Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmPOaHyAHBYeXbK7OvDDLptOV4M.roa
File: KmPOaHyAHBYeXbK7OvDDLptOV4M.roa (raw, json)
Hash identifier: OW2+QyKqMtD50Cs0DmzF0tbMrAD7X5eBM0JpO72X24Q=
Subject key identifier: 2A:63:CE:68:7C:80:1C:16:1E:5D:B2:BB:3A:F0:C3:2E:9B:4E:57:83
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019EF937A8C56780255F1E041324B795A43A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmPOaHyAHBYeXbK7OvDDLptOV4M.roa
Signing time: Wed 24 Jun 2026 10:40:34 +0000
ROA not before: Wed 24 Jun 2026 10:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 163.5.8.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:37:a8:c5:67:80:25:5f:1e:04:13:24:b7:95:a4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 24 10:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a63ce687c801c161e5db2bb3af0c32e9b4e5783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:93:93:cc:25:e4:78:d1:cb:dc:44:bf:bd:03:
9d:39:9e:8b:2d:7e:2f:05:eb:87:b8:6b:09:3e:1e:
77:ce:71:84:d8:84:71:70:55:4d:8f:90:a5:d6:7d:
47:a0:e5:e2:e0:7e:7f:f7:c4:05:a0:77:f7:e6:92:
24:ba:e4:ca:09:40:94:4a:87:ac:08:92:00:63:0e:
9d:e1:c9:f0:de:64:6f:d4:2e:eb:23:de:36:49:15:
aa:cc:2e:ab:45:fc:7c:91:88:b7:f7:95:9b:a9:70:
09:13:83:c6:81:73:dd:1d:eb:8f:b8:57:dc:41:99:
25:ec:fd:d9:cb:8c:d4:bb:5b:b1:f3:10:0b:40:08:
c9:b2:0e:de:ab:59:e2:84:b1:68:2b:28:ac:d9:15:
15:a4:e5:01:de:a3:cf:42:aa:90:d4:ac:14:98:62:
dc:80:4c:42:08:ff:7f:f2:37:94:e3:77:38:8a:5d:
d4:3f:1e:74:c0:78:b5:f8:a4:a5:ef:bb:46:58:d0:
d8:6a:4e:4d:d0:98:e2:1f:5d:9f:be:d5:9b:72:6b:
3b:e2:a5:66:cd:0f:0e:2a:39:75:71:98:0e:2e:0c:
aa:c9:c0:7d:86:7f:cf:89:9b:19:ba:91:d7:7a:ef:
7f:e6:22:7d:4c:98:85:a6:04:f0:9b:0a:b7:c4:52:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:CE:68:7C:80:1C:16:1E:5D:B2:BB:3A:F0:C3:2E:9B:4E:57:83
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmPOaHyAHBYeXbK7OvDDLptOV4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.8.0/24
163.5.13.0/24
163.5.54.0/24
163.5.106.0/24
163.5.109.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:86:61:6e:c4:97:fd:2c:74:61:e4:29:02:87:94:fe:16:1d:
61:2c:da:d9:d4:fe:f8:ab:9c:a7:a5:91:15:4c:bb:3d:dd:a6:
bd:28:94:d7:93:a3:14:bb:74:b9:83:c6:fb:03:be:19:de:d3:
90:81:6e:9b:b5:7e:34:f6:4c:2c:89:ac:8f:af:92:b4:aa:e1:
4b:2b:ff:89:47:90:3d:4d:f7:86:ee:d5:81:8d:69:ea:39:41:
fc:0d:83:0b:ea:c6:8b:e0:e7:39:3a:d6:fa:f4:9a:77:0a:bc:
bd:4d:c7:d0:ec:3a:d3:f9:b8:78:53:9a:4b:a8:2d:a4:38:5a:
d5:08:5a:8c:cc:95:ea:7a:3e:a0:e0:a1:9b:00:56:78:98:33:
1d:b3:2b:72:04:b6:e6:52:f3:f0:b0:e0:fe:56:44:88:a4:05:
6b:28:72:6d:c8:2c:ed:3a:3a:cd:c6:4a:54:3a:be:df:c6:64:
41:89:46:e0:67:bd:3a:4b:f9:96:6b:ba:97:7d:94:98:d2:75:
be:65:32:a5:ba:a3:26:81:c4:59:b6:c8:fa:ee:f4:ee:85:47:
85:e1:ea:4e:8d:63:47:d3:2c:1d:f9:1c:7f:31:2e:ea:62:8a:
9c:d0:c0:45:c7:2c:30:aa:5e:30:76:62:12:39:2b:ed:2e:b0:
84:15:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:27 2026 by rpki-client