Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HKq_68OzjK7teMkVPAOTximxvv0.roa
File: HKq_68OzjK7teMkVPAOTximxvv0.roa (raw, json)
Hash identifier: qpONcxRWU76aEW6Hx6FwnctFmY4dNcItn5pngZRQvd8=
Subject key identifier: 1C:AA:BF:EB:C3:B3:8C:AE:ED:78:C9:15:3C:03:93:C6:29:B1:BE:FD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F8F6A9731E075ACDD3AFFAE4989DAA15F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HKq_68OzjK7teMkVPAOTximxvv0.roa
Signing time: Thu 23 Jul 2026 14:39:15 +0000
ROA not before: Thu 23 Jul 2026 14:39:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:6a:97:31:e0:75:ac:dd:3a:ff:ae:49:89:da:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 23 14:39:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1caabfebc3b38caeed78c9153c0393c629b1befd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:57:cb:fb:c4:b0:52:87:e3:75:59:77:bf:
bb:16:1e:b2:7f:95:25:cc:39:3a:02:50:97:a0:f3:
fa:b2:6a:fe:fe:d8:b5:7e:56:b4:02:67:c5:98:78:
92:31:ad:88:34:e6:85:2b:67:58:ed:c0:bc:09:0d:
ee:08:d2:24:8f:d4:a2:0f:3d:77:b0:3d:fd:ca:9d:
82:a4:24:6b:5e:b7:5d:68:50:57:2b:95:e5:b0:60:
ba:54:23:a8:16:f4:7f:30:24:9a:6b:ba:09:ab:c7:
59:73:68:c0:09:5f:35:4c:46:e1:5d:71:d1:87:c4:
f0:b4:45:6b:0e:19:e2:6c:a5:c2:86:01:99:af:bf:
dc:72:49:d4:2e:bc:82:a4:2c:0d:71:85:e4:97:86:
82:68:dc:4e:e7:e1:4d:1b:83:31:f9:ef:82:08:6d:
f2:6c:f0:83:c9:50:c2:7e:e5:3b:ac:68:2b:b0:c4:
f4:e7:46:26:62:64:af:4d:be:70:ce:0a:97:fc:53:
1d:1e:a2:38:a2:04:17:00:49:38:a0:03:49:b1:c1:
8a:87:0a:44:64:27:27:bd:c5:e7:3e:29:8c:a6:44:
cf:1a:a6:c3:07:94:28:30:13:bb:af:08:5f:95:41:
82:ab:21:ea:a7:91:13:cf:0c:4e:08:a1:de:22:14:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:BF:EB:C3:B3:8C:AE:ED:78:C9:15:3C:03:93:C6:29:B1:BE:FD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HKq_68OzjK7teMkVPAOTximxvv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.60.0/24
163.5.88.0/24
163.5.93.0/24
163.5.100.0/24
163.5.108.0/24
163.5.116.0/24
163.5.174.0/24
163.5.189.0/24
163.5.225.0/24
163.5.228.0/24
163.5.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:69:b0:a8:92:f6:ea:36:bf:46:5f:59:46:0e:07:0d:b6:59:
57:5d:4d:2f:cd:a7:e8:15:bd:27:6c:d5:87:89:ba:77:e6:79:
b7:59:af:d6:5b:52:e1:08:f5:4e:a1:20:8c:37:14:e6:3c:e3:
67:40:67:32:7a:76:08:ab:4b:a1:f2:40:bd:be:a9:99:20:ae:
8f:28:f2:83:14:a4:5e:08:88:10:c3:22:a6:3f:c1:b9:e7:d3:
6e:55:e9:fc:51:4e:4b:fb:02:2f:93:65:3f:7c:13:28:ed:f9:
69:58:25:6a:9b:e9:ec:b8:74:4a:0e:1e:0a:d6:c5:e5:6f:32:
bd:69:19:80:70:32:16:18:90:09:ab:11:0f:0b:01:e9:70:ed:
16:14:44:64:5d:b6:07:90:0c:25:90:7e:4b:af:2e:ed:12:02:
01:03:79:e1:7c:d1:93:9e:29:bb:d7:4b:47:55:68:60:74:4e:
0a:fd:cb:48:63:c4:22:02:10:7e:2b:c2:d2:a4:9e:30:fc:c0:
cd:fb:39:72:bf:5e:e6:46:44:3b:21:1b:29:09:09:ce:09:cb:
1c:34:03:64:2b:bc:05:a4:f7:e5:61:4d:92:12:e8:92:7f:c7:
b8:f8:6e:ac:26:0a:db:d4:7c:72:c6:ac:3e:31:27:e9:b0:2b:
f4:2f:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:59:02 2026 by rpki-client