Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CxxUbacWg8-4ddTl68X5iYl0qBM.roa
File: CxxUbacWg8-4ddTl68X5iYl0qBM.roa (raw, json)
Hash identifier: dj8g5A7Jp+42/RyoEeoFXVN7EPYCRsb5FMCrALznFrE=
Subject key identifier: 0B:1C:54:6D:A7:16:83:CF:B8:75:D4:E5:EB:C5:F9:89:89:74:A8:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0EE7CEE64CAE6F125F4F1B9E001087C3C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CxxUbacWg8-4ddTl68X5iYl0qBM.roa
Signing time: Tue 29 Sep 2026 18:46:00 +0000
ROA not before: Tue 29 Sep 2026 18:46:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.46.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:7c:ee:64:ca:e6:f1:25:f4:f1:b9:e0:01:08:7c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 29 18:46:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b1c546da71683cfb875d4e5ebc5f9898974a813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:90:bb:f2:15:df:a1:ac:e4:dc:d7:c3:18:
fd:c6:a0:d7:27:68:3e:73:6f:8c:88:63:de:df:2c:
1e:99:cf:8c:da:d6:36:8b:b0:11:48:1d:f0:cf:1d:
ad:54:04:03:cd:99:11:7d:b0:09:55:fc:1b:02:2b:
80:e4:76:d3:57:6c:26:f7:3f:1d:be:94:2b:2c:8e:
3c:e3:32:e0:d5:b0:98:10:e9:d1:06:bb:85:23:dc:
15:11:ec:7b:ef:79:62:02:d4:5b:bb:de:40:36:c9:
07:b4:65:99:17:9c:0c:99:42:d8:b4:67:37:45:3f:
d2:22:84:54:35:00:9e:3b:ec:32:03:65:a9:6e:aa:
08:7e:62:f6:22:30:73:6b:c9:25:5a:4e:8f:b0:15:
0c:3e:de:75:89:3d:ba:ec:50:3a:b5:0a:f4:54:fe:
78:d1:dc:94:d6:fa:c0:57:22:bb:3c:70:f7:b9:69:
fc:57:c8:a2:4d:df:e7:44:50:17:ac:14:b8:3b:1c:
9d:da:2a:bb:e6:8b:1e:a9:f1:ab:99:d1:bc:61:7f:
77:a0:04:a1:a6:59:39:cd:1e:a1:d3:5a:a1:b5:a3:
f6:86:39:b6:7c:34:0a:bb:e4:52:8e:a8:44:df:4d:
f3:c5:03:d3:d9:e6:58:46:86:1b:17:68:af:ad:db:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1C:54:6D:A7:16:83:CF:B8:75:D4:E5:EB:C5:F9:89:89:74:A8:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CxxUbacWg8-4ddTl68X5iYl0qBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.46.0/24
163.5.52.0/24
163.5.82.0/24
163.5.101.0/24
163.5.119.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
1f:8e:75:35:e2:78:60:3b:6e:50:b6:54:b5:24:46:25:17:b9:
38:c1:9d:bc:0e:f6:58:e2:9d:ad:e3:5e:cc:67:9a:b1:86:00:
f7:e9:41:75:e3:e0:f4:f4:02:10:ed:7c:15:0c:8a:b6:76:7a:
8a:57:47:2d:8b:55:d5:c9:35:eb:1b:81:19:44:74:c6:da:7e:
c8:3d:bc:1f:90:77:fe:93:ca:1f:6e:78:62:a0:9f:e9:26:e6:
95:71:da:4a:f1:99:67:1d:21:ed:28:c0:74:5d:bc:16:e4:91:
fb:90:ed:6f:3d:73:23:0a:b4:f5:37:fb:88:c5:7a:00:51:15:
66:9d:13:bd:8e:a8:39:ca:7c:21:12:c5:82:3f:19:9c:d5:e4:
7a:f9:ec:4c:32:19:97:c2:e0:b2:7f:c7:51:92:37:cc:f0:bc:
c3:40:fd:89:1e:9d:74:e7:61:d3:12:ec:b1:93:38:24:d3:72:
83:c1:15:e8:cb:64:f6:27:53:02:54:50:ce:d5:a8:71:08:7a:
79:e3:0d:a0:b9:80:85:5b:1c:c5:ac:f4:13:e4:4f:9e:cc:ac:
e9:0c:e3:31:cd:11:7e:ee:1c:84:0e:19:34:5c:70:09:cb:78:
52:01:da:c0:50:6e:3e:91:80:77:4a:e8:25:db:49:97:f8:c7:
e9:86:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:44:00 2026 by rpki-client