Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H1euoCE9ZVecpASvJns6Rwp0IOk.roa
File: H1euoCE9ZVecpASvJns6Rwp0IOk.roa (raw, json)
Hash identifier: lJcphOD/5K/i//TkRSjYmNjOCf0Tq7GkYcWWq7nyOqI=
Subject key identifier: 1F:57:AE:A0:21:3D:65:57:9C:A4:04:AF:26:7B:3A:47:0A:74:20:E9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0198E5E9DA8BC2F365475D1F785F8AF30FCD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H1euoCE9ZVecpASvJns6Rwp0IOk.roa
Signing time: Tue 26 Aug 2025 10:26:04 +0000
ROA not before: Tue 26 Aug 2025 10:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.66.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:e9:da:8b:c2:f3:65:47:5d:1f:78:5f:8a:f3:0f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 26 10:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f57aea0213d65579ca404af267b3a470a7420e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:fa:9c:83:a5:f9:8c:ac:4d:6a:1c:d8:49:
4f:73:d9:01:36:4d:b6:2e:4a:83:94:f5:ad:b9:66:
00:04:cf:94:f4:3b:05:3f:95:72:4f:94:cc:c3:d0:
c6:ff:67:b6:32:70:09:c1:c6:7c:f8:7b:87:06:ee:
ef:be:b1:b6:66:c6:f5:fc:d9:4e:01:d6:58:5b:50:
7c:46:78:a9:5b:b0:fb:82:ba:d9:e4:87:37:08:3f:
ae:7d:b8:af:5e:f1:98:f2:61:b9:49:69:04:02:72:
9a:41:d7:a1:89:4a:38:c5:6f:53:42:b4:6c:26:36:
92:f0:c5:fe:23:e9:d2:d5:e0:36:df:6f:00:58:da:
0e:49:07:3c:58:b3:69:51:83:ff:e3:49:be:14:b0:
ec:da:69:cd:2f:d7:34:ee:53:c5:3a:4e:4b:8d:11:
79:09:45:58:38:4e:bc:48:bf:51:9e:bc:6f:40:2a:
aa:e4:bc:d1:ab:ff:1b:6b:16:b5:0f:cf:51:33:4a:
46:8f:25:9a:db:2a:3c:20:15:aa:4a:62:9f:27:7b:
d8:1e:1b:bb:09:21:e5:35:c3:12:cb:38:8c:4c:36:
68:a7:3b:c2:17:38:74:88:72:c3:44:a9:19:00:10:
ff:c5:49:f6:cb:43:fe:b4:3d:8f:3c:57:67:a4:24:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:AE:A0:21:3D:65:57:9C:A4:04:AF:26:7B:3A:47:0A:74:20:E9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H1euoCE9ZVecpASvJns6Rwp0IOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.66.0/24
163.5.119.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a6:88:da:07:a8:84:a1:fd:6f:41:b0:e0:37:93:09:8a:31:
9e:34:5b:85:ba:85:e5:99:4a:62:ad:6f:3a:31:e3:3f:b3:e8:
a2:5f:5c:4f:d7:f1:35:2b:7a:80:e5:63:8d:7d:47:00:51:7a:
90:0d:9e:91:3a:ce:33:70:0c:7f:ff:d2:39:ad:d7:e1:e0:6b:
5b:22:b8:b5:a6:83:1f:07:1b:a4:97:7b:0e:ed:28:e8:e3:eb:
09:7a:24:26:c6:ad:1b:f7:f3:f5:52:f8:98:8a:72:df:54:16:
a2:67:81:a6:52:dc:58:45:f0:b6:51:62:47:21:ad:70:d8:5c:
90:d4:55:a6:cc:f0:51:9b:0b:01:a8:d8:bc:c1:d4:66:dd:5f:
14:89:51:76:3e:2e:ff:51:6f:67:1d:bc:5e:29:f4:15:32:b4:
f0:f8:f0:5c:5f:a2:40:06:14:fb:40:5b:38:ab:8b:97:7d:3b:
4b:c1:b9:47:33:bd:18:c9:39:c3:fa:0d:9d:a7:26:f3:4c:58:
9d:cf:06:4d:b2:c7:d6:f7:15:2f:03:78:ce:36:b6:ef:4b:3a:
eb:20:bb:e1:2f:6e:45:e9:6b:97:00:4e:83:47:53:98:85:cc:
41:2e:a5:c7:a0:a8:33:71:26:19:05:92:3e:27:68:51:43:be:
6c:4c:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:37:56 2025 by rpki-client