Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Rsc3wVNqMjvVriz8rDpe50s37rc.roa
File: Rsc3wVNqMjvVriz8rDpe50s37rc.roa (raw, json)
Hash identifier: gNblDCl2RZPuQQuRzzPSJ5SB9nPzUifemMGDzwgYkt8=
Subject key identifier: 46:C7:37:C1:53:6A:32:3B:D5:AE:2C:FC:AC:3A:5E:E7:4B:37:EE:B7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F8F69AC74829B4C3B48C7C6BC69D53FA5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Rsc3wVNqMjvVriz8rDpe50s37rc.roa
Signing time: Thu 23 Jul 2026 14:38:15 +0000
ROA not before: Thu 23 Jul 2026 14:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.88.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:69:ac:74:82:9b:4c:3b:48:c7:c6:bc:69:d5:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 23 14:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46c737c1536a323bd5ae2cfcac3a5ee74b37eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:02:03:89:0c:6b:33:3a:1f:aa:c3:8a:a4:
1c:52:0d:b8:97:05:ea:6c:d7:84:b2:fc:8c:ae:38:
96:dc:1f:b8:f9:8c:83:83:28:85:4c:93:1c:81:94:
22:f6:5c:4f:e9:57:b4:66:17:f3:f7:0c:71:d9:5c:
45:2a:3b:bf:89:f5:1c:45:1a:28:52:e1:c1:76:38:
bc:3e:40:44:d3:f0:30:53:88:34:f5:ec:fe:bb:9d:
d8:70:c2:f6:01:13:ab:8c:b3:94:ef:7b:8b:6c:23:
39:6a:b2:9b:17:ec:51:ae:d6:aa:01:89:3c:2e:4e:
14:92:1f:d1:2e:c8:6e:2e:95:ef:25:0b:bd:ed:84:
54:2e:f1:df:df:14:47:9a:5b:d6:ec:b6:62:a9:7a:
1c:db:91:86:e9:11:e5:7f:42:24:bc:dd:4f:59:f0:
a3:61:82:43:52:de:bc:31:0c:15:a9:32:d1:3a:ae:
cf:7e:69:55:5c:67:dc:67:61:60:68:96:c2:70:1f:
99:e4:a2:78:8c:54:df:76:ad:ee:56:44:54:6a:b2:
f8:9b:f7:8b:fd:f4:fd:b0:87:39:36:8e:4c:56:b6:
35:13:da:c3:1b:e7:2d:cf:50:75:ba:8b:d7:84:9c:
0d:22:a5:e8:b4:02:0b:fc:0f:c4:f9:36:c0:12:dc:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:37:C1:53:6A:32:3B:D5:AE:2C:FC:AC:3A:5E:E7:4B:37:EE:B7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Rsc3wVNqMjvVriz8rDpe50s37rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.88.0/24
163.5.100.0/24
163.5.154.0/24
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.240.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
11:df:2a:84:05:e2:c0:75:6d:eb:fe:14:aa:2d:a5:8a:65:01:
21:29:28:41:f4:ac:88:d8:a4:94:40:d5:75:f2:29:77:a4:73:
43:a3:62:2f:bc:2d:ee:70:7d:8b:c3:46:e0:31:0c:1d:c2:12:
b2:7f:49:a5:5c:31:89:eb:ae:d3:f8:72:68:82:e1:4d:a7:46:
9a:82:94:1d:e5:c5:17:3e:48:6b:4a:86:c0:bd:db:d6:6f:92:
06:7b:e5:bd:d8:df:d1:a5:f4:cb:bd:ce:66:8f:b4:7d:c6:6d:
5d:d4:f2:34:a2:6d:33:f3:a8:12:a2:4d:b2:dd:93:dd:1f:f3:
3c:47:6d:74:1a:64:5b:c9:b5:86:37:a0:3f:42:bb:82:c5:49:
69:63:fd:ee:03:1b:7c:e0:b4:3d:56:ac:e0:6d:d6:e3:0f:8f:
db:07:9e:55:91:35:95:cc:94:e9:b4:91:01:ca:eb:c9:37:98:
ab:f4:30:0a:b3:a0:27:4e:5d:13:01:fd:bf:22:02:9d:f5:34:
98:e9:84:24:a5:4e:19:43:d7:e6:d5:96:9a:a1:a3:7d:cf:e5:
be:33:d3:ca:22:e1:04:77:21:f2:71:43:ef:ec:c4:f8:46:9e:
74:43:19:91:59:aa:f5:5a:21:c9:5a:53:b6:f3:cd:6b:f7:ea:
6c:1e:3b:80
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ+Paax0gptMO0jHxrxp1T+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwNzIzMTQzODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmM3MzdjMTUzNmEzMjNiZDVhZTJjZmNhYzNhNWVlNzRiMzdlZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziwCA4kMazM6H6rDiqQcUg24lwXq
bNeEsvyMrjiW3B+4+YyDgyiFTJMcgZQi9lxP6Ve0Zhfz9wxx2VxFKju/ifUcRRoo
UuHBdji8PkBE0/AwU4g09ez+u53YcML2AROrjLOU73uLbCM5arKbF+xRrtaqAYk8
Lk4Ukh/RLshuLpXvJQu97YRULvHf3xRHmlvW7LZiqXoc25GG6RHlf0IkvN1PWfCj
YYJDUt68MQwVqTLROq7PfmlVXGfcZ2FgaJbCcB+Z5KJ4jFTfdq3uVkRUarL4m/eL
/fT9sIc5No5MVrY1E9rDG+ctz1B1uovXhJwNIqXotAIL/A/E+TbAEtwtcQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFEbHN8FTajI71a4s/Kw6XudLN+63MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUnNjM3dWTnFNanZWcml6OHJEcGU1MHMzN3JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAowVYAwQA
owVkAwQAowWaAwQAowWuAwQAowWxAwQAowW9AwQAowXwAwQAowX8MA0GCSqGSIb3
DQEBCwUAA4IBAQAR3yqEBeLAdW3r/hSqLaWKZQEhKShB9KyI2KSUQNV18il3pHND
o2IvvC3ucH2Lw0bgMQwdwhKyf0mlXDGJ667T+HJoguFNp0aagpQd5cUXPkhrSobA
vdvWb5IGe+W92N/RpfTLvc5mj7R9xm1d1PI0om0z86gSok2y3ZPdH/M8R210GmRb
ybWGN6A/QruCxUlpY/3uAxt84LQ9VqzgbdbjD4/bB55VkTWVzJTptJEByuvJN5ir
9DAKs6AnTl0TAf2/IgKd9TSY6YQkpU4ZQ9fm1ZaaoaN9z+W+M9PKIuEEdyHycUPv
7MT4Rp50QxmRWar1WiHJWlO2881r9+psHjuA
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:30 2026 by rpki-client