Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d36EZq4D_O6ZzCZpmlFDk7aV6aw.roa
File: d36EZq4D_O6ZzCZpmlFDk7aV6aw.roa (raw, json)
Hash identifier: e2GVOQ5X1cTOPJjLdtl95RLB5VBvfx0+KD86jvs7HcQ=
Subject key identifier: 77:7E:84:66:AE:03:FC:EE:99:CC:26:69:9A:51:43:93:B6:95:E9:AC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F3BAEE0842CC37E49F4E29DA90BBB5D83
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d36EZq4D_O6ZzCZpmlFDk7aV6aw.roa
Signing time: Tue 07 Jul 2026 08:25:44 +0000
ROA not before: Tue 07 Jul 2026 08:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:ae:e0:84:2c:c3:7e:49:f4:e2:9d:a9:0b:bb:5d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 7 08:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=777e8466ae03fcee99cc26699a514393b695e9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:2c:24:ca:e6:cf:e1:8c:db:39:30:7d:6e:
9f:f8:0b:ef:1c:f2:88:12:08:28:27:cf:d3:c6:3f:
49:1f:ea:ae:89:f9:0d:f5:96:d0:19:ad:6a:02:1c:
b7:af:f7:d9:9b:f9:e6:2f:43:8c:25:91:92:9d:86:
eb:69:cc:dd:c3:2c:5c:fe:48:a0:0c:c3:cc:03:97:
81:fe:03:fa:ae:9c:35:82:5e:17:d8:95:98:fe:cd:
df:20:ef:79:c8:c9:a1:8e:cc:56:e1:5e:88:e4:98:
13:3a:a6:85:3e:0d:f2:dc:77:c8:46:1c:65:93:d0:
f3:64:ea:52:aa:14:59:30:28:d4:fb:ce:7e:59:25:
3c:8d:55:e5:0c:04:b1:c1:43:0a:3e:a1:83:c2:c1:
05:4b:84:58:29:8b:12:d1:32:c8:cc:b7:8b:12:5e:
02:e1:03:a9:a1:b8:85:db:85:eb:89:5c:59:6d:1c:
79:cd:3b:a0:76:cf:7a:28:68:1f:70:90:08:b5:6b:
e8:ab:58:52:8e:2e:89:a1:76:c5:6d:cf:73:ea:5e:
26:f1:85:71:97:20:45:2b:61:5b:f1:ac:75:fc:82:
41:aa:0b:fa:36:8e:d2:94:bd:77:f0:f2:4e:98:5c:
b8:6a:2e:f2:61:c2:29:ef:17:0e:29:9d:dc:73:f0:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7E:84:66:AE:03:FC:EE:99:CC:26:69:9A:51:43:93:B6:95:E9:AC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d36EZq4D_O6ZzCZpmlFDk7aV6aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.54.0/24
163.5.91.0/24
163.5.136.0/24
163.5.147.0/24
163.5.161.0/24
Signature Algorithm: sha256WithRSAEncryption
14:46:27:1c:4c:ad:cf:6c:b5:93:56:59:d8:a5:14:a8:c3:4c:
1c:15:46:58:7d:04:e6:26:9f:7a:cd:de:b0:1b:06:83:c0:8b:
67:4f:35:43:c9:ce:d6:c7:22:f8:18:0c:5c:2d:1e:0d:53:ec:
d3:8b:cd:ed:dc:28:13:68:dd:20:60:e4:cd:2e:57:54:d7:e2:
f7:14:f5:f1:70:ea:18:eb:7e:a1:f1:aa:ba:3f:ac:9e:cf:1f:
1f:11:3f:ee:f0:ea:81:ec:6b:e7:ee:07:11:9c:96:03:2e:b5:
2f:1c:5e:03:0f:bf:de:d5:de:2a:fb:73:0b:ec:cc:ec:32:bc:
47:43:ad:b9:d6:6d:7f:21:e6:c2:b5:bc:81:ab:82:1b:11:95:
15:c0:55:65:44:f6:35:19:b5:f0:36:88:2d:72:98:68:6e:61:
5b:cb:3c:c6:bc:34:a9:f1:6e:ae:bc:4c:d8:a9:24:a6:d4:7e:
ba:bc:50:29:21:59:58:01:5f:36:a5:f2:9d:10:44:28:61:5a:
f3:b5:d8:05:3e:f4:8c:54:3a:4a:9c:5b:5a:a3:b7:82:30:7a:
5b:9b:45:dd:70:5c:a8:36:15:96:31:e5:3c:f9:d5:9d:75:d7:
d2:53:51:b7:ed:e2:22:f8:38:c9:f2:88:d8:4d:e4:0b:6a:f9:
0f:6c:d2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client