Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z-7ay9e7tdpMG9aoe1ihBNdwOeM.roa
File: z-7ay9e7tdpMG9aoe1ihBNdwOeM.roa (raw, json)
Hash identifier: J9eX5wA3Ve2ZcK6ET0sk6O/qOUNwNfjqZy29viouDI0=
Subject key identifier: CF:EE:DA:CB:D7:BB:B5:DA:4C:1B:D6:A8:7B:58:A1:04:D7:70:39:E3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A053D498693F5502A875786BB29BDE0807
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z-7ay9e7tdpMG9aoe1ihBNdwOeM.roa
Signing time: Sun 30 Aug 2026 18:00:36 +0000
ROA not before: Sun 30 Aug 2026 18:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 163.5.114.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:d4:98:69:3f:55:02:a8:75:78:6b:b2:9b:de:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 30 18:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfeedacbd7bbb5da4c1bd6a87b58a104d77039e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:ca:bd:ca:e5:33:30:d0:3b:08:66:23:c1:
1e:0d:95:81:67:51:d5:12:18:44:b3:7d:13:33:8e:
c9:d2:3a:c9:aa:70:4c:54:07:27:58:62:50:5d:fb:
bb:66:95:d0:a6:bb:95:7b:f3:07:bd:c5:61:17:07:
cc:4e:39:51:7e:d7:b1:b2:12:7c:b8:31:35:1f:32:
05:14:0b:1a:4c:68:32:33:28:e8:f8:5c:70:6f:24:
b5:d6:43:ad:d9:d8:19:54:e7:3c:4e:b4:57:2b:31:
8f:b4:b8:fe:d6:b7:dc:20:85:0c:9f:4c:f8:a2:e0:
0a:8e:b7:42:47:eb:d3:49:8b:d7:f0:9b:3e:67:ef:
a7:f9:b9:0c:31:5b:fd:79:f0:ef:d5:86:bc:e6:04:
67:25:d7:e2:2d:f8:e7:d9:f5:78:00:62:2f:da:20:
b9:4a:5d:29:aa:a4:72:07:82:a6:6f:61:52:c4:35:
b1:c2:0d:b8:59:8b:25:61:fe:d8:30:f6:53:47:78:
fd:cf:94:b4:ac:89:3a:9b:9f:c2:61:3f:ad:df:f7:
9d:9e:1d:f4:8a:d9:1e:0e:d0:68:93:c4:bf:12:05:
0d:20:17:e6:c1:0f:0c:24:f4:51:6b:e6:14:81:6e:
a6:02:90:b7:cf:b7:b5:19:df:57:44:dc:48:67:ee:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:DA:CB:D7:BB:B5:DA:4C:1B:D6:A8:7B:58:A1:04:D7:70:39:E3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z-7ay9e7tdpMG9aoe1ihBNdwOeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.114.0/24
163.5.206.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f2:de:19:57:82:c1:a3:dc:1c:54:ba:18:79:d5:63:45:f9:
6a:1e:b3:7d:9c:d2:2c:cf:36:37:c4:2d:8c:64:1f:d3:8f:fa:
2d:af:22:eb:11:c3:40:c1:97:29:05:bc:d2:05:b3:d4:3a:72:
d3:e8:76:bd:bd:ac:27:51:7d:b1:da:ba:d7:3a:14:f8:0e:fc:
20:37:e3:0b:f2:15:78:4e:98:26:f0:6f:5d:14:d1:31:c5:f0:
9a:51:ae:f8:f2:0a:c5:db:3a:b6:a3:1c:c4:e7:48:be:53:5f:
34:a2:3e:ef:1c:aa:a8:cd:d3:94:5e:ba:ff:75:c8:a0:d7:e0:
10:8e:bb:37:2f:94:6a:33:24:a4:85:a9:27:74:24:2e:0a:b8:
85:2c:08:9f:77:37:16:0d:7f:7b:5f:a0:6f:4f:0e:5f:4d:96:
18:a9:a3:70:fb:38:0e:a7:21:1c:e1:35:d2:87:04:9f:35:a3:
1e:7c:98:05:b5:ad:bb:13:08:94:e0:5c:b4:07:0f:58:38:49:
48:e3:d5:b2:39:57:13:02:af:18:2e:32:86:5a:7c:c7:7b:17:
f8:e2:ca:b6:4d:0e:97:46:b8:62:28:6f:35:7b:ae:13:31:e3:
25:63:07:82:98:48:7c:04:31:fc:99:73:cf:2c:18:d7:29:0f:
62:01:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:29 2026 by rpki-client