Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hBBHEX_zBZSaGkcaKVmDJyW6EEk.roa
File: hBBHEX_zBZSaGkcaKVmDJyW6EEk.roa (raw, json)
Hash identifier: kzn5uVkeRNfL0k9ggjGsqc8Wz1Xln1+MtBj11GJaapc=
Subject key identifier: 84:10:47:11:7F:F3:05:94:9A:1A:47:1A:29:59:83:27:25:BA:10:49
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E834BDD1F6F441B53230F00F20B9BD5A8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hBBHEX_zBZSaGkcaKVmDJyW6EEk.roa
Signing time: Mon 01 Jun 2026 13:07:27 +0000
ROA not before: Mon 01 Jun 2026 13:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:4b:dd:1f:6f:44:1b:53:23:0f:00:f2:0b:9b:d5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 1 13:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=841047117ff305949a1a471a2959832725ba1049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:e0:73:8e:bc:b8:f0:28:a4:1a:45:57:f7:
4a:26:5e:da:3e:93:9f:d5:85:8b:29:2c:ae:6b:a8:
f6:12:07:d6:b7:02:a7:e8:2f:af:8a:b5:5e:57:62:
85:8c:f5:80:66:56:8f:6c:bd:a2:63:56:4c:d4:cc:
bf:d1:3e:26:59:66:e8:68:9b:44:61:c2:08:b7:30:
f4:f1:0b:1b:d6:b5:5d:47:05:f8:35:cd:e1:5f:7c:
f8:c7:b3:47:0b:cc:b3:81:d9:aa:f7:f4:51:89:f4:
83:50:f7:8f:f5:a9:20:f1:99:d0:5b:d0:af:21:9b:
ea:20:6f:de:9b:54:f3:ff:d3:0b:a0:7f:e3:9c:41:
21:47:76:f7:49:52:82:f1:2f:23:9e:8d:48:c3:59:
eb:da:00:db:c3:74:0f:26:96:01:5c:e0:9a:f4:1c:
97:fc:7d:bb:0b:36:8c:1f:bb:b8:c5:cc:c2:79:06:
cb:39:98:13:98:6a:55:7b:35:a9:10:0d:96:ef:ae:
f4:1b:52:08:a5:b7:3a:5a:22:2c:a6:c0:43:7d:89:
99:3c:3c:9b:6d:ae:bd:b8:6f:37:6b:13:4e:87:aa:
51:d9:85:79:db:c6:22:45:5a:74:f4:47:a6:8b:b0:
91:ec:ea:6e:9e:ad:dc:0b:3a:53:ed:92:5b:2d:81:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:47:11:7F:F3:05:94:9A:1A:47:1A:29:59:83:27:25:BA:10:49
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hBBHEX_zBZSaGkcaKVmDJyW6EEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.88.0/24
163.5.90.0/24
163.5.100.0/24
163.5.117.0/24
163.5.130.0/24
163.5.154.0/24
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.227.0/24
163.5.240.0/24
163.5.243.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5f:0c:65:e6:da:da:5e:6b:9e:11:3d:7c:9f:f5:f2:40:34:
de:32:8c:93:23:fd:93:34:ed:67:27:f9:4d:c9:f6:87:bc:b6:
64:5a:47:f6:40:a8:e6:8f:52:74:72:fd:95:9b:8d:45:00:3f:
d1:59:de:55:6b:c9:b5:14:42:d2:8b:8c:6b:10:84:1a:1b:be:
6e:df:cf:7b:8c:81:b0:ae:12:6c:79:de:cd:fc:73:be:46:41:
95:42:3d:b6:24:34:4f:89:35:42:90:5b:0b:2a:4d:13:e4:d9:
44:db:e7:a8:88:bd:7e:1a:f0:95:4b:63:96:8d:f6:6b:f6:0d:
97:a3:22:d7:13:c4:01:2a:95:b9:53:e2:78:bc:ae:e6:07:e2:
86:d4:ac:c2:db:b0:48:a3:54:15:73:83:59:74:b0:a9:db:18:
85:02:05:57:12:4b:28:e3:df:08:02:d6:bf:ce:f3:b7:e0:80:
96:5c:8e:3a:ac:42:15:17:c5:c6:c0:9d:97:b1:39:c5:b5:28:
5a:4f:c0:a0:c9:35:e8:19:76:e4:3d:6d:69:60:55:bd:8c:3e:
26:4e:1d:7e:f9:0a:14:bb:21:01:fe:be:19:7a:f7:7e:a3:12:
45:02:09:e2:49:e3:ed:11:2e:78:f1:aa:34:ea:54:4e:dc:05:
22:56:56:20
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZ6DS90fb0QbUyMPAPILm9WoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNjAxMTMwNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDEwNDcxMTdmZjMwNTk0OWExYTQ3MWEyOTU5ODMyNzI1YmExMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8jgc468uPAopBpFV/dKJl7aPpOf
1YWLKSyua6j2EgfWtwKn6C+virVeV2KFjPWAZlaPbL2iY1ZM1My/0T4mWWboaJtE
YcIItzD08Qsb1rVdRwX4Nc3hX3z4x7NHC8yzgdmq9/RRifSDUPeP9akg8ZnQW9Cv
IZvqIG/em1Tz/9MLoH/jnEEhR3b3SVKC8S8jno1Iw1nr2gDbw3QPJpYBXOCa9ByX
/H27CzaMH7u4xczCeQbLOZgTmGpVezWpEA2W7670G1IIpbc6WiIspsBDfYmZPDyb
ba69uG83axNOh6pR2YV528YiRVp09Eemi7CR7Opunq3cCzpT7ZJbLYG0IwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFIQQRxF/8wWUmhpHGilZgycluhBJMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvaEJCSEVYX3pCWlNhR2tjYUtWbURKeVc2RUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAowUnAwQA
owVYAwQAowVaAwQAowVkAwQAowV1AwQAowWCAwQAowWaAwQAowWuAwQAowWxAwQA
owW9AwQAowXjAwQAowXwAwQAowXzAwQAowX8MA0GCSqGSIb3DQEBCwUAA4IBAQAn
Xwxl5traXmueET18n/XyQDTeMoyTI/2TNO1nJ/lNyfaHvLZkWkf2QKjmj1J0cv2V
m41FAD/RWd5Va8m1FELSi4xrEIQaG75u3897jIGwrhJsed7N/HO+RkGVQj22JDRP
iTVCkFsLKk0T5NlE2+eoiL1+GvCVS2OWjfZr9g2XoyLXE8QBKpW5U+J4vK7mB+KG
1KzC27BIo1QVc4NZdLCp2xiFAgVXEkso498IAta/zvO34ICWXI46rEIVF8XGwJ2X
sTnFtShaT8CgyTXoGXbkPW1pYFW9jD4mTh1++QoUuyEB/r4Zevd+oxJFAgniSePt
ES548ao06lRO3AUiVlYg
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:07 2026 by rpki-client