Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z2K2qG-VyWpVK2TghgJ8qvbNBuc.roa
File: z2K2qG-VyWpVK2TghgJ8qvbNBuc.roa (raw, json)
Hash identifier: qsbTPqplpyVvYZtSZF/OsqmM6Qj1hT8/fo3+iC3fIY8=
Subject key identifier: CF:62:B6:A8:6F:95:C9:6A:55:2B:64:E0:86:02:7C:AA:F6:CD:06:E7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A04A46DB8CCECDE5E04F31B20846CD35ED
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z2K2qG-VyWpVK2TghgJ8qvbNBuc.roa
Signing time: Fri 28 Aug 2026 21:29:12 +0000
ROA not before: Fri 28 Aug 2026 21:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 163.5.150.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:46:db:8c:ce:cd:e5:e0:4f:31:b2:08:46:cd:35:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 28 21:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf62b6a86f95c96a552b64e086027caaf6cd06e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:79:a0:12:ed:ec:c1:b6:8d:f1:bd:5d:a3:
0c:8f:d4:e0:63:0f:f1:c2:10:e7:56:fd:ec:ae:89:
6a:27:28:a6:46:32:02:6c:9f:6b:89:77:3c:1c:55:
f2:17:49:9c:72:dd:58:76:d2:0b:e2:4e:8c:a2:ad:
10:86:2c:a6:b2:02:44:3c:79:22:91:3c:0d:c8:d3:
2b:f4:54:c8:30:82:86:b2:36:e5:4d:c2:e0:42:4e:
eb:50:70:d1:44:2a:e9:fc:57:4c:94:21:f2:24:0f:
b2:7f:c6:ab:3f:2f:63:ca:0d:94:ce:83:be:df:02:
ec:db:50:df:65:9d:15:8b:ea:8b:a4:9f:6c:e3:5d:
0e:e6:ff:b4:35:35:12:a8:d2:83:0f:bf:ce:37:e5:
bf:f2:78:cb:e5:ff:de:05:71:e1:bf:6f:28:40:41:
3e:b4:30:b7:18:f3:50:a4:6e:9a:81:8a:9b:11:14:
b0:18:e0:b1:25:9c:e3:74:48:38:94:a6:b1:fc:04:
12:07:6a:e7:1a:b9:85:a1:36:97:33:4e:99:09:80:
73:8c:49:0c:9a:f3:06:5f:55:55:af:7e:0a:9b:4c:
f4:73:52:9b:b9:e5:86:6f:73:72:bd:95:2c:be:07:
e6:56:73:b4:44:fc:47:62:00:a1:1d:66:0b:86:74:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:B6:A8:6F:95:C9:6A:55:2B:64:E0:86:02:7C:AA:F6:CD:06:E7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z2K2qG-VyWpVK2TghgJ8qvbNBuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.150.0/24
163.5.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4a:2c:e7:43:fe:28:1b:48:15:97:da:f3:aa:e4:da:1c:32:
a7:cc:83:ee:7d:e5:63:c3:51:c8:56:17:7a:51:2a:81:57:d0:
ab:ee:43:07:ed:1f:3a:36:65:aa:76:35:3a:5e:de:7a:59:d9:
69:fb:0b:af:46:8e:32:0e:5b:98:62:37:ad:ec:92:bc:da:7d:
1a:a2:a6:e1:36:4e:94:62:84:b9:1e:9d:ae:5b:41:8c:63:48:
8a:7e:b9:c7:5b:a8:52:70:5d:ee:58:a6:7e:63:0a:9f:fd:4e:
72:a9:43:99:6e:6d:85:d6:48:00:5b:39:32:e3:c8:88:96:a2:
6d:d0:d5:c5:c8:7d:91:81:f9:b3:68:1b:0d:e1:ef:e8:7c:8e:
4b:f9:b6:43:b7:69:bb:b4:ee:b0:bd:4c:43:05:50:28:0a:f6:
0e:1b:60:47:35:7f:a7:8d:6e:cb:fe:0c:b9:df:1f:4e:0b:e9:
39:9c:3d:e8:94:ba:43:93:83:e0:38:72:0f:b6:95:67:63:3b:
f0:51:f8:a2:b0:df:49:52:f7:9d:14:65:85:40:b5:0d:79:6c:
3e:cf:76:da:86:89:f1:bb:9f:61:6a:24:c4:94:8d:37:0d:6a:
1d:cb:92:31:e9:1b:96:b5:6e:a4:a4:bb:4a:04:66:51:f8:a5:
c6:0e:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:37 2026 by rpki-client