Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JuCZMKnL4Ew9a65vgCFpprL_UtY.roa
File: JuCZMKnL4Ew9a65vgCFpprL_UtY.roa (raw, json)
Hash identifier: cTWguHvbACvrrESnStlfQyUobHjurYxj+eRtRk4i2zI=
Subject key identifier: 26:E0:99:30:A9:CB:E0:4C:3D:6B:AE:6F:80:21:69:A6:B2:FF:52:D6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019DF8B482C03823CDB0052AB6DADB244F38
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JuCZMKnL4Ew9a65vgCFpprL_UtY.roa
Signing time: Tue 05 May 2026 15:14:32 +0000
ROA not before: Tue 05 May 2026 15:14:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:b4:82:c0:38:23:cd:b0:05:2a:b6:da:db:24:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 5 15:14:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26e09930a9cbe04c3d6bae6f802169a6b2ff52d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:86:e1:b5:e2:00:82:7d:7e:86:a5:92:29:
42:b8:6a:fc:37:ef:1e:56:f3:4d:19:be:ba:71:b7:
0a:93:93:5e:25:7b:1c:d5:23:9c:36:3d:35:3a:ee:
5c:53:92:ef:ec:9f:46:0a:29:4c:ec:69:ce:2b:e0:
02:63:3a:83:5b:d1:4b:e3:15:39:5c:4a:e9:6e:61:
5a:c0:d8:d0:9d:82:28:de:20:ad:d2:c3:5c:10:ff:
ca:9d:31:92:4e:f0:ba:e7:37:c6:9e:45:dd:5d:51:
92:87:9d:6d:7a:61:81:bd:a6:23:1a:2c:e7:a0:04:
6a:95:c2:23:b9:c0:7d:76:13:88:26:84:ca:d0:1b:
2a:92:3e:d3:05:83:65:51:ae:1c:77:d3:ba:0d:ba:
24:f1:08:cc:0d:98:37:5a:0a:5e:ab:3e:fd:22:15:
3e:48:74:1a:ba:9a:9e:c1:eb:48:3b:18:e6:ab:e0:
76:29:78:6d:a9:b1:5a:3e:67:8a:41:82:13:b4:9a:
fe:eb:52:92:a6:9c:1f:44:ba:7b:c4:cb:2d:fa:f5:
8a:31:b5:da:bf:fa:bb:b1:27:c6:42:a5:9e:09:0a:
5b:b7:a1:2f:b9:40:5e:01:f5:13:0f:77:2f:be:6e:
2e:8d:cb:2a:21:83:f1:0a:51:fe:0f:99:34:4f:69:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:99:30:A9:CB:E0:4C:3D:6B:AE:6F:80:21:69:A6:B2:FF:52:D6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JuCZMKnL4Ew9a65vgCFpprL_UtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.88.0/24
163.5.90.0/24
163.5.100.0/24
163.5.117.0/24
163.5.130.0/24
163.5.153.0-163.5.154.255
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.227.0/24
163.5.240.0/24
163.5.243.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
37:80:26:98:27:ef:e5:56:c5:ef:1e:75:c7:df:ce:dd:71:de:
23:6f:82:ff:0f:3e:57:1f:cc:1c:57:cf:ba:ae:31:55:05:40:
20:8f:71:ac:ec:3e:e7:7e:d5:2a:cc:8b:33:fa:42:c8:76:4f:
c4:25:4e:4e:e8:96:0e:70:88:c3:34:f2:59:f8:1b:72:83:ec:
6e:77:93:82:ca:33:25:49:2d:17:82:1f:e9:11:e1:53:f0:d1:
04:c8:e0:d4:2e:9c:d5:aa:91:7a:82:ed:0c:ee:75:7b:ad:61:
03:6b:5c:33:ac:d7:24:8d:dc:dd:0e:28:67:2e:46:8e:ef:b6:
f3:f6:e6:44:3e:f0:a4:3c:e4:27:5a:98:32:e9:54:ce:70:6b:
c2:62:0a:bc:6c:34:72:f6:c9:7e:cb:be:ff:54:3d:20:9d:b2:
94:8b:d7:81:aa:5e:bb:e1:14:a4:53:9c:6d:0a:70:ca:63:d4:
8a:9e:82:e5:c5:8e:aa:d8:57:9a:c5:11:5d:d2:38:e9:33:85:
15:92:e0:3a:58:8c:a7:9c:5a:23:71:a3:7b:4c:75:19:a5:c2:
00:6f:3c:18:35:6c:ff:14:5c:20:24:0d:67:29:51:b2:89:7d:
af:ef:94:48:0c:d5:04:8d:0c:96:c3:e6:37:6c:25:90:a0:ff:
57:00:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:37 2026 by rpki-client