Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JVsDMdIvTFdZI8bzIer9RT8viKA.roa
File: JVsDMdIvTFdZI8bzIer9RT8viKA.roa (raw, json)
Hash identifier: 06QK7QsD7Pewol8aLRgfChkcK0InD18djOq3Cxp/dHM=
Subject key identifier: 25:5B:03:31:D2:2F:4C:57:59:23:C6:F3:21:EA:FD:45:3F:2F:88:A0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E89C40CEFF83F055B29D3A317B7CB92F0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JVsDMdIvTFdZI8bzIer9RT8viKA.roa
Signing time: Tue 02 Jun 2026 19:16:27 +0000
ROA not before: Tue 02 Jun 2026 19:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:c4:0c:ef:f8:3f:05:5b:29:d3:a3:17:b7:cb:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 2 19:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=255b0331d22f4c575923c6f321eafd453f2f88a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:34:2b:fa:d6:73:10:bd:12:fb:30:3b:5c:
24:6a:31:a6:b0:7a:2c:c2:36:9f:07:f1:73:a2:9a:
c1:b7:6f:8c:c8:bc:b0:e3:d4:32:d4:8c:52:18:b9:
f0:30:3d:f0:e2:01:d8:e0:50:93:76:f3:c8:2f:f2:
3c:b0:b0:aa:71:69:a5:cc:9b:ad:4a:3f:82:2e:05:
3c:7d:ca:e6:80:0f:c0:1d:72:49:be:92:35:fc:6e:
54:9e:03:7c:f5:77:1f:b3:f1:2f:d9:31:e9:56:7a:
a8:62:4e:ce:88:dd:b9:28:3c:15:ae:1f:a3:bc:86:
79:f7:2d:0e:5f:11:47:a0:c3:2e:78:46:dd:17:03:
35:d4:45:86:01:ed:ee:ff:c5:a5:6f:f6:50:3f:a0:
6c:55:2a:51:19:a6:19:2c:38:c2:3c:f9:61:cb:83:
bc:d6:89:2c:90:d4:c3:c8:fc:a4:9e:e7:23:6d:20:
46:a2:5e:3f:c2:19:9a:ea:e6:68:36:cd:01:ae:f4:
a5:0d:20:7d:23:f4:2b:5f:23:55:e0:de:2c:a0:68:
e4:55:68:2c:c0:84:25:7a:2a:57:65:67:7c:8e:ca:
8b:4d:1f:00:a1:1e:9c:9f:05:aa:64:3a:a4:0f:33:
ab:2e:13:3d:37:e5:53:ed:0f:9c:37:71:c4:3f:0c:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5B:03:31:D2:2F:4C:57:59:23:C6:F3:21:EA:FD:45:3F:2F:88:A0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JVsDMdIvTFdZI8bzIer9RT8viKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.153.0/24
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
71:81:a3:9b:97:c5:13:f9:02:02:38:4a:4b:97:fb:75:69:9f:
b3:b0:4b:e4:1f:8c:13:e6:35:f6:5e:7b:f8:7d:58:e9:30:c4:
7e:b4:44:6a:9f:39:68:d9:fc:44:4e:11:54:31:d2:c1:a2:33:
b2:8e:58:33:47:a9:22:c8:ab:6c:03:17:b8:fd:ae:73:e6:3e:
01:db:73:03:12:2b:8c:bd:da:41:c0:b6:48:24:e1:c9:9f:0b:
ba:e9:d3:7d:38:0b:4f:56:53:75:a0:14:60:b5:75:9d:85:87:
e6:d9:e5:92:0c:ba:ba:f5:77:ae:14:c4:98:ed:87:f7:a0:7a:
65:39:93:e7:4b:f8:93:34:e3:11:98:e6:3b:d4:ee:81:51:89:
a0:3c:79:a6:92:7c:83:dd:ff:52:35:af:4f:d6:6d:3f:98:c7:
05:f6:46:7e:ea:ef:56:95:f4:aa:7e:fd:33:20:36:70:76:52:
53:52:37:3f:9a:01:76:17:a6:cf:56:4f:5c:6a:61:d0:e5:4f:
4d:4f:9c:4f:da:58:8f:64:6d:d6:59:cc:7b:f4:80:af:2d:a4:
ca:90:b2:20:e0:9a:a5:9b:af:bc:5d:05:01:96:f4:e4:b6:f4:
7b:a5:45:2b:6f:87:0d:3c:ef:2d:c7:60:39:76:b9:ee:ea:47:
80:a0:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:30 2026 by rpki-client