Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EnGwPrw2n3hX1vNL7-oyu6bglHE.roa
File: EnGwPrw2n3hX1vNL7-oyu6bglHE.roa (raw, json)
Hash identifier: LVkALvW+wSMYi+Z/mR1UeaWxvB/k0aR+ZMK0Kaqb7X8=
Subject key identifier: 12:71:B0:3E:BC:36:9F:78:57:D6:F3:4B:EF:EA:32:BB:A6:E0:94:71
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E0203B33DEAB090213C92BD68F1210F56
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EnGwPrw2n3hX1vNL7-oyu6bglHE.roa
Signing time: Thu 07 May 2026 10:37:37 +0000
ROA not before: Thu 07 May 2026 10:37:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.46.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:03:b3:3d:ea:b0:90:21:3c:92:bd:68:f1:21:0f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 7 10:37:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1271b03ebc369f7857d6f34befea32bba6e09471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:75:42:3c:35:71:df:b6:45:f0:af:02:91:
d2:e7:08:25:86:98:2d:6c:4a:9c:96:bb:66:00:1a:
63:fc:ed:e9:d7:7f:54:51:40:ee:1b:37:ed:21:86:
90:57:b7:fc:24:37:2c:99:60:2c:9c:9b:20:4a:de:
eb:97:6c:b0:36:cf:f6:d8:42:f2:c3:ef:f3:e9:e6:
28:9e:ca:d0:3b:26:cc:32:46:ad:b4:db:7e:05:a3:
e1:4d:33:57:cc:87:ca:e5:33:60:0a:03:18:cc:7e:
c4:41:8e:58:be:9b:53:c0:c1:8e:b9:b6:16:87:a6:
6b:ec:cf:1f:8c:21:3b:3b:02:da:88:1f:32:5a:76:
95:bb:9e:99:64:7c:61:e8:30:32:27:3c:ad:de:ae:
25:1d:bb:c7:e2:3b:29:72:26:84:7b:49:59:d2:ef:
b2:e7:70:7c:2b:de:4a:34:70:d5:5a:ea:f3:db:15:
cf:26:bd:20:19:91:01:fd:26:eb:2c:9f:3e:24:75:
c1:45:c3:ed:b0:ed:d2:f0:d9:7a:b0:be:1d:86:e4:
11:8c:14:4d:16:3c:85:55:ec:a8:1e:da:60:a9:33:
a5:2c:ff:9c:bb:15:4d:ae:52:f6:d0:45:79:55:de:
8f:59:61:79:ff:fb:63:ab:ae:ef:02:6a:c8:8d:c2:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:71:B0:3E:BC:36:9F:78:57:D6:F3:4B:EF:EA:32:BB:A6:E0:94:71
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EnGwPrw2n3hX1vNL7-oyu6bglHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.46.0/24
163.5.82.0/24
163.5.119.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
9d:f2:aa:ef:56:0f:2f:af:bf:67:f2:d0:cc:ec:90:8e:11:b5:
09:d5:b8:1e:56:04:8a:72:46:67:45:7c:1d:4d:7b:66:c0:fd:
c7:8c:88:7e:63:9b:cc:ad:91:d7:bf:09:0d:f4:2e:5c:c2:15:
eb:1d:f8:fd:79:68:0a:a5:91:e1:a7:a2:51:43:37:00:d2:48:
27:8b:1c:16:dd:bf:99:18:f5:62:c9:80:b9:2c:5b:df:af:6a:
c0:12:2d:51:dd:9e:52:04:db:ff:8c:49:65:e8:b4:cd:51:be:
a6:e5:21:5e:b8:8f:6f:57:73:3c:0d:17:65:10:3e:45:98:41:
75:f9:86:f9:ab:30:b1:ce:5f:22:ad:60:1e:dc:e6:53:2f:29:
98:fe:3e:24:95:d6:9d:cc:8f:4d:bd:c6:8a:9d:fe:cc:e4:75:
19:35:22:8e:e3:91:13:cf:5c:ad:99:84:5e:06:f8:40:6e:63:
5a:b1:76:da:af:55:fb:26:1f:6d:ed:62:fc:fd:6d:7b:ac:b9:
d4:91:a8:b3:93:81:0d:ff:a9:f2:3a:d1:ff:6d:b2:ac:40:51:
2e:f1:60:8f:d2:98:66:43:df:32:c7:79:91:1f:7e:aa:a0:37:
41:e1:c6:48:17:9b:b7:eb:7d:1b:7a:ac:e7:46:e2:5c:20:58:
0b:2d:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:53 2026 by rpki-client