Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oXrT-KSleFkygYQqJ0Jnj7xCmu4.roa
File: oXrT-KSleFkygYQqJ0Jnj7xCmu4.roa (raw, json)
Hash identifier: kSC8u2ObO2vq3F4GOiygDwrkFsW3VVCL3pSvfiPBkLI=
Subject key identifier: A1:7A:D3:F8:A4:A5:78:59:32:81:84:2A:27:42:67:8F:BC:42:9A:EE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01992E4399AADEB1878F1C2E1EC0311837A4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oXrT-KSleFkygYQqJ0Jnj7xCmu4.roa
Signing time: Tue 09 Sep 2025 11:36:46 +0000
ROA not before: Tue 09 Sep 2025 11:36:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:43:99:aa:de:b1:87:8f:1c:2e:1e:c0:31:18:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 9 11:36:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a17ad3f8a4a578593281842a2742678fbc429aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:88:d4:3b:6c:99:98:87:30:33:10:5b:1e:
1d:c1:4f:d1:16:2d:bd:08:d0:18:f4:7d:a7:db:4b:
8b:8e:15:6a:d9:c8:e9:5c:87:a6:0e:6a:30:93:b6:
de:bb:1e:e2:2d:b6:c6:a1:2f:1e:ae:fd:2a:c3:5d:
4f:e5:46:92:6f:b2:32:fc:2e:db:6b:0a:b7:c1:2d:
29:db:bf:8b:79:0f:3c:4e:19:7f:7e:4f:14:9f:89:
cc:17:ac:b1:1f:8f:6c:a1:11:b1:5a:bc:90:24:8e:
7d:7e:ea:e7:f9:04:15:0b:16:47:c6:6a:ac:8b:b9:
aa:b4:18:e6:d1:fa:56:af:15:5b:74:a1:af:14:5f:
cb:ea:4c:d5:21:b8:7e:b6:78:bf:28:0a:f0:a6:82:
10:c5:88:a8:32:e8:73:b1:94:c0:5f:34:74:87:4c:
25:1d:b9:44:83:cd:f9:ec:33:7c:26:56:4f:af:c8:
c3:01:a4:68:5a:51:90:79:87:57:cc:9d:e2:f3:84:
5f:da:49:5f:fa:62:84:2d:54:91:71:21:9f:d7:bc:
cc:d9:2a:c5:61:11:e0:45:68:19:92:5c:4a:99:75:
d1:e0:84:0d:4e:c1:8f:53:ea:4b:5c:5b:40:27:48:
a3:b7:f9:87:b9:37:c3:48:4b:95:7e:4c:41:9f:76:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:D3:F8:A4:A5:78:59:32:81:84:2A:27:42:67:8F:BC:42:9A:EE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oXrT-KSleFkygYQqJ0Jnj7xCmu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.153.0-163.5.154.255
163.5.177.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
76:16:c5:48:22:0e:05:6c:90:75:88:19:c4:8d:1a:68:f8:49:
21:84:34:ac:e6:67:1a:63:a0:b4:6d:83:3b:ab:89:16:8d:bb:
45:d0:98:3f:f7:c8:12:83:0c:ea:92:27:cb:67:f0:02:e0:ac:
34:be:47:04:bb:41:15:90:95:34:f4:a6:8b:a7:b9:e5:f3:6a:
62:47:77:0c:05:2b:93:ee:f3:3a:c8:64:c2:3f:25:83:21:fd:
0f:a1:02:72:39:43:78:c9:b5:07:42:5b:0a:c1:d5:6d:60:a6:
2f:f7:73:dc:00:b0:d9:4c:85:1f:b4:34:6c:58:90:5a:0d:96:
26:f4:67:c4:61:4d:04:6c:65:c5:d7:c0:b8:17:57:60:97:63:
73:b1:5f:c2:46:d9:1c:52:c6:7b:b2:b4:01:d5:6f:26:5c:49:
59:5e:cb:05:e3:74:15:69:a4:ee:18:7a:75:38:47:93:4f:d7:
ad:de:66:7e:9c:2e:39:64:39:20:22:c6:11:63:21:36:15:5f:
ad:a6:8b:52:b3:79:06:fd:38:37:e8:e1:23:5c:67:a4:5d:71:
fa:64:7f:b3:67:34:3f:73:7b:3f:56:84:03:43:39:68:be:57:
b9:6e:d0:93:85:60:0a:07:a3:b8:a7:b7:49:ff:84:ea:f4:bb:
9d:d3:83:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:40:20 2025 by rpki-client