Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gxj0SA7zksZaERiGf0csfyyES0g.roa
File: gxj0SA7zksZaERiGf0csfyyES0g.roa (raw, json)
Hash identifier: 0VNtAOqzguMT9HHeHSkWtKqknM+WFYTXGMtbt4glNs4=
Subject key identifier: 83:18:F4:48:0E:F3:92:C6:5A:11:18:86:7F:47:2C:7F:2C:84:4B:48
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F47AF630072F02735A1D90B896F6A5A1D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gxj0SA7zksZaERiGf0csfyyES0g.roa
Signing time: Thu 09 Jul 2026 16:21:44 +0000
ROA not before: Thu 09 Jul 2026 16:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:af:63:00:72:f0:27:35:a1:d9:0b:89:6f:6a:5a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 9 16:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8318f4480ef392c65a1118867f472c7f2c844b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:68:9f:4f:7c:63:8e:fe:61:e1:c6:1d:43:
9f:2c:fd:22:56:0a:f0:5a:1b:5d:94:58:c8:45:0a:
36:e3:c1:fa:a8:d8:7c:02:39:78:ee:5f:b5:d9:14:
be:02:86:15:8a:db:da:cf:23:53:42:92:d5:e9:65:
dc:0e:f5:4e:29:c2:7c:f9:59:d2:bc:a6:5c:2d:93:
8a:b0:e0:09:84:be:8a:fe:6e:66:09:b1:bd:f7:08:
95:99:32:f5:88:69:94:c6:be:cc:39:22:0a:3b:cf:
c3:de:21:27:6d:d5:d8:ab:9f:8c:7a:e0:f9:6d:b2:
a8:dd:6e:2e:fd:43:8f:5f:83:b0:15:57:62:ae:b7:
1b:2a:e3:1e:5a:60:99:4d:15:77:30:5e:e1:b7:3a:
2c:58:f2:af:a0:94:88:dc:8a:f1:76:a1:9d:3b:3a:
cb:24:63:f8:5f:90:09:94:16:fd:a5:ee:ae:41:db:
fd:69:3a:34:55:f4:9c:a8:6a:e1:ff:f3:10:f9:54:
aa:46:0f:de:da:e0:0b:f9:58:cc:c7:9d:17:30:0f:
28:2a:8c:19:e4:0f:e6:41:ec:3c:12:96:5b:1d:11:
23:61:9c:db:4f:fd:c7:7c:55:64:32:b8:77:0d:ec:
e7:17:bf:c4:f9:11:33:18:fd:59:e9:6d:a9:0b:59:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:F4:48:0E:F3:92:C6:5A:11:18:86:7F:47:2C:7F:2C:84:4B:48
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gxj0SA7zksZaERiGf0csfyyES0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3c:0c:6d:62:a7:1f:48:a1:f5:89:69:26:2b:2f:59:c7:64:
1f:25:15:89:19:f1:dc:37:53:8f:d5:f7:37:df:76:64:bb:bc:
20:f5:02:c4:b4:2d:f8:ca:5d:76:19:a3:fc:2d:57:5e:bf:42:
5d:da:00:9c:db:a6:f1:58:4e:90:5e:22:fb:ad:be:b3:97:2b:
3a:b2:7a:01:ea:55:d4:5d:e3:0d:39:5c:8c:3d:5f:a5:06:f4:
bd:d7:13:4d:14:d0:7a:6b:6a:5c:a9:39:c8:19:86:40:9f:32:
de:56:3a:7f:23:77:6f:28:2f:68:f0:27:39:93:a3:40:f5:94:
cf:91:bd:47:9b:47:34:d7:14:e0:5b:2c:ca:cd:63:85:13:50:
15:cc:73:1e:f9:2a:f8:dc:92:65:e7:1c:7c:b0:64:42:94:12:
d8:ed:b4:18:a0:3d:5c:b3:22:f3:37:96:51:0c:68:5f:65:ad:
3a:cc:8b:c1:63:93:5d:12:6a:d5:13:87:c2:04:13:bb:fb:af:
2c:61:6a:81:af:d2:2d:54:f3:35:5d:cb:6a:11:95:01:e9:47:
0f:20:ca:fb:5b:34:8c:72:78:67:cb:6f:1e:bd:27:bf:96:36:
68:4a:d5:cd:95:4f:48:98:c1:49:27:91:25:29:fe:4c:6b:59:
65:68:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client