Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/im-4E-oZoMr9ruoKcIHAp7JQUy0.roa
File: im-4E-oZoMr9ruoKcIHAp7JQUy0.roa (raw, json)
Hash identifier: uTVXva5hC56wfS3+bAq3KKi0qrCOeo8CwmjVkLIkm3k=
Subject key identifier: 8A:6F:B8:13:EA:19:A0:CA:FD:AE:EA:0A:70:81:C0:A7:B2:50:53:2D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E8E5B54445944EABC1408631534FD41DF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/im-4E-oZoMr9ruoKcIHAp7JQUy0.roa
Signing time: Wed 03 Jun 2026 16:40:10 +0000
ROA not before: Wed 03 Jun 2026 16:40:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 163.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:5b:54:44:59:44:ea:bc:14:08:63:15:34:fd:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 3 16:40:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a6fb813ea19a0cafdaeea0a7081c0a7b250532d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:fe:aa:cc:29:f7:14:15:3e:21:9e:4d:4e:
fe:f9:73:94:6e:26:84:62:51:a4:78:5f:a3:f4:8b:
81:6e:fe:ae:51:de:96:c5:83:94:53:a1:e3:49:ab:
95:8e:dd:ee:6d:70:60:2f:f0:e1:35:f5:f4:b1:00:
5c:32:3d:8f:22:c0:a1:a3:9f:f8:61:5b:ce:bf:84:
60:1f:9f:a6:ea:7c:24:e1:da:14:b1:c4:10:db:ae:
1c:58:97:c9:05:44:bb:7f:36:e5:bd:a1:98:65:31:
82:0a:71:be:99:bd:cb:b7:15:68:0b:b7:be:5a:ad:
b6:34:20:4b:fc:4e:b3:39:b7:ee:10:2c:23:90:97:
a2:2e:7e:23:f1:23:6e:76:67:5a:00:af:df:1d:c2:
b0:d3:79:81:9c:12:c8:a7:2e:86:fa:53:94:9d:97:
0f:c1:39:d4:a2:8a:79:1d:8e:9a:fc:51:86:54:68:
a5:4e:02:e4:89:8b:a3:20:20:f5:3b:8d:8a:ca:e2:
8a:ee:03:bd:fb:37:c3:76:04:cc:38:f9:fd:04:17:
86:fe:15:64:f1:3e:35:96:54:35:b1:81:e0:6b:cf:
e2:39:41:51:5e:b2:15:1e:14:08:93:3b:c0:72:af:
73:31:a7:a4:03:16:a7:a1:5d:a9:63:dd:5b:3f:37:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:B8:13:EA:19:A0:CA:FD:AE:EA:0A:70:81:C0:A7:B2:50:53:2D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/im-4E-oZoMr9ruoKcIHAp7JQUy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9c:05:f0:dd:3a:52:53:4e:db:9f:b3:7f:d3:b1:20:41:5c:
f9:73:48:8b:3e:ce:59:d9:83:70:c9:1f:be:6b:f2:d7:d4:af:
1e:49:cc:b1:11:c9:3d:6f:e2:74:bf:c1:ba:3b:74:34:91:75:
cb:af:d1:f3:0c:c5:af:e3:9b:fe:84:10:26:a8:64:97:8c:78:
c6:98:69:28:da:9e:b1:94:64:37:a4:4a:56:e5:ab:5e:7f:1e:
8d:78:26:eb:32:b2:d8:b7:f7:35:4b:5f:9f:87:3a:ee:28:10:
37:a7:33:91:c0:e2:3f:ac:4c:47:72:83:ba:b3:26:10:84:8e:
be:87:d7:3e:86:f4:ea:74:ba:76:27:79:c4:98:7a:95:28:c9:
c2:13:9c:6c:6e:58:97:27:3b:4d:60:aa:80:6d:64:8c:9f:06:
e2:ae:e5:33:52:d0:45:95:3b:16:f3:71:1c:34:85:cb:e2:f9:
07:1b:89:74:78:1c:83:76:9d:34:9a:7f:16:9b:67:46:57:1c:
3e:15:1a:ea:b8:c2:cc:4a:84:20:4a:12:00:65:d7:2d:c1:10:
b1:2e:52:a5:f1:2d:a1:e5:32:48:c1:90:02:d8:cc:13:51:2d:
0b:73:7f:cd:b0:d1:2e:44:2d:83:f4:32:1a:62:3a:fe:c4:f4:
8f:d8:2d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:04:01 2026 by rpki-client