Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oFmEFvqOnst19I3JopMjzDn-Gxo.roa
File: oFmEFvqOnst19I3JopMjzDn-Gxo.roa (raw, json)
Hash identifier: 0QyVMCQxhn8c/OOV4zeSzF0LBPdaG+OalPXO4x6g08M=
Subject key identifier: A0:59:84:16:FA:8E:9E:CB:75:F4:8D:C9:A2:93:23:CC:39:FE:1B:1A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0198A94281A3D2DC85C6F102BD2B6E9DCA31
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oFmEFvqOnst19I3JopMjzDn-Gxo.roa
Signing time: Thu 14 Aug 2025 15:46:04 +0000
ROA not before: Thu 14 Aug 2025 15:46:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.140.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 15:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:42:81:a3:d2:dc:85:c6:f1:02:bd:2b:6e:9d:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 14 15:46:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0598416fa8e9ecb75f48dc9a29323cc39fe1b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:f1:15:f9:3a:84:6a:ff:4c:1f:44:75:ca:
4b:9e:ef:c4:61:8b:4e:93:19:07:6b:17:8b:56:da:
01:18:4c:84:d3:44:9a:1e:05:12:21:0b:97:27:ee:
5a:91:60:f3:c8:7b:37:c8:f1:98:5a:36:2e:0a:ca:
6d:df:5b:e8:e1:bb:81:2d:c5:ca:e1:22:c1:fc:cc:
32:bb:6a:bf:f1:34:1a:f9:f8:0b:7f:e3:b9:59:2b:
b2:9d:f7:ca:bd:00:9d:f2:7c:8e:73:5a:1b:c8:5e:
54:1d:c7:b0:72:c7:43:6a:77:89:ea:e6:a3:ae:13:
a4:43:d6:79:36:2c:28:22:f9:e4:1a:a1:ca:c4:10:
31:a6:94:d7:86:64:cb:ed:be:2d:0e:4b:66:a0:57:
c1:0d:7e:00:f0:aa:e8:8d:c5:bd:fe:05:28:53:8d:
68:3e:7c:78:2b:1d:98:6e:8e:fd:19:05:ed:62:42:
77:72:3c:8c:2d:67:e8:1a:23:d5:6d:ff:59:f9:1d:
ae:e2:aa:41:65:4d:51:53:88:1b:4b:19:dc:18:a9:
bb:37:e0:25:d7:97:ca:89:ea:a8:9f:21:4e:f8:59:
59:05:e5:da:f2:f0:8b:4f:ba:99:5a:b3:d8:9b:82:
71:26:1f:89:b5:28:7c:14:29:00:f1:af:7b:a8:bf:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:59:84:16:FA:8E:9E:CB:75:F4:8D:C9:A2:93:23:CC:39:FE:1B:1A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oFmEFvqOnst19I3JopMjzDn-Gxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.140.0/24
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4f:ce:d9:20:c2:b7:05:93:68:ef:22:fb:04:3e:85:95:52:
42:b6:a5:40:56:07:78:36:f7:f2:8e:e2:8a:b4:4f:a3:1d:e1:
00:55:60:c0:71:25:64:ef:5a:34:fa:4c:95:6f:c7:54:6a:0c:
30:61:a9:25:a1:1e:1b:8b:d6:5d:04:c7:d0:d8:07:84:9f:33:
e6:28:31:04:85:dc:1a:10:fe:ba:72:e2:7b:a9:79:ef:1b:06:
a9:0b:52:20:70:bd:a1:13:97:31:4c:15:fb:66:20:41:86:4b:
51:2f:44:8e:43:91:fa:1c:ac:b3:45:8a:78:46:6e:bc:79:97:
2c:8c:94:53:b8:28:36:b2:50:f0:ae:51:f8:f0:6b:3d:35:31:
02:50:d5:a3:b8:21:75:90:69:b4:de:84:e1:b0:71:d9:85:d1:
41:2b:65:3b:6c:41:ba:4b:50:14:12:09:39:44:fb:79:f5:96:
0a:6f:a0:30:c0:bc:6d:72:d5:e1:ab:14:fe:be:81:6c:89:6c:
e7:ce:3c:f9:6d:c5:d1:7a:1d:7d:44:7d:c9:cd:65:d9:f9:1d:
ba:fe:93:77:d2:39:11:3a:0c:87:9d:c0:6b:c4:d5:77:23:57:
9d:f8:ed:f4:4e:fb:e3:4f:77:08:d0:c6:1c:2c:68:b5:02:fa:
34:3d:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 18:51:54 2025 by rpki-client