Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RqpHvEk8_T-q5aaU-tZiBCc-H4E.roa
File: RqpHvEk8_T-q5aaU-tZiBCc-H4E.roa (raw, json)
Hash identifier: uZgVqwjC8OTzJgtUE1VMsiqWRCAw6QwJ0sUQ8PmOpMc=
Subject key identifier: 46:AA:47:BC:49:3C:FD:3F:AA:E5:A6:94:FA:D6:62:04:27:3E:1F:81
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D9B94EB782760E537D35E0E02D29D8342
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RqpHvEk8_T-q5aaU-tZiBCc-H4E.roa
Signing time: Fri 17 Apr 2026 13:15:21 +0000
ROA not before: Fri 17 Apr 2026 13:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:94:eb:78:27:60:e5:37:d3:5e:0e:02:d2:9d:83:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 17 13:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46aa47bc493cfd3faae5a694fad66204273e1f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:b4:08:9d:59:32:1e:2a:00:00:2a:b0:90:
fb:21:1d:a5:63:12:22:75:6c:eb:0a:f6:ac:6d:0d:
12:8c:ca:96:25:8d:f1:9f:40:aa:4d:d0:c0:e0:64:
4a:0d:d0:6a:0f:4d:28:72:bb:92:15:90:b0:fa:cc:
2f:a0:98:05:0b:b5:ff:3c:0f:54:80:fc:82:32:1e:
63:62:ca:07:d4:f2:1d:f6:f5:2d:b3:e5:c2:92:a3:
2e:80:fa:88:53:44:a5:67:62:d0:15:68:29:bc:c1:
a8:90:3d:9f:1e:d6:ff:c8:b1:58:2a:70:b6:57:7e:
15:d5:ed:ae:29:57:ed:75:d1:aa:c0:42:b7:9c:58:
93:bb:f8:39:24:f4:b9:56:15:1d:da:84:29:d7:be:
ea:68:dc:fd:30:bb:5c:39:67:3c:35:a3:ea:b5:8f:
d7:00:86:c0:d2:7a:ca:de:70:2c:0b:cf:82:5f:1c:
80:5f:49:f4:b5:99:f5:a8:b2:b5:44:f0:0c:67:31:
3e:de:7f:ac:e7:58:4b:b5:6c:7a:66:cf:8c:71:60:
6c:3a:f2:08:b1:a6:7d:a9:d4:d8:62:b6:01:35:ea:
65:d6:d8:43:24:95:54:14:b7:64:96:d9:d9:12:3f:
6e:e2:18:e8:e7:87:bf:db:cf:ba:4d:af:e3:17:ff:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:47:BC:49:3C:FD:3F:AA:E5:A6:94:FA:D6:62:04:27:3E:1F:81
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RqpHvEk8_T-q5aaU-tZiBCc-H4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.88.0/24
163.5.90.0/24
163.5.100.0/24
163.5.117.0/24
163.5.130.0/24
163.5.153.0-163.5.154.255
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.226.0/23
163.5.240.0/24
163.5.243.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
76:65:93:b4:4f:b5:b0:25:1f:71:44:b0:b6:ea:b8:3e:3c:87:
5d:f7:c6:1a:39:e9:e8:5d:32:71:ee:25:e5:ff:f5:05:63:d0:
38:ce:6b:66:ea:ae:69:85:ec:f8:f2:92:a1:a1:05:a3:c4:d5:
d3:0f:c6:2c:75:08:99:bc:db:02:a3:95:29:fd:f5:cf:82:0c:
54:7b:b4:fa:72:30:15:68:08:76:d8:14:6f:a4:af:96:97:24:
ec:19:bc:88:ca:4e:89:95:fc:c2:75:af:b3:8f:7a:6a:a4:db:
91:b7:3e:d1:e7:69:0d:40:75:51:c8:32:02:8f:51:3e:4b:1b:
e1:10:26:58:84:d4:a6:e3:7c:4e:f2:37:e0:3e:49:ac:84:81:
d7:11:62:76:38:99:69:15:ed:29:b2:01:a6:0b:5f:c6:17:ec:
c7:71:bd:d3:0f:ee:11:14:e3:35:e8:c2:4b:45:99:7d:05:5e:
0b:02:3c:c0:f1:19:c0:28:06:38:a5:c6:74:be:f1:3e:3d:70:
fe:b1:4e:e4:79:84:24:21:50:6e:f3:c3:e6:42:2f:c8:e4:e9:
07:13:3c:66:af:1d:b2:a9:0f:7b:aa:cb:2d:14:ee:a8:3c:53:
78:24:57:40:e1:5f:1f:09:c0:86:6e:db:bc:44:49:e9:f2:d9:
68:18:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:58:41 2026 by rpki-client