Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rLx4tkgjOs_fqDc7wHYI0kwOY3A.roa
File: rLx4tkgjOs_fqDc7wHYI0kwOY3A.roa (raw, json)
Hash identifier: M14PPf3t1o9V0rfDQEmn5ByDcUp6vePtylwt4tpUWgU=
Subject key identifier: AC:BC:78:B6:48:23:3A:CF:DF:A8:37:3B:C0:76:08:D2:4C:0E:63:70
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0199354B11870B16A444A2DC94F6C08C37F2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rLx4tkgjOs_fqDc7wHYI0kwOY3A.roa
Signing time: Wed 10 Sep 2025 20:22:16 +0000
ROA not before: Wed 10 Sep 2025 20:22:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:4b:11:87:0b:16:a4:44:a2:dc:94:f6:c0:8c:37:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 10 20:22:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acbc78b648233acfdfa8373bc07608d24c0e6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:9e:26:0a:56:68:85:b1:b8:67:26:b0:10:
1c:65:3d:1a:02:48:c4:37:c3:65:61:7c:ef:26:92:
3a:13:c5:d0:a7:cd:61:3f:3f:ff:8a:63:93:4e:ef:
60:1f:e6:7c:2b:eb:f9:b2:52:9e:74:c1:08:55:68:
ef:f0:9b:af:df:0f:87:ff:1f:0d:80:62:15:89:5b:
cc:57:f0:f3:d6:67:9c:8a:ef:9b:de:c3:ee:fe:9b:
07:0a:5f:94:9c:91:e1:2e:aa:1e:aa:54:54:f9:b2:
5c:34:ff:30:c2:82:78:8f:7b:36:30:cc:a8:fa:0b:
68:99:f4:56:fb:0f:87:92:2a:74:9d:63:3e:df:54:
39:c3:f2:a1:92:4e:ed:59:1e:bf:a5:61:1c:d5:ba:
eb:c4:4f:34:5e:3d:07:af:19:ea:9f:90:d0:09:a5:
bc:16:69:14:78:c6:de:f9:41:d9:a7:fc:74:bb:d5:
17:a9:b2:70:24:4e:10:77:a2:91:f1:21:19:50:87:
05:94:b7:00:25:43:7f:32:1e:8f:60:3d:40:c4:31:
2c:2a:a2:0f:12:fc:3c:48:9b:2b:13:02:30:97:fc:
a5:6b:8d:a8:06:06:d3:02:54:29:4d:80:f1:3b:57:
c6:fd:53:ff:1b:d4:26:1d:5c:f3:61:d2:4a:92:58:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BC:78:B6:48:23:3A:CF:DF:A8:37:3B:C0:76:08:D2:4C:0E:63:70
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rLx4tkgjOs_fqDc7wHYI0kwOY3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.106.0/24
163.5.136.0/24
163.5.157.0/24
163.5.186.0/24
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:41:25:b6:c3:fc:3d:6a:d9:6d:26:2c:7f:ca:98:a1:25:b7:
e7:ad:60:d0:6d:8c:b6:16:ba:d7:ce:80:a7:e1:bf:4f:a9:d8:
d8:fb:60:77:1e:6d:6b:47:18:83:16:f0:48:ac:a2:fe:08:bc:
b4:65:f6:f4:45:81:8a:34:1c:fd:17:f2:a3:4a:e7:2d:6e:42:
3d:96:3c:eb:88:4b:d1:92:ed:71:f3:19:89:2c:5a:21:54:e7:
0f:f4:4d:34:fb:43:f7:c4:b0:47:62:00:a7:27:bb:b2:9b:d8:
f0:e7:36:67:92:55:56:bc:79:20:54:07:b3:e1:b9:25:7e:52:
ee:23:31:e2:08:aa:6a:b0:39:6f:6a:05:42:77:f7:1c:a7:96:
c4:c5:45:10:df:e4:60:72:c9:e0:0e:12:c9:72:bc:52:56:5b:
81:c6:cf:49:cf:d3:a0:ef:47:e7:6c:87:0e:66:c9:d2:72:32:
10:8e:48:8d:4c:32:15:1e:62:96:ef:58:c0:e6:b1:69:52:16:
ec:db:c3:8b:7f:64:1c:3d:63:f7:6f:6e:f7:92:c8:94:fc:3e:
2b:6e:e3:db:6a:e4:14:a3:ac:0d:83:c1:b3:13:7a:20:a9:a4:
6d:29:26:fb:28:31:79:5f:84:98:d6:2e:8f:0d:3a:23:e9:f0:
c5:27:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:23 2025 by rpki-client