Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IhoidXNNvGnDnwUM84b5Tz9fcWo.roa
File: IhoidXNNvGnDnwUM84b5Tz9fcWo.roa (raw, json)
Hash identifier: ysVLuTS8pBD9h0XYsKPx7uAxrFJqiv0En6x5DZx4eCg=
Subject key identifier: 22:1A:22:75:73:4D:BC:69:C3:9F:05:0C:F3:86:F9:4F:3F:5F:71:6A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FD18EFA6B5B43163056E3C8978EB9022A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IhoidXNNvGnDnwUM84b5Tz9fcWo.roa
Signing time: Wed 05 Aug 2026 10:53:56 +0000
ROA not before: Wed 05 Aug 2026 10:53:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.62.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 21:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:8e:fa:6b:5b:43:16:30:56:e3:c8:97:8e:b9:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 10:53:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=221a2275734dbc69c39f050cf386f94f3f5f716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:4b:33:b7:92:29:bf:f3:97:25:b5:8a:7a:
fc:d4:cb:a9:44:65:16:fb:81:64:b2:66:ca:c7:a6:
3b:9f:98:40:35:04:8f:b6:37:64:f4:34:1b:ba:84:
37:5e:0b:bf:56:8b:f4:9f:41:84:13:84:f8:49:e0:
16:43:34:f7:58:d3:60:db:72:d3:34:b9:57:b7:c7:
31:65:c1:bc:e3:fe:e7:93:bb:40:8d:b0:a3:d1:53:
d2:1c:7d:29:4e:28:8b:e2:15:3e:8d:75:e5:7b:9e:
77:90:f2:1b:5b:7f:55:11:1d:52:a0:fe:4b:f1:14:
6f:2c:ef:cc:1b:3b:43:71:85:12:10:af:d8:f3:3e:
18:58:96:d1:5a:16:ca:c3:5b:e3:72:49:7b:98:4a:
b0:05:26:f2:bb:ac:cc:63:c7:dc:20:3d:52:8b:a5:
24:c3:ae:c7:4d:b9:98:9e:c7:e5:b3:69:0a:4c:ef:
12:68:d5:f3:8a:9d:f3:37:9f:12:5d:99:10:ff:4c:
fb:3b:f7:65:52:58:f2:f5:c0:6c:bb:ce:de:c9:1a:
1d:b3:54:f1:04:f7:7a:9d:be:33:3d:19:6f:51:80:
c0:87:bb:a5:42:56:bb:22:bf:3e:98:0e:2d:0d:67:
ac:1d:a9:2a:c5:dd:98:5d:9f:6a:74:14:79:2c:c3:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1A:22:75:73:4D:BC:69:C3:9F:05:0C:F3:86:F9:4F:3F:5F:71:6A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IhoidXNNvGnDnwUM84b5Tz9fcWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.62.0/24
163.5.131.0-163.5.132.255
163.5.149.0/24
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
82:af:bf:71:2e:92:5e:5b:b4:fd:7d:9f:c6:27:31:89:19:7c:
d3:e7:9e:22:c7:98:25:3e:b4:bc:f8:f8:d8:78:62:d1:49:ab:
22:25:e5:be:98:e8:fd:c9:33:f4:26:e4:15:b3:0b:38:11:05:
9e:09:62:76:fb:ff:96:bf:ec:c2:8f:ad:5e:64:fc:3b:92:f3:
60:08:9c:be:43:4b:02:fd:3a:f9:bf:e9:c0:5f:4a:aa:99:92:
ea:c2:45:21:c3:0c:11:84:a7:3f:91:c2:ea:ee:df:3f:9b:51:
d1:a1:9c:5b:e7:a9:06:17:8c:35:2b:7c:88:30:9d:47:85:b1:
e5:ad:ed:75:97:ef:e0:ed:9a:07:05:b0:d1:61:63:f6:92:d1:
bc:07:b8:86:5d:6c:ef:64:24:cc:4b:0f:fe:2a:3c:0b:88:9d:
1f:c7:ca:da:1a:34:5d:cc:0b:97:e1:43:eb:09:0c:e6:97:6f:
6e:02:6b:9e:f2:9e:76:1d:29:b0:48:41:83:b3:26:80:92:04:
61:28:99:bb:04:aa:43:5b:94:95:77:5b:6c:f1:a4:a4:7e:54:
c3:66:5d:85:8c:71:17:49:d0:66:92:50:2c:86:73:78:a1:6f:
1c:8c:fa:69:f6:a3:0c:10:95:e5:56:43:4e:78:f0:bb:6d:5a:
68:a5:1d:ce
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ/RjvprW0MWMFbjyJeOuQIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwODA1MTA1MzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjFhMjI3NTczNGRiYzY5YzM5ZjA1MGNmMzg2Zjk0ZjNmNWY3MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoRLM7eSKb/zlyW1inr81MupRGUW
+4FksmbKx6Y7n5hANQSPtjdk9DQbuoQ3Xgu/Vov0n0GEE4T4SeAWQzT3WNNg23LT
NLlXt8cxZcG84/7nk7tAjbCj0VPSHH0pTiiL4hU+jXXle553kPIbW39VER1SoP5L
8RRvLO/MGztDcYUSEK/Y8z4YWJbRWhbKw1vjckl7mEqwBSbyu6zMY8fcID1Si6Uk
w67HTbmYnsfls2kKTO8SaNXzip3zN58SXZkQ/0z7O/dlUljy9cBsu87eyRods1Tx
BPd6nb4zPRlvUYDAh7ulQla7Ir8+mA4tDWesHakqxd2YXZ9qdBR5LMP9MQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCIaInVzTbxpw58FDPOG+U8/X3FqMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvSWhvaWRYTk52R25EbndVTTg0YjVUejlmY1dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAowU+MAwD
BACjBYMDBACjBYQDBACjBZUDBACjBbswDQYJKoZIhvcNAQELBQADggEBAIKvv3Eu
kl5btP19n8YnMYkZfNPnniLHmCU+tLz4+Nh4YtFJqyIl5b6Y6P3JM/Qm5BWzCzgR
BZ4JYnb7/5a/7MKPrV5k/DuS82AInL5DSwL9Ovm/6cBfSqqZkurCRSHDDBGEpz+R
wuru3z+bUdGhnFvnqQYXjDUrfIgwnUeFseWt7XWX7+DtmgcFsNFhY/aS0bwHuIZd
bO9kJMxLD/4qPAuInR/HytoaNF3MC5fhQ+sJDOaXb24Ca57ynnYdKbBIQYOzJoCS
BGEombsEqkNblJV3W2zxpKR+VMNmXYWMcRdJ0GaSUCyGc3ihbxyM+mn2owwQleVW
Q0548LttWmilHc4=
-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:32 2026 by rpki-client