Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SsPhyt9v-3xwBNoDoI-YWRaVoYI.roa
File: SsPhyt9v-3xwBNoDoI-YWRaVoYI.roa (raw, json)
Hash identifier: g6KmZnkN3iBNWJgAM1CE6u+jGMqxniVtpQs/Ize+r64=
Subject key identifier: 4A:C3:E1:CA:DF:6F:FB:7C:70:04:DA:03:A0:8F:98:59:16:95:A1:82
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E0346E470542835FB0CA7832507A6F290
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SsPhyt9v-3xwBNoDoI-YWRaVoYI.roa
Signing time: Thu 07 May 2026 16:30:38 +0000
ROA not before: Thu 07 May 2026 16:30:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 163.5.8.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:46:e4:70:54:28:35:fb:0c:a7:83:25:07:a6:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 7 16:30:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ac3e1cadf6ffb7c7004da03a08f98591695a182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:a1:62:92:5b:99:15:c5:da:ea:81:f2:c9:
cf:3e:6c:17:b8:33:aa:79:21:7d:2e:7e:81:a2:46:
22:26:a9:2b:03:a0:d7:7f:9b:a9:da:ce:0c:76:bd:
b3:5b:e5:44:b7:41:4e:97:9c:53:e8:89:33:57:e5:
4e:3c:61:77:6a:bd:5d:08:34:03:60:53:a4:e4:61:
b8:f0:d4:11:7a:25:52:7d:42:87:5b:3e:3b:7f:e9:
99:eb:e6:6d:cb:8f:ad:ee:86:39:6a:e9:b1:8e:0d:
48:0d:93:59:2c:1b:ab:3b:4b:04:25:d1:91:b6:ce:
27:58:16:e1:d8:7a:fa:fb:98:f3:c1:db:44:98:9e:
f5:5a:78:07:a9:09:f5:ae:ef:18:3b:45:13:9d:77:
ca:b9:5a:b8:0f:cd:21:75:c8:14:2a:41:0a:70:5e:
0a:97:c7:ae:61:1d:8a:6e:ad:6b:b5:72:06:be:2b:
ae:5e:32:ab:03:16:29:2f:96:b9:c1:c8:8e:bf:64:
9c:76:0d:47:c5:2d:97:02:6c:d0:b9:c1:49:72:35:
ca:b5:6f:44:26:85:21:4f:b0:b1:28:53:01:ba:fa:
5b:62:46:2e:81:15:05:ca:3e:4f:c3:a8:ed:e9:71:
ed:65:05:4e:03:f0:03:90:59:41:da:c6:55:f5:94:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:E1:CA:DF:6F:FB:7C:70:04:DA:03:A0:8F:98:59:16:95:A1:82
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SsPhyt9v-3xwBNoDoI-YWRaVoYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.8.0/24
163.5.13.0/24
163.5.106.0/24
163.5.109.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a1:4d:61:a2:05:4a:d6:71:d0:4b:cc:4e:8c:aa:81:10:93:
8a:ed:a5:7e:65:ed:5d:c4:cf:ed:7d:2f:8b:6a:31:f6:52:44:
ea:17:13:56:1c:ce:ce:fa:2f:b8:b7:3f:ad:23:7c:e1:c7:6c:
9a:b5:1f:42:2a:d3:92:da:55:42:14:92:20:0d:0a:b6:d8:df:
bc:a0:d3:77:c6:af:fb:f1:c2:92:2a:7b:70:a9:42:47:84:ff:
26:ce:4c:81:73:74:18:b2:c9:9e:57:73:fd:7d:71:f8:1b:94:
e1:c9:3d:11:8c:4f:78:43:41:76:b0:0b:ec:1d:c1:ef:fd:40:
75:6e:96:ee:5a:67:97:cc:44:3a:42:74:94:c6:d7:47:36:8b:
36:03:a6:b2:01:57:5d:1a:4c:ff:8a:13:3b:7f:03:39:be:b8:
c3:52:6e:2e:a2:5b:8e:16:a7:41:91:71:4e:f8:a4:a9:e9:72:
3e:ba:eb:2d:a8:90:bf:c4:80:9a:b0:2e:d8:0f:1c:9c:59:7e:
83:12:4d:69:d9:b3:cb:a3:99:97:ab:3d:f6:2e:9e:1c:44:5e:
bc:5a:a1:7b:31:c9:97:12:fa:bf:a9:b0:64:15:dc:9b:fb:fa:
3b:f0:68:b4:64:e1:38:cb:47:5f:79:b1:d6:d8:5c:d5:5c:51:
ef:e1:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:25 2026 by rpki-client