Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ptjayhw3t5GSyLLUHf0E_vPBOO4.roa
File: ptjayhw3t5GSyLLUHf0E_vPBOO4.roa (raw, json)
Hash identifier: CEq0glpSBhqt3TaFCfmvZxKI0zbFkF+G0drQTr5nXsc=
Subject key identifier: A6:D8:DA:CA:1C:37:B7:91:92:C8:B2:D4:1D:FD:04:FE:F3:C1:38:EE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F5B49639FDB1FD2D539F9AB6FFD106262
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ptjayhw3t5GSyLLUHf0E_vPBOO4.roa
Signing time: Mon 13 Jul 2026 11:42:44 +0000
ROA not before: Mon 13 Jul 2026 11:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 163.5.43.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:49:63:9f:db:1f:d2:d5:39:f9:ab:6f:fd:10:62:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 13 11:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6d8daca1c37b79192c8b2d41dfd04fef3c138ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:e1:c6:41:20:87:5a:65:47:e0:9e:0f:07:
25:93:60:44:b8:74:0a:90:e0:55:1e:f1:1b:5a:13:
9d:1f:40:29:c2:46:be:f8:4b:3e:1a:0a:f1:61:81:
f9:d4:4c:78:3e:6d:03:fc:da:17:5e:50:08:a5:35:
39:e4:44:91:c7:b5:dc:ba:39:0a:01:14:86:b7:e8:
79:6c:e2:ed:af:5f:c3:4e:fd:be:1a:ff:2f:15:dd:
c3:83:11:94:9c:a3:fb:1f:02:84:a5:94:16:7b:76:
1a:7f:a4:2d:bb:cb:6a:c9:9c:44:00:3f:50:22:5d:
70:ac:2f:1e:85:fd:db:5a:a4:6e:de:80:c2:0a:26:
78:e5:aa:23:ee:24:dd:b4:d9:79:7b:7f:84:68:a8:
e7:0c:5f:b5:05:0a:b9:7d:e8:bb:d9:11:b9:4c:aa:
45:65:c2:6d:2b:19:d8:f0:3e:d9:68:9d:97:74:a3:
55:1f:29:e8:60:0e:05:25:51:5e:55:0b:61:99:6c:
e5:7d:ec:53:26:03:27:41:7e:a1:d4:ed:07:87:0c:
c7:04:1a:14:2e:a0:5f:8e:e7:ab:82:9f:97:e4:9b:
5b:9f:1b:ca:65:95:b8:e2:1f:b3:7a:17:55:09:25:
d3:6b:f7:0d:15:a3:64:b6:25:de:11:19:c8:2a:cb:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:DA:CA:1C:37:B7:91:92:C8:B2:D4:1D:FD:04:FE:F3:C1:38:EE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ptjayhw3t5GSyLLUHf0E_vPBOO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.43.0/24
163.5.66.0/24
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a0:b8:52:ec:e4:fd:d4:e0:44:00:a4:a7:17:54:19:96:40:
ac:df:3b:4f:6e:30:96:7f:9e:fc:a9:e1:3c:94:d1:20:a5:7a:
e9:7b:95:62:85:f8:98:aa:92:3f:87:4b:28:75:76:69:e7:4d:
8d:e7:7e:46:11:f7:42:ee:97:9c:96:37:63:d8:7f:f2:d1:cd:
d7:e1:a4:cc:ed:f2:b8:81:30:04:5b:e8:a9:34:7d:79:eb:e2:
04:82:1b:17:22:07:11:a7:ff:86:be:f2:a0:f0:a0:b8:43:63:
c8:35:75:92:a2:c4:42:19:0b:95:4c:98:db:69:22:18:10:1b:
3d:6c:1c:07:6c:e0:ef:a3:2b:14:7f:33:ef:bd:df:cf:16:90:
78:49:ed:9d:9f:9d:0c:cc:02:f9:96:78:8e:50:f7:6e:17:e3:
c8:d9:48:a5:de:3d:b8:a6:66:38:09:12:73:ae:21:44:50:bf:
dd:f8:fb:74:2e:2c:86:c6:8c:8b:8c:03:5e:ca:3b:d5:4e:98:
90:03:d5:b4:23:58:05:92:56:a2:5a:41:82:e5:e6:83:7c:1a:
ba:cc:78:08:fa:64:a0:0f:3a:0d:09:3d:47:6c:e8:ff:6f:17:
3b:a2:f9:7a:8e:1f:a5:aa:d9:b1:e4:50:bd:a7:5f:5d:20:95:
4f:3f:0f:7d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9bSWOf2x/S1Tn5q2/9EGJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNzEzMTE0MjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ4ZGFjYTFjMzdiNzkxOTJjOGIyZDQxZGZkMDRmZWYzYzEzOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvjhxkEgh1plR+CeDwclk2BEuHQK
kOBVHvEbWhOdH0Apwka++Es+GgrxYYH51Ex4Pm0D/NoXXlAIpTU55ESRx7XcujkK
ARSGt+h5bOLtr1/DTv2+Gv8vFd3DgxGUnKP7HwKEpZQWe3Yaf6Qtu8tqyZxEAD9Q
Il1wrC8ehf3bWqRu3oDCCiZ45aoj7iTdtNl5e3+EaKjnDF+1BQq5fei72RG5TKpF
ZcJtKxnY8D7ZaJ2XdKNVHynoYA4FJVFeVQthmWzlfexTJgMnQX6h1O0HhwzHBBoU
LqBfjuergp+X5JtbnxvKZZW44h+zehdVCSXTa/cNFaNktiXeERnIKsszAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKbY2socN7eRksiy1B39BP7zwTjuMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcHRqYXlodzN0NUdTeUxMVUhmMEVfdlBCT080LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowUrAwQA
owVCAwQAowWdMA0GCSqGSIb3DQEBCwUAA4IBAQAFoLhS7OT91OBEAKSnF1QZlkCs
3ztPbjCWf578qeE8lNEgpXrpe5VihfiYqpI/h0sodXZp502N535GEfdC7pecljdj
2H/y0c3X4aTM7fK4gTAEW+ipNH156+IEghsXIgcRp/+GvvKg8KC4Q2PINXWSosRC
GQuVTJjbaSIYEBs9bBwHbODvoysUfzPvvd/PFpB4Se2dn50MzAL5lniOUPduF+PI
2Uil3j24pmY4CRJzriFEUL/d+Pt0LiyGxoyLjANeyjvVTpiQA9W0I1gFklaiWkGC
5eaDfBq6zHgI+mSgDzoNCT1HbOj/bxc7ovl6jh+lqtmx5FC9p19dIJVPPw99
-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client