Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tRRkthdJg9fS8BjuhdPXHuceQKg.roa
File: tRRkthdJg9fS8BjuhdPXHuceQKg.roa (raw, json)
Hash identifier: OI624iUmNtdF7Q+yJVOYxYLvN18XK5qXBvmvATJiKYk=
Subject key identifier: B5:14:64:B6:17:49:83:D7:D2:F0:18:EE:85:D3:D7:1E:E7:1E:40:A8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0EE015543696063ABBA92081A72A5E66C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tRRkthdJg9fS8BjuhdPXHuceQKg.roa
Signing time: Tue 29 Sep 2026 16:30:59 +0000
ROA not before: Tue 29 Sep 2026 16:30:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.16.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.41.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:01:55:43:69:60:63:ab:ba:92:08:1a:72:a5:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 29 16:30:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b51464b6174983d7d2f018ee85d3d71ee71e40a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:67:ae:d4:08:53:75:e5:d6:8e:55:38:a8:
5b:aa:92:41:bb:a9:87:a1:05:84:13:3f:8d:e3:ed:
2c:d1:c7:9f:3f:49:be:03:ef:43:bf:9b:ef:3e:dc:
8c:b1:e0:25:77:5e:1a:a8:d9:cc:fe:a0:bc:11:0f:
6b:f8:d1:14:a4:9c:9d:15:d2:a5:a0:f5:78:ff:0a:
a4:54:ef:06:46:db:70:8c:91:b9:4b:24:1f:6b:7c:
cf:c9:99:f4:69:6e:2a:e0:be:da:c0:46:9b:c0:3f:
bf:be:59:7a:66:7a:e3:9c:39:c7:78:46:56:b6:b1:
5c:c4:40:36:93:dc:6f:13:bc:27:d5:d5:ac:81:75:
ae:1e:c6:75:bf:09:d1:d2:6f:99:51:54:a2:98:25:
4f:24:df:76:5e:30:42:e7:30:0b:a9:e1:52:59:d0:
6c:0e:b6:ef:a1:fc:7d:29:6f:8c:49:61:48:4f:80:
ae:63:63:9e:ac:1f:d8:b4:65:9b:eb:6c:0f:26:3e:
cd:b7:df:7d:4f:a5:a6:c3:00:25:95:bb:46:da:f8:
c7:86:2a:43:a8:95:5e:25:68:d0:a7:f7:1d:60:fc:
08:46:76:16:22:56:bd:1f:e9:c6:fb:26:c8:b1:d2:
eb:a3:7a:61:5d:bb:1c:69:6a:17:52:b3:40:48:b9:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:64:B6:17:49:83:D7:D2:F0:18:EE:85:D3:D7:1E:E7:1E:40:A8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tRRkthdJg9fS8BjuhdPXHuceQKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.16.0/24
163.5.29.0/24
163.5.41.0/24
163.5.97.0/24
163.5.180.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:fb:e6:e2:c6:e2:02:b7:a4:30:c3:42:1c:77:7f:55:fd:05:
ae:60:b6:da:21:bc:ce:ba:20:46:47:2e:a5:33:3a:51:8b:ae:
26:be:a6:b1:6e:a3:ac:aa:e0:f1:72:a6:70:e7:a5:de:66:55:
67:aa:e3:4d:1b:37:73:7e:24:0f:c4:3e:d8:c3:26:71:65:10:
0c:f5:df:bc:f2:ed:3c:8d:0c:53:86:c8:d7:63:15:05:c9:a0:
f5:ec:77:e6:79:66:c0:88:5f:4d:92:57:61:9a:3f:83:24:f4:
6b:1b:78:f4:c8:6a:aa:7b:e6:8e:7a:1b:99:1b:55:17:14:5b:
31:20:38:ef:d6:52:15:37:0e:7d:ad:07:29:3e:c9:18:e5:d6:
15:f3:68:45:d4:3c:23:cf:5f:c5:fb:db:e2:07:0b:b5:cd:67:
d3:a2:9d:cc:64:d0:30:9e:a1:8d:bb:90:bd:52:4d:c2:37:7e:
5b:45:6a:c5:51:59:02:ac:6f:be:50:f3:a3:9b:ca:ca:62:dc:
ce:c3:e7:5a:9c:b4:49:23:ec:17:6c:5f:99:f2:8d:3d:49:c0:
17:28:81:24:70:89:f1:64:f1:20:a9:54:af:9e:4c:74:b0:d3:
3f:92:45:c7:5b:20:03:a1:8f:6d:b9:8c:82:c9:50:45:70:2a:
62:3f:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:58:25 2026 by rpki-client