Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W2Il7rd71StqYqtUCdazkebbWFI.roa
File: W2Il7rd71StqYqtUCdazkebbWFI.roa (raw, json)
Hash identifier: kkUQxxLHefUwtSiUh3rg2z1s8RGe5upuKR6Prd61Wn4=
Subject key identifier: 5B:62:25:EE:B7:7B:D5:2B:6A:62:AB:54:09:D6:B3:91:E6:DB:58:52
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A12F9F1EF399E2923DC0EBFAA01865EE1B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W2Il7rd71StqYqtUCdazkebbWFI.roa
Signing time: Mon 12 Oct 2026 10:18:39 +0000
ROA not before: Mon 12 Oct 2026 10:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.25.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:9f:1e:f3:99:e2:92:3d:c0:eb:fa:a0:18:65:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 12 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b6225eeb77bd52b6a62ab5409d6b391e6db5852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:e3:bf:40:c5:7a:bf:ea:ed:31:f8:2a:9c:
46:01:e5:08:3a:81:7f:39:a1:1e:4e:1c:d5:07:49:
6e:b2:b3:4a:6f:7f:2a:d6:43:f3:8d:40:45:ff:90:
ca:6f:05:59:67:fb:11:00:f5:3e:c7:b8:3f:88:dd:
5d:af:52:e4:ef:d0:b3:24:a1:b1:7d:f7:65:34:74:
a4:64:e2:2b:6f:ba:67:97:c4:2d:3c:ae:70:29:4d:
11:e9:61:34:0d:cc:35:f3:19:91:a4:6b:c8:f6:23:
11:67:8c:77:f6:54:43:b3:de:f5:55:e7:52:38:56:
86:6a:8d:06:92:71:a9:20:38:49:20:e0:d0:f9:1c:
9b:2d:ff:b0:c8:32:32:42:5f:7e:d9:c0:de:ad:99:
dc:0e:b9:94:5a:47:26:c2:00:a9:a6:36:67:26:a1:
9d:3b:d8:51:65:cc:b7:55:8f:e5:3c:e5:42:31:67:
bd:cb:a5:b1:13:6a:d8:e4:ae:17:c0:95:36:5d:34:
42:dd:6f:30:c5:db:22:93:1e:13:cb:3f:2c:25:9c:
8b:d2:2f:c7:55:1d:e5:e8:4e:f3:d3:5e:b5:07:3f:
08:11:a6:4d:eb:d3:fa:b6:dc:a4:7f:2c:b5:aa:72:
92:c4:38:70:5c:8b:ba:0e:c2:53:bb:03:e7:95:4b:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:25:EE:B7:7B:D5:2B:6A:62:AB:54:09:D6:B3:91:E6:DB:58:52
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W2Il7rd71StqYqtUCdazkebbWFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.25.0/24
163.5.33.0/24
163.5.40.0/24
163.5.128.0/24
163.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5d:e4:6c:97:52:1d:04:a8:b6:fb:74:90:d7:e4:84:43:2e:
85:32:9d:9f:dd:88:39:4f:71:9c:ef:cf:c0:c3:de:0f:ce:ce:
79:c4:66:d3:e8:0c:b5:28:ee:fa:5f:ff:6f:9e:22:cd:37:ec:
32:5a:e3:17:f7:96:09:4f:a3:06:0d:18:6f:60:22:da:38:5c:
c8:eb:33:84:c1:35:fd:85:4c:8c:18:c4:8c:b1:e1:aa:8c:df:
4b:32:7a:99:0d:8f:e7:32:9d:14:7f:36:37:cb:81:ed:ce:03:
92:85:3c:bb:e0:f6:2a:68:d2:29:e4:bc:1d:f8:03:73:13:15:
36:73:25:1e:b6:60:25:57:bc:0e:08:e9:04:46:b3:a2:f1:63:
72:5d:9e:b3:5d:0c:d1:b5:cb:b4:a8:e4:b9:16:7a:5e:7a:09:
e7:2a:cf:42:02:f1:a8:fd:c9:37:8e:99:2b:b3:5c:e2:e3:64:
f9:ed:64:cb:c2:8c:e1:23:b9:69:3e:09:a5:20:e1:ac:2b:3a:
32:67:dc:d5:97:6d:8d:28:44:48:4a:44:4b:6a:69:97:12:f2:
54:bc:46:82:7e:64:c0:02:04:f6:5a:9d:7b:f1:1a:65:86:49:
8e:a9:12:ed:da:a0:30:4b:f8:f3:f2:9e:54:f4:16:64:9a:3c:
c0:1a:44:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:46:53 2026 by rpki-client