Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/clHLBSlpxu-CCauzKLBZE8rPQf8.roa
File: clHLBSlpxu-CCauzKLBZE8rPQf8.roa (raw, json)
Hash identifier: 4yBTvXnjxrcDpJNK5f9sqpTskbiO56/BmhvXiQd2yc8=
Subject key identifier: 72:51:CB:05:29:69:C6:EF:82:09:AB:B3:28:B0:59:13:CA:CF:41:FF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A05BF8E4239CA5F7D4FA342A8360550643
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/clHLBSlpxu-CCauzKLBZE8rPQf8.roa
Signing time: Tue 01 Sep 2026 07:57:12 +0000
ROA not before: Tue 01 Sep 2026 07:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.88.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f8:e4:23:9c:a5:f7:d4:fa:34:2a:83:60:55:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 1 07:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7251cb052969c6ef8209abb328b05913cacf41ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:f7:23:0e:48:5a:e2:43:9b:de:8d:6d:87:
20:71:a7:a3:75:c3:ee:eb:0e:f8:aa:10:de:11:d2:
32:28:20:4c:52:88:6a:06:0d:7e:ac:96:c5:29:06:
25:4c:74:41:cf:94:be:6b:31:10:c0:f8:7b:46:d6:
8e:2e:8e:aa:ce:9b:30:ab:2e:45:7b:fa:ff:6e:9a:
ad:de:eb:56:8d:6a:1c:88:01:50:97:33:4e:a9:7e:
5e:1a:fa:a6:92:4f:92:73:b0:04:d6:fa:ce:27:99:
a7:d1:3c:99:6c:58:3b:66:a2:fe:b4:7b:d9:f0:53:
40:0d:53:db:08:4f:94:5c:e1:6f:90:0d:fc:9e:4d:
65:a9:cb:ea:af:13:8d:71:ee:de:ec:bc:ce:7e:d6:
ad:46:d5:32:ba:21:d3:90:3e:e4:64:f9:85:89:18:
d2:73:85:b9:92:0f:da:d8:ec:0c:f2:f5:c0:eb:40:
31:d2:43:3d:d3:aa:59:1d:31:ac:d6:32:a1:9a:9f:
30:e6:d4:03:da:1f:84:7c:18:09:fc:bc:a6:09:5e:
8e:92:7e:0e:fb:8b:35:a8:d1:3d:b1:eb:85:55:69:
9e:cc:a9:d5:3d:87:dc:14:86:80:b7:e5:34:8e:91:
e8:6e:a8:1a:36:96:a3:be:73:7f:49:1c:ee:83:05:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:CB:05:29:69:C6:EF:82:09:AB:B3:28:B0:59:13:CA:CF:41:FF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/clHLBSlpxu-CCauzKLBZE8rPQf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.88.0/24
163.5.100.0/24
163.5.154.0/24
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b0:28:dd:b9:35:49:10:f4:57:50:3e:45:66:e4:12:b4:65:
64:8e:fe:e1:0a:25:f1:ba:29:01:de:9b:65:76:83:79:5d:70:
c7:ee:d8:14:7d:52:7b:c5:83:14:8c:54:e5:c7:46:36:6a:a7:
3c:bb:3a:3f:9e:a2:bf:d4:4e:91:b7:2d:75:5f:e3:00:1b:97:
64:ce:5c:e2:ed:05:f5:45:72:78:ce:16:69:92:15:fa:e9:49:
44:e6:b3:66:8e:43:b0:23:ad:c1:23:3d:41:62:0c:0f:e7:b9:
d7:f9:d7:3d:c1:1e:f1:ea:a2:76:56:4e:d9:56:f3:f7:63:a0:
45:61:06:d0:22:02:8c:11:c6:8e:f1:a3:8e:98:eb:d1:83:03:
34:e2:37:bc:e0:26:66:f5:29:b2:f2:98:78:c9:f3:38:ef:e3:
68:60:49:8f:b7:2b:bc:64:9c:ce:96:58:96:66:4c:44:5f:2f:
e9:7b:e1:47:a3:58:13:b3:fc:cf:1a:65:f4:5a:6e:dd:ba:12:
cc:ec:16:6b:e5:ad:eb:c6:ed:ef:f5:97:13:f5:71:55:cb:b9:
ac:4b:c1:ff:4e:c6:9b:15:e3:b7:e5:86:49:41:ee:f5:53:f3:
83:42:0e:7c:84:65:6b:14:1f:fd:3b:a5:43:59:41:bf:16:a3:
9e:4c:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:36 2026 by rpki-client