Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fGs0DMLsrTbDuLEI3WJW4_OfPio.roa
File: fGs0DMLsrTbDuLEI3WJW4_OfPio.roa (raw, json)
Hash identifier: DAvzEd5wxxljQp7ATeXhkKlvJ0Fs6GCZ32Z4kk1MnR0=
Subject key identifier: 7C:6B:34:0C:C2:EC:AD:36:C3:B8:B1:08:DD:62:56:E3:F3:9F:3E:2A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A08BD1F5A039B6B96A5B6F0F867E7EB2D2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fGs0DMLsrTbDuLEI3WJW4_OfPio.roa
Signing time: Thu 10 Sep 2026 14:56:27 +0000
ROA not before: Thu 10 Sep 2026 14:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d1:f5:a0:39:b6:b9:6a:5b:6f:0f:86:7e:7e:b2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 10 14:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c6b340cc2ecad36c3b8b108dd6256e3f39f3e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:c8:05:13:d0:5f:aa:af:d6:f5:91:1e:79:
ce:2c:f1:c4:ca:ed:90:98:5b:61:df:be:97:69:55:
cc:5f:fb:ef:eb:31:16:d9:80:67:91:37:27:24:db:
c9:bb:d6:a8:cd:08:ac:e6:27:4d:05:c7:ec:9a:2b:
09:95:13:e0:72:0b:19:93:25:18:5b:f8:34:8d:a6:
aa:53:84:47:18:e9:ec:2f:e2:75:00:a0:dd:54:eb:
61:b8:e6:05:0c:50:82:8a:d9:da:12:78:1e:e2:57:
23:51:db:23:a2:52:a0:10:e0:4f:20:7a:18:cd:9d:
73:06:0b:eb:a0:50:19:69:bc:ab:5b:3c:10:ef:21:
6e:e0:73:01:d3:e9:9c:7d:04:e2:28:9d:88:f2:fd:
e6:68:d8:64:6e:9b:3d:ea:aa:42:83:07:d3:8b:87:
31:06:28:fc:af:3a:ee:99:b2:f6:ba:78:ef:de:21:
4e:7c:04:eb:f2:d6:18:ea:54:0e:87:c8:4f:ff:dc:
14:c4:39:a3:7d:75:e1:a0:f5:e0:2f:83:4b:62:88:
11:9f:d4:5b:0d:a9:3b:9a:c6:eb:ef:b0:e2:7f:89:
89:b5:89:ad:73:f0:65:89:52:e5:24:69:79:a3:8f:
2f:69:f7:96:b0:21:8b:0d:36:2d:c4:6c:8d:8f:fa:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:34:0C:C2:EC:AD:36:C3:B8:B1:08:DD:62:56:E3:F3:9F:3E:2A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fGs0DMLsrTbDuLEI3WJW4_OfPio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.87.0/24
163.5.95.0/24
163.5.123.0/24
163.5.136.0/24
163.5.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:28:a5:2e:58:76:bd:ae:67:87:bb:fd:aa:3f:26:6a:3b:a7:
bf:27:dd:ce:3e:b2:cc:0b:0d:62:26:f2:99:23:2f:c5:18:84:
4e:04:d8:13:62:a3:27:1c:38:c4:26:ed:b5:50:2f:e2:58:f0:
8e:f1:da:65:e7:e8:03:fe:c2:89:a7:a8:a6:5d:b8:d5:5a:1b:
e7:d1:77:13:04:f9:1b:59:eb:ff:1b:87:8f:bf:32:67:86:8c:
b0:a8:00:59:ce:4d:4e:7b:56:dd:87:b6:6d:cf:f8:02:e8:72:
59:4a:2d:fe:89:90:07:8e:b8:d9:e5:95:cb:ce:d8:b8:07:04:
a5:1f:bd:23:1d:89:1b:fb:83:3f:e8:11:c3:61:dd:e0:42:30:
6c:04:5e:e0:37:26:73:66:6e:f5:72:ce:8d:72:d0:91:11:24:
d7:9e:41:99:ff:e4:6e:91:f6:e8:ee:a9:2e:95:0d:e3:27:91:
6a:f7:71:5c:3f:0a:10:21:10:d6:ad:92:07:b2:dc:ae:b9:dd:
5d:e8:6b:c4:6a:09:64:ef:0c:cb:ac:8d:ac:3b:d2:27:fb:c6:
e3:67:54:7f:60:41:4d:d0:d0:d2:14:b0:8f:50:9b:c4:8b:88:
a5:1d:74:e1:40:a8:94:6b:c9:67:e5:80:ac:79:e1:9f:a1:ac:
17:57:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:15:46 2026 by rpki-client