Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ORxu1pyf77VM45fFDqu6Dan0RZM.roa
File: ORxu1pyf77VM45fFDqu6Dan0RZM.roa (raw, json)
Hash identifier: i2y986L9uISwMQXpknRslR95wnuvL4DMiE1ky4lXJtM=
Subject key identifier: 39:1C:6E:D6:9C:9F:EF:B5:4C:E3:97:C5:0E:AB:BA:0D:A9:F4:45:93
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F26E40178E5D8F26BC4D21691A3A1FE05
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ORxu1pyf77VM45fFDqu6Dan0RZM.roa
Signing time: Fri 03 Jul 2026 07:31:44 +0000
ROA not before: Fri 03 Jul 2026 07:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:e4:01:78:e5:d8:f2:6b:c4:d2:16:91:a3:a1:fe:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 07:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391c6ed69c9fefb54ce397c50eabba0da9f44593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:d0:20:07:3a:39:d6:8c:b5:91:1d:32:a9:
11:4a:68:6b:ec:50:47:55:ce:90:61:28:51:99:68:
95:32:fe:4f:21:cc:62:6e:97:5a:a2:47:86:13:0a:
3a:36:ef:f8:16:e1:de:ef:97:32:f4:fb:61:2c:dd:
06:22:7f:77:aa:32:94:01:9c:28:b0:9f:ba:9a:b0:
66:0f:b1:8d:81:c3:c7:40:ef:c4:07:2d:eb:97:ec:
4a:fb:20:50:db:7b:06:c5:b0:0a:95:1d:42:40:7d:
43:84:2d:28:9b:b1:fc:23:15:1f:da:06:d4:7b:8d:
bf:79:f7:d0:1f:3d:1e:5c:73:3f:87:e3:1d:31:e8:
20:92:48:bd:4d:f4:6d:d4:ec:08:5d:58:39:3e:21:
8a:6e:7b:07:ae:8e:1c:f1:3c:69:b0:d6:70:3c:51:
f4:19:a0:49:c6:31:80:1c:93:3d:37:6e:8e:f1:b5:
7a:b8:fe:44:32:a9:9e:14:9f:13:01:fe:a0:9b:23:
84:79:69:5f:33:49:36:2b:5e:09:1c:50:27:94:b5:
61:91:5a:0d:ef:7a:7c:3b:81:10:1b:5c:2d:fd:ab:
8b:67:f5:67:cd:35:0c:64:f1:78:f9:dc:56:e2:bc:
a7:df:cb:0a:f6:94:47:cc:56:8b:a4:d4:f6:8f:28:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:6E:D6:9C:9F:EF:B5:4C:E3:97:C5:0E:AB:BA:0D:A9:F4:45:93
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ORxu1pyf77VM45fFDqu6Dan0RZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.60.0/24
163.5.88.0/24
163.5.93.0/24
163.5.100.0/24
163.5.108.0/24
163.5.116.0/23
163.5.130.0/24
163.5.174.0/24
163.5.189.0/24
163.5.225.0/24
163.5.228.0/24
163.5.240.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d6:b2:3e:3b:01:12:1e:c2:7c:cf:5e:b8:23:56:70:43:20:
c5:27:92:ba:e9:c4:f5:0b:2f:93:85:e3:80:e2:bb:5c:2b:8d:
ee:98:6a:e2:67:fb:32:7f:84:20:5e:83:f0:52:a4:48:07:73:
c0:c4:1c:c1:d3:5e:14:7a:13:65:2b:77:b4:e1:fd:dd:83:95:
f8:fd:d3:51:d5:3e:3b:cd:d5:a2:63:c0:84:b5:b2:1e:9d:73:
46:48:7e:ea:a6:df:81:6f:0e:ab:dd:49:a0:d4:aa:40:1f:24:
b1:35:bc:63:cd:ad:e1:84:77:e9:58:9a:41:c4:05:04:f4:82:
ca:20:1a:65:73:f7:30:3b:55:74:d1:c9:43:e7:9c:2e:ea:07:
25:b5:31:ca:9a:35:c3:d6:94:e4:74:cf:2b:a1:c7:90:ef:53:
47:28:6e:17:6d:7a:c2:aa:6f:b0:7b:4c:da:83:19:2c:8f:9c:
0c:ab:49:09:bb:d2:28:33:40:6d:77:ff:44:3a:5a:72:7b:95:
09:42:9a:63:52:25:33:3e:03:e7:89:2e:22:86:39:71:0d:cc:
eb:6b:3b:2f:3a:03:e6:f0:5b:68:18:58:c9:6a:9c:3f:1e:1c:
e6:ad:a3:6d:8f:6b:bc:ab:45:51:d3:17:0d:ce:16:c3:82:a5:
c3:8a:3b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 12:25:30 2026 by rpki-client