Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bv_u93IYehWDku6mHZySsZypE88.roa
File: bv_u93IYehWDku6mHZySsZypE88.roa (raw, json)
Hash identifier: qGyKFJtp1/aDrx6tp4zz9ZxpxfyWjELjwNSMp0YeMo8=
Subject key identifier: 6E:FF:EE:F7:72:18:7A:15:83:92:EE:A6:1D:9C:92:B1:9C:A9:13:CF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A12F9F1E488227B2C4337121CA48A6865E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bv_u93IYehWDku6mHZySsZypE88.roa
Signing time: Mon 12 Oct 2026 10:18:39 +0000
ROA not before: Mon 12 Oct 2026 10:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 163.5.7.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:9f:1e:48:82:27:b2:c4:33:71:21:ca:48:a6:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 12 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6effeef772187a158392eea61d9c92b19ca913cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:3c:88:45:06:bb:95:8f:9f:27:59:65:d1:
89:ff:41:d1:bb:98:15:ea:29:e3:07:09:e3:f8:e9:
91:12:5d:45:55:e5:8f:3a:03:c2:3b:43:9a:ea:a0:
3c:ad:73:a2:90:51:f9:8c:af:e1:68:09:3d:35:e4:
01:4b:2e:92:b1:ca:94:c7:08:de:07:8a:3e:f2:6f:
84:8b:f5:a9:58:2b:bf:58:38:bd:b5:e3:3a:58:07:
f0:89:82:7b:1c:54:6f:6c:64:f5:33:d4:50:2f:bc:
db:56:27:47:82:ff:c8:df:ce:48:fa:4b:55:3a:de:
e7:29:c8:ef:d9:67:d8:7d:38:93:df:94:67:e4:49:
e5:93:36:32:43:8e:e3:b8:ae:ea:68:ac:4b:05:ab:
3a:7c:00:d7:f3:5b:ad:75:0b:46:bf:f9:03:bb:43:
d2:47:6d:25:89:7d:ef:ed:e1:0a:47:3e:28:94:cb:
89:4b:15:ef:18:c0:23:98:af:89:ff:2a:4f:e1:7a:
a7:65:2a:14:27:78:71:8f:94:3b:01:4c:67:ea:73:
be:ac:2a:e3:c8:7b:ef:ab:3d:b6:6e:7a:04:58:2e:
0d:06:fc:35:5c:7a:cb:f4:59:e5:64:a1:6b:7e:58:
8e:c4:34:18:04:83:01:72:1c:9e:3c:bd:a9:ef:8f:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:EE:F7:72:18:7A:15:83:92:EE:A6:1D:9C:92:B1:9C:A9:13:CF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bv_u93IYehWDku6mHZySsZypE88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.7.0/24
163.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4b:d5:3c:d1:ae:af:8d:d1:fb:23:02:18:c0:bb:d2:b3:01:
c5:9e:b8:79:6a:b1:e2:a8:e7:81:80:ce:84:92:04:1d:b2:c5:
58:3c:80:ed:ef:6b:33:9f:cd:88:d9:5c:44:7f:08:9a:e6:20:
8b:5a:66:d9:9e:45:27:81:96:55:79:00:a8:0a:cc:66:16:60:
02:ee:0d:75:31:a6:93:d6:e0:b0:60:a1:91:e1:e4:4f:de:de:
b0:19:72:52:2e:47:52:cd:34:15:5d:66:da:cf:bf:02:ee:cc:
29:15:be:a6:01:23:de:9f:94:e9:cc:68:a6:a3:52:75:d6:10:
11:d1:79:5e:2b:11:90:d5:24:35:88:35:42:64:8d:e2:38:df:
94:78:7c:82:b6:dc:ec:d7:da:bb:b1:f7:62:27:95:7f:da:9c:
42:90:fc:ce:ea:95:cd:2f:ed:95:65:06:61:af:b9:e9:41:88:
10:60:ae:3c:76:fe:c9:1f:fe:1a:0c:d3:b9:da:1d:53:45:3c:
cd:2d:6c:52:fb:2e:a1:d5:20:31:4a:73:1b:58:58:0c:39:32:
27:e5:92:03:48:09:83:20:61:8f:03:00:a4:9d:0e:83:a2:23:
4f:a6:1e:e6:62:66:18:27:24:03:39:ed:08:63:11:4e:b2:e7:
46:fd:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:26 2026 by rpki-client