Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w8_esthnC6HI2B9V-zc8Z5CgFD0.roa
File: w8_esthnC6HI2B9V-zc8Z5CgFD0.roa (raw, json)
Hash identifier: /80eVy2wtBqqH4ek/1m5hObz+FM2W7eY0yNCQvWWbIg=
Subject key identifier: C3:CF:DE:B2:D8:67:0B:A1:C8:D8:1F:55:FB:37:3C:67:90:A0:14:3D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D9B94EC10703ABE9CAC5BB899061576E0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w8_esthnC6HI2B9V-zc8Z5CgFD0.roa
Signing time: Fri 17 Apr 2026 13:15:21 +0000
ROA not before: Fri 17 Apr 2026 13:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:94:ec:10:70:3a:be:9c:ac:5b:b8:99:06:15:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 17 13:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3cfdeb2d8670ba1c8d81f55fb373c6790a0143d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:b4:79:79:21:1e:2e:8c:7e:da:dd:31:1a:
72:d2:3c:42:56:8f:72:bf:b0:65:39:b0:ef:bd:d7:
ca:32:4c:60:cb:ef:51:64:2e:6c:02:46:63:f0:b9:
0b:89:0f:56:d5:43:96:5d:ef:e7:66:26:67:4c:7a:
bf:af:b9:43:ae:1d:89:e1:d2:ea:51:9d:71:76:08:
28:44:45:bf:6e:20:43:2e:93:32:8a:c4:07:76:15:
0c:76:38:7e:f8:6b:d3:52:56:b5:3b:cb:cf:2f:ee:
37:69:1d:b6:19:dc:1e:12:b2:4d:0d:9e:62:37:d9:
59:a6:e8:60:ed:2e:69:e8:aa:8b:d0:96:64:78:49:
14:e1:a5:88:00:ee:90:a6:9d:bc:2d:8b:0d:63:fa:
6c:7e:de:ce:36:f1:0f:e9:59:1f:6d:7e:af:fb:0b:
d8:3c:dc:9e:55:c1:a6:7a:94:c6:81:28:2b:a8:15:
96:15:a1:f1:3b:d1:b2:42:c0:cf:c7:e3:bb:a1:0f:
1f:30:ca:e0:96:e6:8d:44:07:72:9a:61:19:de:7c:
a1:c4:43:7f:00:07:39:b5:16:b8:a0:9f:83:ae:25:
9e:34:a5:7d:0e:9f:d1:c2:d8:33:36:73:03:a5:00:
18:dc:69:32:c5:6a:ef:6f:4a:75:52:8c:1a:d5:41:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:DE:B2:D8:67:0B:A1:C8:D8:1F:55:FB:37:3C:67:90:A0:14:3D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w8_esthnC6HI2B9V-zc8Z5CgFD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.39.0/24
163.5.60.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0/23
163.5.108.0/24
163.5.116.0/23
163.5.130.0/24
163.5.174.0/24
163.5.189.0/24
163.5.225.0-163.5.228.255
163.5.240.0/24
163.5.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3a:79:4a:c6:2c:8f:f5:a8:73:ab:8e:a2:d0:24:fb:0e:94:
52:94:64:fa:9f:86:92:27:d8:db:55:6d:99:e7:38:e7:0f:3e:
43:34:8c:0f:05:bd:49:0b:e2:b0:dd:f8:1b:33:de:8b:f2:9c:
a9:02:2b:8a:82:ef:85:c2:56:4d:e4:9f:8a:b4:90:ee:d0:5b:
82:16:bb:a3:95:9e:8e:05:27:be:d6:d9:df:6e:49:b3:c1:a3:
4b:de:9d:ef:df:69:7c:dc:f4:d6:0e:00:ad:64:0a:78:0a:7d:
e3:78:cb:b8:78:79:d4:1a:4a:6e:8f:8e:70:d1:21:93:28:42:
e2:e8:68:03:0a:37:22:2c:df:56:d4:2f:20:7b:52:71:f7:9f:
c2:ee:70:29:aa:67:98:68:17:b0:fd:f6:b4:8a:6a:f7:91:91:
f5:1d:7e:da:c2:1b:4e:2e:af:13:e5:fe:59:84:2b:6d:18:60:
88:5a:b6:eb:ee:20:ce:f4:a4:41:2e:4c:76:bb:7f:f7:c7:e6:
48:d9:59:69:34:71:93:7b:e7:ed:d3:0b:03:9d:b3:d3:1b:9d:
d6:a9:3e:4b:50:37:9d:a1:55:3b:26:97:6f:11:09:6a:e5:a8:
0a:97:ec:4e:d5:49:0e:c6:3a:6e:b9:19:aa:06:f1:e5:b5:12:
06:67:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:58:41 2026 by rpki-client