Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-UJcX-jzZYiMZTqY_SpTqyE_CMI.roa
File: 1-UJcX-jzZYiMZTqY_SpTqyE_CMI.roa (raw, json)
Hash identifier: A3tPfxrN5kQovI8DYQsuQe1zUQ2SZu+OAd5T8LYzwso=
Subject key identifier: F9:42:5C:5F:E8:F3:65:88:8C:65:3A:98:FD:2A:53:AB:21:3F:08:C2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0198D2697B8C4202C4BC3BA3C8AFC4B1D2BC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-UJcX-jzZYiMZTqY_SpTqyE_CMI.roa
Signing time: Fri 22 Aug 2025 15:33:04 +0000
ROA not before: Fri 22 Aug 2025 15:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 163.5.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d2:69:7b:8c:42:02:c4:bc:3b:a3:c8:af:c4:b1:d2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 22 15:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9425c5fe8f365888c653a98fd2a53ab213f08c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:b3:f3:8d:a2:3a:7e:f2:d0:28:3d:77:8b:
b7:c8:06:02:e1:7b:8b:a6:94:88:b6:c2:db:fd:f2:
8b:47:b3:9f:26:ce:72:ab:08:14:ed:d1:32:30:f0:
c4:60:d5:a6:c5:3a:7a:da:6a:52:02:c5:c5:2c:00:
94:b6:1b:a6:02:6e:8d:95:ff:31:02:fa:0b:f8:9c:
21:a0:b1:21:2e:d4:9b:2d:7d:d8:d1:f0:a9:e5:63:
f1:af:fa:df:4e:5a:84:37:c6:f4:da:30:50:88:50:
77:55:35:29:51:8f:d7:bb:97:03:ef:c9:45:37:61:
ef:28:d2:22:c4:3b:62:5f:53:f5:5b:27:4d:f6:be:
49:0f:4a:8a:af:9d:fa:b4:09:69:16:af:59:b4:ad:
8d:95:5e:81:89:a8:3f:05:99:46:f6:ae:85:7d:71:
18:6f:90:60:13:cf:ae:0f:f7:93:e3:51:ac:cc:e6:
1a:0f:0e:c5:c4:f7:d3:e0:82:a1:53:08:4d:02:ab:
51:73:7b:37:7d:4d:85:08:ed:92:74:05:7d:c2:45:
65:d4:83:d4:c7:4a:e5:36:52:75:9f:73:5d:8a:66:
5e:60:a4:3a:e9:cb:f4:c5:3d:2d:87:26:02:bf:71:
f9:d8:8b:95:58:88:20:fc:fa:04:07:aa:04:ee:55:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:5C:5F:E8:F3:65:88:8C:65:3A:98:FD:2A:53:AB:21:3F:08:C2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-UJcX-jzZYiMZTqY_SpTqyE_CMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0/24
Signature Algorithm: sha256WithRSAEncryption
94:6f:e9:2e:0c:e9:8e:60:30:47:76:02:d5:30:94:d5:b8:9a:
c9:9e:f1:d6:6b:c2:87:cf:d8:45:e7:5a:2c:a3:9a:6b:af:a8:
da:d9:4c:97:7b:df:55:f3:c7:85:11:d9:41:2e:bc:c7:25:ca:
77:44:c4:d5:c2:33:97:6e:3b:ad:01:22:bd:93:36:ca:4d:d5:
48:aa:bd:64:f0:08:24:1d:06:e0:12:3e:68:1f:6e:6b:fb:4d:
74:57:c9:aa:df:64:b2:9c:b5:b0:81:4f:66:ec:d4:bb:96:bf:
48:89:fb:10:c0:5d:04:07:6c:7b:25:bd:27:31:d7:68:e2:48:
22:96:3b:10:56:2a:ef:bc:b4:d9:d9:f4:fc:75:c1:b9:30:56:
78:22:59:0c:f5:0e:28:d5:9e:b0:d4:92:4e:76:83:6f:a6:fd:
f7:01:1d:87:8c:6f:92:3b:c7:f5:8d:22:68:17:60:12:64:cd:
e3:c1:c4:1e:6a:29:23:aa:27:b4:2e:3c:2e:9c:a8:6a:29:3c:
c2:84:16:51:5d:cd:14:18:37:37:83:6a:91:12:c8:24:f7:6f:
47:00:17:f2:90:fb:a8:32:09:bf:0e:c9:76:1c:85:49:d2:0a:
79:94:ad:77:5f:39:41:c6:9e:fd:c0:91:0d:f9:d8:f8:b5:d9:
b1:03:38:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:58:39 2025 by rpki-client