Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wP88-eaQEolBO8CcpQiJDdC_SfU.roa
File: wP88-eaQEolBO8CcpQiJDdC_SfU.roa (raw, json)
Hash identifier: XN8PaCvBqfx7ZqEySTs8CpsdnEXbQDZUf4nE8XfH3Y0=
Subject key identifier: C0:FF:3C:F9:E6:90:12:89:41:3B:C0:9C:A5:08:89:0D:D0:BF:49:F5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F48708FE9AB53C1F557886C781C7CE4E1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wP88-eaQEolBO8CcpQiJDdC_SfU.roa
Signing time: Thu 09 Jul 2026 19:52:44 +0000
ROA not before: Thu 09 Jul 2026 19:52:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.59.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:70:8f:e9:ab:53:c1:f5:57:88:6c:78:1c:7c:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 9 19:52:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0ff3cf9e6901289413bc09ca508890dd0bf49f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:63:b1:db:af:0a:9a:7a:6b:04:34:60:6d:
18:7f:d3:5c:9e:97:e1:11:b3:76:bd:06:44:3e:01:
ed:de:4a:75:37:57:68:9c:92:cb:59:a7:8b:28:e9:
22:76:37:4a:71:25:f0:96:9c:1c:eb:d5:2c:63:7e:
96:76:0d:67:90:78:b1:1c:46:3a:73:d2:8a:ef:45:
e6:82:c8:2d:4d:5d:84:ed:c9:98:d9:9e:74:51:65:
99:39:8b:ef:64:d6:94:2d:c1:42:37:16:c4:51:d6:
b4:19:63:a1:a9:19:06:91:b5:23:0b:30:e6:7c:8c:
e9:3d:c2:7f:3b:77:45:91:c9:b1:12:c0:ae:d0:83:
15:a5:64:4f:46:b2:72:79:b5:59:71:93:48:58:2c:
79:d1:b6:44:7c:b1:e0:36:96:ba:04:3c:04:8d:6d:
64:74:17:ae:e6:9f:23:9b:e7:6b:38:89:25:70:cf:
03:85:03:40:cc:40:63:49:56:ac:d8:10:89:88:7a:
27:57:8c:8c:dc:55:5f:5b:e7:c1:4a:da:14:8a:fd:
35:8b:4d:a0:4d:01:b7:c3:18:d8:35:b6:b0:ed:55:
51:ff:f5:3c:56:5a:cf:c7:23:aa:80:48:b0:30:65:
15:4d:10:98:36:53:27:20:90:a6:16:97:77:c8:de:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:3C:F9:E6:90:12:89:41:3B:C0:9C:A5:08:89:0D:D0:BF:49:F5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wP88-eaQEolBO8CcpQiJDdC_SfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
163.5.90.0/24
163.5.97.0/24
163.5.112.0/24
163.5.120.0/23
163.5.125.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.204.0/24
163.5.215.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fe:4a:ff:1f:55:6b:bc:66:13:e6:15:4d:2f:48:76:e2:71:
92:b9:df:f8:9a:3d:54:25:84:5d:ed:9f:6a:0e:1e:d5:d1:37:
b4:88:52:db:c7:a5:9f:96:d2:4e:51:34:db:b1:81:81:31:73:
d9:80:c5:7a:44:04:e8:8b:59:7e:ca:78:62:4a:28:e9:0d:21:
7b:78:71:33:f1:1c:51:8c:d5:c7:08:3b:63:ab:d2:3e:6c:2a:
aa:72:7a:83:7b:9a:7f:6c:87:35:26:ae:4b:17:4a:81:4d:39:
7d:10:69:8e:f2:93:4b:61:c3:64:fd:44:f2:0a:75:d9:39:06:
88:be:96:a6:8e:3f:c9:ca:73:07:9f:85:f1:c2:6e:15:63:62:
96:66:c8:c5:44:6c:5e:4a:99:9d:99:ae:8f:8a:77:7a:8c:a3:
c4:5d:b2:dc:97:c9:38:7e:ed:3e:ea:b4:a9:cd:c4:2c:33:80:
1b:81:bb:f9:48:64:56:8a:9d:2a:57:4c:07:48:bc:9b:42:b2:
f3:ba:43:5f:86:7e:a0:8b:19:cd:02:ae:be:79:33:e0:ca:ce:
09:ce:f2:d0:26:67:48:1d:07:61:be:5e:00:5a:18:6a:29:d0:
94:30:af:93:e8:e7:88:3c:9f:c6:09:07:71:58:ae:c7:04:8d:
a7:ff:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:50 2026 by rpki-client