Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jga4pEREPQ5QxtwzBJ5l715WLew.roa
File: Jga4pEREPQ5QxtwzBJ5l715WLew.roa (raw, json)
Hash identifier: BcnB2+IgalFD/tYf+LQpLAD7/zf+agqoCWB/chHNNJo=
Subject key identifier: 26:06:B8:A4:44:44:3D:0E:50:C6:DC:33:04:9E:65:EF:5E:56:2D:EC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FF50287F7E2BDEFEFF95B44E66D265066
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jga4pEREPQ5QxtwzBJ5l715WLew.roa
Signing time: Wed 12 Aug 2026 08:06:51 +0000
ROA not before: Wed 12 Aug 2026 08:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.59.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:02:87:f7:e2:bd:ef:ef:f9:5b:44:e6:6d:26:50:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 12 08:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2606b8a444443d0e50c6dc33049e65ef5e562dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:a9:e9:29:c2:b3:4c:af:ca:95:30:d2:32:
16:df:9c:c4:8e:34:d9:34:a7:df:a4:83:d9:0d:7a:
13:1f:ef:c9:ae:d7:ea:a2:78:9b:0e:bd:63:ea:4c:
38:44:fa:92:cb:54:d9:1a:0c:98:fb:35:26:87:f4:
03:b3:d7:53:7e:c7:ef:47:49:2e:58:e9:1f:75:24:
08:07:e1:48:b2:df:bf:b0:99:c5:d1:b8:db:01:41:
48:7e:7c:99:fb:95:b0:fc:88:47:3f:50:13:da:75:
af:06:fa:6d:01:0a:7a:ae:fb:23:2a:82:3c:98:56:
59:71:18:a0:e5:76:ca:88:42:37:a8:0d:46:4a:83:
84:f7:f6:8f:a4:3f:40:9d:6a:5d:60:ff:a8:6b:35:
93:48:92:9d:22:cb:6c:09:f4:c0:14:25:de:27:af:
bd:3f:ef:96:5a:9d:dc:09:73:86:68:31:30:3b:5e:
a3:e5:80:5f:40:74:d1:90:ee:1f:9e:3b:fd:2c:6e:
21:0d:a4:3b:7e:3b:0e:c0:68:a9:f6:2a:bd:0e:c3:
3d:0b:81:01:e3:ee:30:ae:fb:04:55:0a:1b:72:0e:
f2:fd:fd:99:e0:b1:6e:85:d1:9e:3e:b4:c6:ca:01:
75:2b:c9:75:7d:2a:76:09:9c:dd:1b:72:34:3a:66:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:B8:A4:44:44:3D:0E:50:C6:DC:33:04:9E:65:EF:5E:56:2D:EC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jga4pEREPQ5QxtwzBJ5l715WLew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
163.5.112.0/24
163.5.120.0/23
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ac:84:1f:45:1f:9a:04:39:84:dc:38:f5:92:1f:04:da:f4:
e3:a7:6d:ad:51:7f:d3:8a:aa:89:65:44:be:a8:85:ef:87:c3:
32:b5:64:63:f6:9e:1d:bb:06:d4:d1:06:83:09:96:7c:13:44:
cf:bc:11:2d:a2:e5:1d:43:48:45:be:5c:44:ef:45:7c:d2:e7:
c4:9f:dc:76:b2:1e:4a:6e:ec:82:91:6d:c8:7f:20:25:38:0b:
39:0b:6c:56:88:91:26:bf:90:af:77:91:b5:4a:62:22:a9:5e:
e5:de:7c:ef:40:02:f9:8e:8e:0f:d1:d8:26:08:59:9e:9e:f8:
b9:2d:59:58:7b:a7:08:1f:84:11:b7:8d:9e:84:38:c1:ba:4a:
c8:f4:ca:56:1c:1e:f1:28:6b:0f:9b:1b:e1:3d:99:46:5c:a3:
42:5b:78:00:db:e7:77:a4:2a:34:32:36:5a:ea:95:41:82:13:
73:ff:4b:7b:98:98:7f:35:76:74:c4:b5:aa:29:cd:94:fc:40:
23:37:02:80:98:cc:99:1e:76:27:05:07:57:7a:ad:b3:c0:a0:
d1:54:57:f5:73:5c:73:1d:c7:01:7f:21:11:11:ba:6b:c5:a6:
a7:dc:93:cf:c3:3c:22:85:37:14:63:0c:f6:57:e2:6a:75:66:
31:48:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:03 2026 by rpki-client