Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gOxs0WIGCKkNk0u4nGS41RgRmzs.roa
File: gOxs0WIGCKkNk0u4nGS41RgRmzs.roa (raw, json)
Hash identifier: jns2jaNmvj3CuZHpcguWNnPE1D/bGrJhNqLvepjuOtw=
Subject key identifier: 80:EC:6C:D1:62:06:08:A9:0D:93:4B:B8:9C:64:B8:D5:18:11:9B:3B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DA7A8A6D4DDF734BAB1A18335AD686AE4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gOxs0WIGCKkNk0u4nGS41RgRmzs.roa
Signing time: Sun 19 Apr 2026 21:32:21 +0000
ROA not before: Sun 19 Apr 2026 21:32:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.50.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:a8:a6:d4:dd:f7:34:ba:b1:a1:83:35:ad:68:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 19 21:32:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80ec6cd1620608a90d934bb89c64b8d518119b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:be:09:8e:90:a0:61:e0:26:00:79:71:e6:
f1:29:ed:4a:1f:33:bf:57:32:b4:b3:5c:7c:c6:35:
89:82:94:e4:38:b5:62:db:9f:ba:e2:8b:fb:01:e8:
35:8d:f0:4b:36:7f:b3:52:59:d1:21:76:8b:20:a8:
b9:44:ff:d3:be:18:d2:e1:61:91:a8:ec:18:4b:96:
39:36:d9:3d:c5:9f:d3:44:fa:5d:b3:ba:81:cf:46:
68:e2:44:53:4f:c5:7e:06:de:f1:2c:9a:d4:da:72:
95:a0:13:04:42:27:da:7e:93:de:29:02:da:37:b4:
68:8a:28:12:e8:11:0d:3f:97:14:6c:51:df:52:1b:
11:15:60:87:6c:ef:8a:3a:ea:7c:95:ac:03:cd:45:
ad:e1:39:8f:27:18:ce:9d:e0:13:54:68:2a:c6:d1:
f1:7f:bf:96:e2:3a:80:38:ae:a2:3b:ea:e4:eb:41:
44:25:7c:9b:a2:86:2a:5e:92:97:67:aa:6f:d9:ed:
59:74:76:65:04:e6:af:7e:9b:38:a4:dc:40:31:33:
e5:1e:c4:ff:f1:16:ff:91:ed:c2:be:aa:aa:a6:4e:
ba:32:88:e5:b6:88:e5:04:17:42:cf:e7:83:9c:31:
37:8e:6c:e7:31:8b:ac:ec:b7:67:3d:cd:89:35:af:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:6C:D1:62:06:08:A9:0D:93:4B:B8:9C:64:B8:D5:18:11:9B:3B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gOxs0WIGCKkNk0u4nGS41RgRmzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.50.0/24
163.5.192.0/24
163.5.195.0/24
Signature Algorithm: sha256WithRSAEncryption
76:59:f3:cf:34:79:40:77:94:cb:fc:6a:f2:d3:59:99:ad:53:
92:f8:3e:df:c1:4f:8c:57:a7:32:a9:54:dd:d9:c4:fa:c5:7c:
31:de:ea:e5:84:02:d0:73:c4:df:6d:23:77:b7:5b:2e:24:2c:
88:43:20:dc:8d:e8:fa:ad:eb:1d:e2:e6:7f:29:c2:58:27:db:
ba:ee:01:e7:fd:fc:f7:8c:55:53:88:72:e4:15:13:a9:82:57:
48:2d:ae:43:9f:d7:28:6a:1d:5e:f8:f3:50:c8:2a:81:6a:2b:
24:1f:40:b0:40:87:f9:7d:57:99:9c:08:d6:54:62:18:f7:ec:
2e:a4:43:7d:16:79:dd:0d:29:a8:86:b7:9b:bb:90:0f:42:15:
6b:db:da:82:62:9a:fe:2f:8e:57:7b:1a:2f:3f:05:6a:88:6f:
55:d4:50:25:21:15:22:e9:d1:e3:57:74:6f:40:21:a6:db:92:
2d:9a:e3:78:3d:ee:24:b8:42:3c:af:dc:31:a7:ab:a3:63:a1:
49:55:8f:ea:27:5e:54:db:0b:b5:e8:8c:07:bd:ee:e4:25:94:
67:fb:03:d2:fc:bb:a0:2d:7f:1a:f3:e6:84:14:06:2a:00:11:
a9:53:f4:9a:54:4a:6a:1a:4f:f2:0f:cc:58:bf:53:92:78:2b:
93:4e:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:58:43 2026 by rpki-client