Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rtSr5rXCtCj3mDI80chw9xMtFiY.roa
File: rtSr5rXCtCj3mDI80chw9xMtFiY.roa (raw, json)
Hash identifier: 8cJFmNkFDfBVNvY5IytkhLI1kuFaXmLRBAtjGoNLvF4=
Subject key identifier: AE:D4:AB:E6:B5:C2:B4:28:F7:98:32:3C:D1:C8:70:F7:13:2D:16:26
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0D84CEBFC340DD1652BB7A0C19D8C9382
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rtSr5rXCtCj3mDI80chw9xMtFiY.roa
Signing time: Fri 25 Sep 2026 11:21:54 +0000
ROA not before: Fri 25 Sep 2026 11:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:4c:eb:fc:34:0d:d1:65:2b:b7:a0:c1:9d:8c:93:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 25 11:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aed4abe6b5c2b428f798323cd1c870f7132d1626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:13:70:e6:cb:9c:8c:d0:e5:e4:24:ff:b1:e7:
ad:3a:61:02:3f:6a:6d:de:d8:e5:5e:19:00:56:76:
ac:2b:97:b4:50:e5:38:c2:f0:7c:63:4a:48:b4:ec:
38:6e:5e:7f:6e:59:80:9f:64:a5:aa:15:4a:6b:56:
3b:f3:2f:74:a3:a0:5c:f9:3a:28:52:f3:d0:50:23:
d8:03:d3:74:94:81:fb:82:49:9e:bb:09:a6:6f:41:
0e:e1:70:03:49:c7:8f:3b:8c:77:f7:99:fe:1f:84:
46:ac:36:3e:f3:c5:f8:46:fb:ff:f7:1c:cb:a6:a8:
8a:62:62:72:4a:44:c7:a4:87:ca:a0:0f:60:c1:63:
19:87:36:cd:78:8b:c2:55:15:c2:21:5f:d1:0a:75:
03:10:67:30:90:b6:25:38:ad:55:f6:57:f7:ce:95:
5f:93:d7:77:64:8b:4d:5a:9a:55:99:35:e2:b8:43:
6f:c8:f4:22:d7:ba:0d:cb:47:3e:d7:82:71:a6:db:
45:f3:4a:3a:af:05:0f:22:8a:46:6b:70:29:58:5d:
49:2e:2f:c4:24:90:5d:05:86:97:b9:54:1a:76:ae:
fd:c8:8b:2a:dd:5e:06:ed:a0:60:f1:cc:fb:1b:7d:
ad:31:c5:04:ab:ef:84:f1:25:5e:6c:bc:2a:75:78:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:AB:E6:B5:C2:B4:28:F7:98:32:3C:D1:C8:70:F7:13:2D:16:26
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rtSr5rXCtCj3mDI80chw9xMtFiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.54.0/24
163.5.56.0/24
163.5.59.0/24
163.5.112.0/24
163.5.114.0/24
163.5.121.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.200.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.238.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:69:50:ec:84:9f:2f:e1:c5:50:3f:3b:01:af:42:59:cc:00:
2f:76:d4:52:32:3c:c0:6d:15:51:24:2d:43:c5:b9:cb:01:de:
e3:a2:64:c4:ce:9d:fd:ef:96:85:8f:86:6e:ba:d7:50:73:f3:
e3:80:99:93:f4:87:22:b6:e7:f7:86:7d:4f:42:72:52:96:ed:
c8:57:ca:fd:59:80:ea:9c:34:2d:b6:4c:7b:82:26:4f:83:d7:
9a:42:6f:4e:3b:5f:d9:02:af:79:d0:c3:72:6e:ed:b5:57:25:
a0:a5:95:bc:b4:56:c1:a5:5c:a2:97:8d:d4:4c:4a:1b:38:83:
3e:03:74:26:e5:96:20:5d:98:15:3d:97:0c:43:a2:1b:7e:7f:
90:27:5d:56:47:2b:9a:ba:63:94:d2:9a:a3:d4:1d:54:2a:bd:
8e:f2:97:99:8c:ff:44:8f:a9:70:26:a1:71:ea:8d:f3:2f:75:
db:74:84:00:8c:4c:a2:5d:c9:f2:3a:f8:71:b9:cd:86:46:b1:
86:e9:e4:84:ba:58:e9:bf:79:43:dc:28:94:ce:f7:1a:36:ff:
b2:1d:1d:e8:48:8d:21:d9:f8:7a:37:fe:45:ee:96:7d:8b:b0:
42:16:e1:bc:1f:47:15:0c:32:80:9e:8c:cf:0f:58:7d:34:90:
d4:07:2f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:53 2026 by rpki-client