Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7zsW48-SiEPTUY16tCCdTIYiyF0.roa
File: 7zsW48-SiEPTUY16tCCdTIYiyF0.roa (raw, json)
Hash identifier: Ho+Q7NDrl0rFCxoVShRAZo9yeztv6VR+DC+NPv5QCYQ=
Subject key identifier: EF:3B:16:E3:CF:92:88:43:D3:51:8D:7A:B4:20:9D:4C:86:22:C8:5D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F8F71E999DF22E341CE2AA43F3D4ADDFA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7zsW48-SiEPTUY16tCCdTIYiyF0.roa
Signing time: Thu 23 Jul 2026 14:47:14 +0000
ROA not before: Thu 23 Jul 2026 14:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.49.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:71:e9:99:df:22:e3:41:ce:2a:a4:3f:3d:4a:dd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 23 14:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef3b16e3cf928843d3518d7ab4209d4c8622c85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:60:96:16:2c:f7:fb:b9:c7:c4:69:e8:11:
75:34:ce:33:0a:dd:c8:13:e4:60:0f:8f:ea:c4:e5:
b7:f9:7d:cb:4f:13:8c:cc:5b:52:d2:dc:06:85:eb:
94:37:b6:53:40:14:d8:4f:a0:45:86:e2:eb:da:76:
5c:ce:3d:0e:bb:f3:97:80:8a:7e:c8:ab:0c:54:8b:
45:58:be:c9:d3:30:35:17:32:7f:77:b8:61:06:38:
8d:8a:42:95:7e:f8:66:b8:84:53:62:bd:87:e4:7a:
7f:7c:61:45:2a:18:22:5d:8a:72:48:f8:2b:10:fa:
7d:2f:76:33:9c:99:39:23:a9:43:60:fc:85:61:32:
66:73:48:0e:c7:01:01:a4:e4:80:83:ae:22:58:7b:
aa:6f:46:fa:3e:95:4e:96:a6:6a:34:d5:03:b6:71:
15:69:17:80:1c:c0:ba:f5:d7:5a:b2:37:26:72:73:
5c:0a:fb:cd:7a:51:6b:6a:b1:43:d7:25:3b:26:66:
e1:27:48:9b:5b:d1:34:c8:30:ab:19:72:6a:9d:3f:
ad:e4:96:cb:ee:5a:85:55:7e:c2:c9:10:f7:77:7c:
a8:cf:73:ed:f2:fe:b8:f3:c3:a7:77:fe:0a:a4:7a:
f8:8c:7f:22:bc:33:48:2a:3b:4c:4d:79:91:6b:ad:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3B:16:E3:CF:92:88:43:D3:51:8D:7A:B4:20:9D:4C:86:22:C8:5D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7zsW48-SiEPTUY16tCCdTIYiyF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.49.0/24
163.5.182.0/24
163.5.206.0/24
163.5.226.0/24
163.5.237.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4c:00:8d:7b:c7:60:1c:c2:9a:1e:c3:1e:42:f3:39:10:06:
db:4a:88:b4:f3:c3:73:45:f9:f8:50:94:e1:cd:a4:ca:d9:8e:
b0:3d:d0:ce:8c:c9:5a:88:c3:49:2f:fe:26:b2:f4:36:84:5d:
1b:8e:c8:65:fc:4d:8e:a5:07:02:cc:d3:af:be:c8:17:5a:ef:
34:b7:63:13:81:6f:03:1a:8f:33:e1:fc:89:56:2b:ee:24:63:
e7:4f:2d:9a:4a:44:ce:e9:f6:20:a4:3c:f0:55:3d:fe:7b:9b:
bc:fb:22:e4:e4:6f:f8:8e:2d:12:07:01:ff:3f:90:19:9a:6f:
16:a9:19:7a:18:16:04:c5:36:8f:ab:69:fc:a0:52:6e:47:af:
3a:a9:b4:85:d4:f5:6a:d1:1d:71:0a:e5:d1:52:7f:b1:a9:74:
b1:36:7d:53:b5:43:eb:34:56:bb:c8:e0:d0:a7:ab:ae:2d:cf:
23:f2:35:bd:b6:c3:c0:30:76:db:fb:ba:38:75:ab:59:be:db:
95:c7:f5:a5:72:b4:c2:de:52:5b:49:da:db:ec:25:f7:ea:5a:
a3:c5:62:47:8b:54:46:84:d4:a3:39:86:8a:74:2b:e6:ec:b8:
58:db:17:2e:10:01:08:4d:c7:4b:86:81:ec:b6:a2:d5:22:e8:
a8:51:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:25 2026 by rpki-client