Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/15_9G-8Nt-mUxpH6qYM2rHJXy1M.roa
File: 15_9G-8Nt-mUxpH6qYM2rHJXy1M.roa (raw, json)
Hash identifier: zp9PNiD7z2VvIAE7pFR1AHo5md8ch8CGHIZSiHDLtsw=
Subject key identifier: D7:9F:FD:1B:EF:0D:B7:E9:94:C6:91:FA:A9:83:36:AC:72:57:CB:53
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DE83AEFE02B66F6735704B85B39A6EBC9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/15_9G-8Nt-mUxpH6qYM2rHJXy1M.roa
Signing time: Sat 02 May 2026 10:27:49 +0000
ROA not before: Sat 02 May 2026 10:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 163.5.51.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e8:3a:ef:e0:2b:66:f6:73:57:04:b8:5b:39:a6:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 2 10:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d79ffd1bef0db7e994c691faa98336ac7257cb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:96:d4:ca:2d:b7:cb:73:70:9f:ec:f1:b2:
7f:80:d7:89:ad:b3:30:f9:40:6e:4e:1e:e4:51:5a:
fb:47:0e:e6:6f:c2:f9:5c:4d:26:8c:15:8d:0d:24:
dd:db:dd:37:4e:1c:82:66:3c:67:40:87:4e:af:90:
63:16:d8:2c:9e:84:64:2e:1b:01:46:a2:4d:0c:7e:
a5:a8:d6:be:e7:f8:8a:21:3b:db:be:bd:84:39:6e:
a4:09:b3:c2:9a:5c:f3:6e:22:5d:d8:ef:e2:cb:a4:
fa:b2:e3:12:bf:bb:ed:f6:c4:0d:eb:56:13:2f:3a:
ef:71:3e:f6:ed:5e:41:4c:82:e5:f6:35:41:45:cd:
c6:40:35:99:32:60:5f:a5:13:7c:9a:0e:2c:f8:9c:
02:ed:f6:82:31:ec:34:bc:41:81:84:78:e5:6a:96:
bc:05:2c:67:59:cf:ae:71:a2:b2:ff:7f:8a:50:a6:
78:28:81:c4:35:32:43:f8:ec:0e:f0:c3:d2:0a:09:
31:aa:ea:a0:ad:6a:c0:a6:7f:f2:e4:6e:ae:68:52:
c4:77:7c:b6:35:80:76:19:c2:b2:3a:b6:a1:2f:d1:
d9:b6:b8:ef:4b:bb:ff:62:47:71:1c:0d:8e:79:26:
c2:cf:c4:be:d1:94:04:1c:0e:e5:97:7c:14:c5:56:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:FD:1B:EF:0D:B7:E9:94:C6:91:FA:A9:83:36:AC:72:57:CB:53
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/15_9G-8Nt-mUxpH6qYM2rHJXy1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.51.0/24
163.5.131.0/24
163.5.134.0/24
163.5.231.0/24
Signature Algorithm: sha256WithRSAEncryption
60:99:3d:6b:5e:f5:42:54:4e:51:b3:68:9c:c8:12:1c:ff:af:
80:36:64:40:07:60:0e:9a:c1:c0:69:db:25:b0:5d:0d:53:14:
58:61:37:27:7d:55:81:67:7d:15:7d:32:81:8c:9c:e0:e3:69:
ae:1c:10:5c:b3:c1:38:cb:1b:8a:4e:34:f7:f1:e9:7b:5f:ff:
1d:9d:bd:fa:c8:d9:42:2f:8f:96:06:c1:1b:e5:85:29:67:20:
7e:87:94:18:a3:a7:9a:14:b2:c6:bc:eb:02:1a:75:17:ed:a8:
79:99:ea:b9:37:ab:37:64:b5:f4:90:f6:51:66:d7:ea:78:88:
34:55:dd:ff:e2:62:14:b1:06:47:ab:73:c2:a3:15:03:3a:6e:
2e:23:13:ec:00:d4:2d:0c:e6:b9:6d:2a:7e:84:00:b6:3e:cf:
87:7b:2b:fc:48:73:ef:f8:f8:2f:3d:6e:54:b0:1b:4c:88:80:
5c:bf:57:49:c0:41:c2:63:fe:d1:1d:d8:3a:1f:d7:13:1d:0a:
6c:33:60:22:fb:e3:ce:f4:14:cc:a8:39:2a:dc:98:b9:92:87:
6f:28:a0:24:b9:d4:c1:11:60:ab:51:c1:c6:f9:3b:73:85:00:
c4:c1:9b:f4:4f:b4:49:f9:9e:5b:cd:48:a0:c3:fd:23:6a:4e:
d1:86:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:29 2026 by rpki-client