Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I_lwKVn0Ta0bEH6JuqNHjwPuFxw.roa
File: I_lwKVn0Ta0bEH6JuqNHjwPuFxw.roa (raw, json)
Hash identifier: 6q86D5pCSRvjgX9zdJo3b8XQREXD8S5vtGU6yRJw3k8=
Subject key identifier: 23:F9:70:29:59:F4:4D:AD:1B:10:7E:89:BA:A3:47:8F:03:EE:17:1C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019956F9805E2220F1BFFF609DD374648B95
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I_lwKVn0Ta0bEH6JuqNHjwPuFxw.roa
Signing time: Wed 17 Sep 2025 09:20:15 +0000
ROA not before: Wed 17 Sep 2025 09:20:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:f9:80:5e:22:20:f1:bf:ff:60:9d:d3:74:64:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 17 09:20:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23f9702959f44dad1b107e89baa3478f03ee171c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f9:82:d8:92:5c:50:82:61:d9:62:f7:7d:bb:
0f:41:36:4f:9e:d4:05:6d:57:fd:9c:d0:03:9a:8f:
de:63:fa:3c:ba:6c:ea:de:b5:3c:ed:ad:32:14:dd:
cd:91:d2:49:2d:f3:a9:fe:9a:c9:dc:d6:fd:6c:42:
05:5a:de:9a:a7:b0:e5:33:a3:fe:dd:de:cd:4b:c1:
b4:af:7d:00:e1:70:8a:32:0a:49:39:70:d2:01:0a:
aa:97:1b:14:fa:78:15:be:d2:f6:18:90:ce:30:8d:
4b:63:06:e4:48:f1:71:5b:42:1b:40:b8:ae:0e:47:
6f:74:67:76:94:f9:e1:76:73:b8:e6:97:57:34:06:
9f:ad:c0:a9:1b:ec:b1:28:df:00:8e:4c:99:d6:8f:
ba:d7:f5:0d:6f:5f:13:77:f5:cd:56:09:f9:c5:51:
81:de:8b:22:fc:d0:28:34:87:9d:b7:f5:14:19:38:
67:60:b0:c3:83:ef:8d:61:c5:42:69:02:c2:1e:f6:
65:4c:20:4e:09:3e:b9:5e:aa:02:2b:c4:1a:44:64:
4f:20:b8:44:d4:14:be:24:30:36:ef:2d:33:a9:46:
96:2e:f3:08:92:1b:55:58:33:f2:a8:f8:fd:54:43:
c1:2f:c5:84:26:f1:97:a1:3c:69:28:1f:21:65:a1:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:70:29:59:F4:4D:AD:1B:10:7E:89:BA:A3:47:8F:03:EE:17:1C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I_lwKVn0Ta0bEH6JuqNHjwPuFxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.38.0/24
163.5.58.0/23
163.5.104.0/24
163.5.112.0/24
163.5.121.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/23
163.5.182.0/24
163.5.189.0/24
163.5.200.0/23
163.5.203.0-163.5.205.255
163.5.209.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5a:69:13:d5:9c:05:92:dd:fe:fb:46:f3:7c:b9:1a:bb:c9:
72:13:a4:29:59:4f:ab:87:f6:48:27:bb:e4:c5:8b:75:a8:dc:
b9:fa:d0:b1:50:a8:32:fd:77:6c:ba:9b:42:ba:9e:99:83:4e:
b6:08:37:c7:82:fc:3d:ae:58:df:12:7f:91:9b:d7:a4:26:d2:
6d:80:2b:43:4d:4b:98:25:e9:fa:ee:b9:ad:d2:bb:b6:fd:9c:
79:f9:29:a1:09:3d:ac:79:9c:a6:3e:d2:86:24:fa:9a:18:34:
fd:79:0e:27:28:43:9c:c5:fb:9e:b2:6c:0e:4f:f1:af:83:f3:
c6:d9:27:fc:98:de:a0:89:a0:d4:37:3e:68:39:56:6a:f6:64:
37:ae:f3:e7:3d:7a:9c:d7:44:0f:10:4c:f6:81:9b:12:30:b9:
d4:f7:96:c7:73:20:bb:07:d1:e3:f1:81:9c:5c:3c:ab:c5:0e:
36:90:7a:36:6f:e7:00:1c:f8:47:e8:71:f9:30:30:df:47:65:
63:26:6d:7d:87:7c:d3:f6:e8:da:c1:f5:9d:66:1c:c2:f0:ba:
8d:21:5c:b3:d9:2d:e3:72:12:0e:a5:c4:72:35:e3:09:1c:e6:
dc:f2:a6:0e:9c:a4:70:5a:76:60:7e:02:00:be:21:d8:a1:1e:
2b:55:31:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 18 03:36:08 2025 by rpki-client