Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PN9FftiH7xXH9eIN4FbqPGpTSPQ.roa
File: PN9FftiH7xXH9eIN4FbqPGpTSPQ.roa (raw, json)
Hash identifier: UH2ueI0VCBYR2ceoV3NsuST+jbi1xO3mZFQNfMIK1f8=
Subject key identifier: 3C:DF:45:7E:D8:87:EF:15:C7:F5:E2:0D:E0:56:EA:3C:6A:53:48:F4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0199DC0634A321F16692A017F2181BC5DDDA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PN9FftiH7xXH9eIN4FbqPGpTSPQ.roa
Signing time: Mon 13 Oct 2025 05:23:38 +0000
ROA not before: Mon 13 Oct 2025 05:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 163.5.104.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:06:34:a3:21:f1:66:92:a0:17:f2:18:1b:c5:dd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 13 05:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cdf457ed887ef15c7f5e20de056ea3c6a5348f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:1b:76:3e:84:95:e9:f9:17:96:41:70:05:
c9:85:13:6d:a7:93:21:41:fe:c5:c9:14:e8:ed:4c:
ea:93:fb:66:3a:f9:c6:cd:45:b9:86:e1:4a:ea:b9:
94:4d:1d:ae:cf:a8:f7:54:6f:c3:ca:14:40:d0:79:
18:36:10:72:85:b1:29:4b:05:05:38:c0:13:3d:29:
c4:16:3e:0a:0f:87:56:fc:de:49:47:73:50:bb:42:
50:b8:77:cd:14:6b:12:1a:3e:58:63:95:81:18:24:
f2:12:79:71:1f:01:d2:1d:0c:f5:b5:3c:b0:24:c7:
62:6c:0b:f9:3d:63:92:94:39:f2:7b:24:e4:72:3b:
a2:25:59:4e:b6:73:b2:3c:ff:5a:01:09:f5:2c:b6:
c8:db:77:0c:83:44:0e:be:5a:16:20:3a:e1:ee:d7:
2f:a1:41:ab:34:be:de:a3:87:97:c4:86:78:6d:6c:
a8:3a:2b:2d:46:05:4a:ac:a3:9e:6c:ac:fa:80:00:
ca:c6:73:97:d4:d3:49:eb:db:06:44:90:e1:ba:16:
b1:28:cc:98:b7:dc:e2:19:1a:cb:8d:ae:af:7a:c6:
83:06:ea:0a:a4:48:c0:7b:07:a6:45:e5:8e:e1:1a:
58:8e:d2:d2:b5:f2:6b:cf:74:ba:76:6f:30:76:d3:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:45:7E:D8:87:EF:15:C7:F5:E2:0D:E0:56:EA:3C:6A:53:48:F4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PN9FftiH7xXH9eIN4FbqPGpTSPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.104.0/24
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a1:da:3e:ec:0e:71:e6:15:ec:80:01:f7:f4:4e:f2:30:89:
3b:05:b0:42:a2:6b:08:08:3c:2a:a2:77:6d:e6:4f:8b:eb:fb:
34:03:5e:77:b2:b0:84:06:74:23:ca:8c:32:cc:fd:4d:6b:a8:
8b:70:8c:18:4e:03:34:5f:42:5e:cb:dd:40:fd:01:32:10:97:
d1:c0:1e:29:ba:5d:cd:b0:bb:94:8a:96:02:48:4a:7a:ce:d4:
36:88:ba:de:1b:23:ff:92:b9:9b:91:fa:44:f7:89:58:c5:54:
ba:92:c3:0d:b3:cd:3e:77:96:26:38:54:2f:42:a2:6f:a8:d6:
6f:e6:4d:c4:db:ea:99:0c:ab:8b:01:c1:61:70:13:e6:b7:66:
a0:2e:e6:c2:9b:58:52:bf:96:9a:32:b5:1f:49:fe:5b:5a:0a:
c1:6d:89:a2:f8:3a:57:ac:ba:ec:33:1d:33:bb:7c:d3:cf:46:
c9:a0:df:ae:ce:fa:ad:6c:0f:bd:02:30:32:f3:f1:fa:85:1a:
af:14:53:e3:f5:b3:f7:a9:96:85:11:da:c2:d2:73:0b:7e:f7:
88:7f:2e:fc:04:19:94:38:cf:b8:b3:ab:ed:4a:29:f4:3e:b8:
60:90:c1:d7:2a:bf:95:6c:88:fa:82:f0:86:8e:63:eb:77:46:
2d:b6:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:23 2025 by rpki-client