
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EnAVwB6PLHQdrjhxYWrkLm0rutE.roa
File: EnAVwB6PLHQdrjhxYWrkLm0rutE.roa (raw, json)
Hash identifier: ueY51zfMiKtwx90P5FhdnrqZD+AdJQ5tnPdB3feDDuw=
Subject key identifier: 12:70:15:C0:1E:8F:2C:74:1D:AE:38:71:61:6A:E4:2E:6D:2B:BA:D1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0199377B5EC8C019B0AC7408017CEFD18A96
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EnAVwB6PLHQdrjhxYWrkLm0rutE.roa
Signing time: Thu 11 Sep 2025 06:34:16 +0000
ROA not before: Thu 11 Sep 2025 06:34:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215663
IP address blocks: 163.5.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:7b:5e:c8:c0:19:b0:ac:74:08:01:7c:ef:d1:8a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 11 06:34:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=127015c01e8f2c741dae3871616ae42e6d2bbad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:78:fd:3d:ec:f1:01:23:d9:76:5a:b1:bb:
c4:21:14:53:6f:e0:d0:06:bb:49:6b:8a:20:6c:b8:
42:55:d7:90:a3:62:91:65:c0:ee:58:ac:f4:bd:98:
89:27:37:91:f0:fe:c0:86:f9:e7:03:49:1f:47:b6:
2b:f0:ad:89:2f:c9:a9:f8:c9:f3:71:33:49:36:46:
32:09:ed:f1:70:88:f1:3a:50:b8:11:5c:7a:d0:df:
d9:b9:51:6f:a3:29:39:8d:92:e7:5f:c2:00:7c:e4:
06:b0:33:52:34:91:a7:32:90:ad:8b:45:21:6a:c2:
ae:64:ad:dc:dc:51:63:92:77:74:a3:3f:30:bd:aa:
ce:d8:9f:05:a7:2d:a3:52:52:8b:f1:82:4c:ac:62:
32:21:2b:c4:d3:d4:07:76:ca:30:3a:2a:c8:84:ce:
8b:7a:d9:07:ed:78:62:24:d2:26:f0:28:8d:d4:03:
8e:3a:e5:92:b1:f7:10:00:7a:3d:4d:c3:6a:ae:09:
f5:68:33:33:c3:51:f6:30:68:cc:81:6b:91:6a:97:
d2:71:d9:71:fc:e7:9b:8d:3e:83:a2:d5:1e:81:1e:
09:5a:69:01:4b:40:c8:a2:d4:0b:a3:65:9b:c1:e4:
1b:73:cb:27:7a:ca:7a:37:7e:a6:75:0e:a1:8a:00:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:70:15:C0:1E:8F:2C:74:1D:AE:38:71:61:6A:E4:2E:6D:2B:BA:D1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EnAVwB6PLHQdrjhxYWrkLm0rutE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.27.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0a:54:44:16:0f:7a:8d:63:4b:27:48:ef:9a:30:c1:40:f0:
35:b8:9e:99:b1:6e:f5:4a:e3:e1:86:5f:22:4a:42:f3:58:7d:
14:87:f7:a6:a7:9b:e9:7b:f1:75:b0:ac:54:2f:d8:3a:ff:6e:
d4:64:4b:a0:d8:b9:a7:a5:34:fc:b4:30:f7:1e:60:c8:b3:41:
1f:0c:c6:df:fb:df:af:36:69:29:3c:94:28:b9:e2:99:c2:a7:
b2:6b:2f:f7:06:66:d8:ae:86:de:71:41:f9:82:dd:3f:e0:be:
5a:6c:11:b5:47:eb:b5:8b:70:6b:13:fb:54:63:19:d9:a7:ca:
37:d3:0f:9c:86:48:11:d5:ee:82:5e:c5:0f:f7:b4:61:f9:d3:
c3:6b:35:16:d8:15:74:ac:e5:e8:d5:05:2d:cb:93:96:96:a1:
4c:03:34:fe:bd:d0:37:d8:3e:69:9b:94:98:70:79:23:03:bb:
84:c4:84:7e:0a:1e:c2:e3:98:9a:4f:9c:19:dd:8f:5b:64:64:
17:07:3a:1c:b9:dd:e9:2d:6a:c4:2f:4f:de:31:9a:12:fc:3b:
fc:68:92:be:da:8d:09:62:4c:e3:eb:04:db:29:be:fd:62:f8:
cb:1a:64:ce:5b:e6:fa:ca:c9:1b:99:56:8b:72:f2:d4:16:4c:
ed:89:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:41 2025 by rpki-client