Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/StQaQxoMIwZMPweoPdY3phpjQFs.roa
File: StQaQxoMIwZMPweoPdY3phpjQFs.roa (raw, json)
Hash identifier: JmJN2Cs6vR1YRKxvYLxkTcVf5hXuEO0Xa04ZW42sPGM=
Subject key identifier: 4A:D4:1A:43:1A:0C:23:06:4C:3F:07:A8:3D:D6:37:A6:1A:63:40:5B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A06152F1765925BE8C3ED8A89C0C444072
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/StQaQxoMIwZMPweoPdY3phpjQFs.roa
Signing time: Wed 02 Sep 2026 08:53:40 +0000
ROA not before: Wed 02 Sep 2026 08:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:52:f1:76:59:25:be:8c:3e:d8:a8:9c:0c:44:40:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 2 08:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ad41a431a0c23064c3f07a83dd637a61a63405b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:60:1b:a1:c4:83:e6:ae:a6:61:d3:51:c9:
54:08:f1:a9:60:52:35:d0:88:b7:88:02:10:01:e8:
f3:a8:39:a5:d9:40:43:d6:12:94:d0:a9:1c:ab:6c:
76:e1:27:29:e0:28:55:e7:8d:49:4e:96:58:67:16:
4a:12:b1:77:8a:f1:8f:18:bb:9b:83:5e:d6:7a:cf:
5c:c9:e8:b6:6d:ae:87:0d:dc:3e:18:da:b3:90:34:
6b:74:f4:19:f3:09:6c:3d:ff:65:de:b8:3b:d1:49:
ca:23:89:9f:fd:4b:c0:2e:77:d9:4d:e9:1a:5a:b3:
08:a6:18:ab:5e:55:b8:15:cd:94:4e:f4:8b:13:2c:
df:64:08:2e:4e:0d:70:2f:3b:e3:c3:7f:85:61:6a:
40:0b:00:c9:3f:d6:77:70:cd:ce:8b:39:76:0c:f5:
ec:7f:07:a5:2b:66:2a:47:79:d4:83:e9:8e:c3:0b:
08:0f:d1:b6:e7:25:06:8a:f4:86:3b:fc:20:6d:a6:
75:e0:1f:bd:61:71:35:59:11:07:fa:5e:f5:0f:29:
45:9f:5f:62:3a:25:c1:69:22:2a:37:71:c7:ca:5d:
13:e8:5c:e3:7b:fb:b0:00:d3:2c:fa:f0:18:87:d3:
63:2f:67:43:ac:8c:b1:cd:bd:40:f4:0f:ec:09:4d:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D4:1A:43:1A:0C:23:06:4C:3F:07:A8:3D:D6:37:A6:1A:63:40:5B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/StQaQxoMIwZMPweoPdY3phpjQFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.18.0/23
163.5.35.0/24
163.5.44.0/24
163.5.110.0/24
163.5.126.0/24
163.5.179.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:67:9e:49:b7:7d:d5:0b:0d:52:f9:1b:36:a2:e6:30:f9:a3:
11:5e:67:3c:48:b6:40:8a:14:bb:3f:be:ad:cd:ae:cf:54:32:
7d:ee:83:03:84:d8:15:cb:67:83:d2:4c:63:12:40:e9:19:eb:
d1:21:56:fc:5d:52:28:93:c8:45:cc:b9:6c:bf:fb:3f:43:b1:
9a:64:b3:7b:65:36:bd:87:37:20:e4:8a:d6:5c:24:92:83:bb:
ec:84:1c:ba:3c:67:6e:df:db:ba:70:63:37:07:e3:4d:65:89:
0b:f5:b2:56:68:bc:3c:06:ea:4d:48:36:a0:01:66:4d:ec:04:
16:7e:d8:0d:53:b7:6f:82:25:81:2a:8e:54:34:16:74:41:ec:
f1:63:ed:16:87:3e:6c:37:77:15:e3:62:1f:14:0a:53:01:7f:
b5:a9:0c:d0:1a:1a:f3:76:e2:8a:a4:10:49:42:0e:72:b1:ab:
a8:d3:a3:a7:84:14:30:7a:c6:2d:ca:79:93:07:39:8d:a7:4b:
2f:7b:87:97:f3:b5:ec:39:75:fe:3a:93:32:12:5a:7e:e6:f3:
b3:ac:72:fd:8e:6e:c6:23:ad:ac:98:97:ff:54:a3:b4:83:ca:
ee:e4:0e:5f:48:6c:eb:81:ea:c3:44:0d:10:97:73:09:ef:28:
29:6f:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:38 2026 by rpki-client