Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vRQlZFrO5Y0X0hgc1mGUKrlegFI.roa
File: vRQlZFrO5Y0X0hgc1mGUKrlegFI.roa (raw, json)
Hash identifier: okxgXbQyD8LbSmPcaQgm3Z1AaXk+gdbvMpqwgnENQt4=
Subject key identifier: BD:14:25:64:5A:CE:E5:8D:17:D2:18:1C:D6:61:94:2A:B9:5E:80:52
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019EFB310898F426012F288C228F6B3B2DFF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vRQlZFrO5Y0X0hgc1mGUKrlegFI.roa
Signing time: Wed 24 Jun 2026 19:52:35 +0000
ROA not before: Wed 24 Jun 2026 19:52:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.46.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:31:08:98:f4:26:01:2f:28:8c:22:8f:6b:3b:2d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 24 19:52:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd1425645acee58d17d2181cd661942ab95e8052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:66:7f:c8:28:8d:33:8a:99:89:e2:a6:2d:
49:94:cd:9b:dc:12:e5:22:bb:1d:55:d1:6f:38:f8:
0b:c1:74:20:7f:9c:d1:eb:ff:88:e5:34:72:f0:df:
aa:34:47:eb:09:6d:d0:c1:65:1f:2a:88:0b:d3:53:
19:f8:22:ff:0d:63:ff:3b:19:5b:e9:93:bb:62:28:
5d:5d:be:e5:69:71:0e:c1:c4:e9:27:27:af:c8:0c:
41:22:b7:c1:3d:c2:43:8f:95:07:a6:58:40:f8:c2:
f6:7d:8f:7c:80:8e:5d:bb:a0:7b:07:69:17:3b:58:
0c:a8:a6:96:c7:ae:de:53:5c:71:7e:11:2e:58:68:
25:ea:0f:96:f1:70:d0:6f:5b:12:7e:11:14:72:50:
6a:da:e9:f8:db:98:aa:70:1d:6b:74:2a:bd:2e:01:
b5:0e:95:f1:05:0d:11:9a:6d:8f:d1:10:7c:d4:c9:
87:9f:58:83:7c:a8:eb:b1:c6:15:36:c2:dc:37:59:
30:48:e0:e7:e0:12:74:e9:24:b5:07:e0:88:9d:a5:
89:21:25:11:64:3f:3f:f1:5a:d5:da:09:39:d4:31:
e0:ea:10:72:10:7d:62:5b:43:95:9b:9e:7f:60:fc:
fc:9c:af:b1:24:b0:ff:3b:b4:41:7d:22:c8:e2:07:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:25:64:5A:CE:E5:8D:17:D2:18:1C:D6:61:94:2A:B9:5E:80:52
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vRQlZFrO5Y0X0hgc1mGUKrlegFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.46.0/24
163.5.82.0/24
163.5.101.0/24
163.5.119.0/24
163.5.223.0/24
163.5.227.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
5b:e5:44:70:a9:15:b4:fd:7b:ca:e1:ab:18:c1:87:b0:f3:93:
69:6c:b5:73:7e:49:1d:1e:88:7c:66:95:0a:0f:8c:65:8d:4a:
64:4c:4e:f7:93:a4:06:b8:73:a6:99:78:cf:cd:9f:92:70:47:
f0:f0:12:c3:72:84:c2:0b:21:99:1c:9b:3f:88:86:8d:1b:6f:
cd:71:0f:d0:35:cb:18:e1:a5:d0:2a:37:10:14:5e:0e:ad:e3:
9e:50:e1:06:87:69:44:8f:5d:05:dd:60:37:0e:5d:ef:d4:a8:
e4:0b:c1:96:7b:08:03:d4:c1:c6:cc:cc:08:61:a4:9a:a7:91:
ea:b9:82:80:3a:f4:14:e1:ad:c7:6c:0c:56:7d:01:bb:c8:5a:
66:b0:0f:53:e5:be:6b:e2:d1:a1:bc:1f:d4:db:75:17:f4:1c:
b4:53:fa:f1:be:81:60:8b:ad:57:f2:5f:13:ad:bb:67:bc:2c:
09:f7:41:44:cf:51:60:e1:b9:a8:2b:92:3d:1e:0b:5a:d7:2e:
12:24:66:b5:78:71:77:72:85:62:d0:d8:92:3d:02:a8:fe:fb:
2e:d1:49:69:7d:c9:50:af:cb:8b:9e:82:09:86:60:89:41:00:
5c:2f:09:ea:5d:a8:25:08:75:bc:e8:12:d3:52:29:0b:8d:f7:
dd:e6:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client