:
a8:ba:ea:05:e3:18:69:2e:c9:3a:3b:f2:90:ed:3d:67:b6:b5:
ac:a1:cc:b2:83:4b:72:ee:bb:dc:65:a7:2a:94:3f:73:14:a6:
be:5b:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client