Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dVVwk8HaC1256dPnnHn1qLPZGXw.roa
File: dVVwk8HaC1256dPnnHn1qLPZGXw.roa (raw, json)
Hash identifier: As9G3N+24hLcB8zqqxtVgPU0gdva9/2wAwnSQi1NjFU=
Subject key identifier: 75:55:70:93:C1:DA:0B:5D:B9:E9:D3:E7:9C:79:F5:A8:B3:D9:19:7C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0BF89168536116F9DE356B6CB5023B439
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dVVwk8HaC1256dPnnHn1qLPZGXw.roa
Signing time: Sun 20 Sep 2026 15:57:07 +0000
ROA not before: Sun 20 Sep 2026 15:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.50.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:89:16:85:36:11:6f:9d:e3:56:b6:cb:50:23:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 20 15:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75557093c1da0b5db9e9d3e79c79f5a8b3d9197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:45:6b:0d:d1:a7:0a:c6:c1:9c:d9:6f:8d:
62:b7:6b:96:9f:78:cc:d5:a5:64:f9:8d:66:d4:b2:
07:11:62:09:a6:08:03:2d:4e:d4:a9:22:0a:9e:01:
78:93:a9:b2:cc:23:da:96:4f:07:36:65:5f:5d:d3:
5b:0c:ff:5c:12:b5:05:a2:51:72:14:de:be:e5:ba:
86:ba:7e:18:d3:97:1c:33:fd:12:57:8d:0c:a2:00:
c6:32:a8:c9:0d:bf:77:5b:f3:4e:d0:47:e2:08:d4:
4e:a0:48:16:e8:20:4b:cf:6e:38:52:14:3a:d4:c8:
57:ac:99:30:55:15:d6:70:b3:30:16:b5:2a:9f:eb:
dc:6f:5a:ef:fb:c5:71:75:d9:32:15:b7:a3:af:4b:
99:dd:22:fa:bc:b2:53:a4:a3:bb:43:53:b5:39:6f:
44:e5:7c:51:1e:70:92:51:eb:8e:55:5e:ee:5d:8c:
78:6f:0c:79:82:31:65:b4:db:ee:27:82:ce:f2:cd:
b3:de:1d:75:75:ab:0f:12:b7:f8:c8:c4:16:73:79:
b2:6e:7e:92:77:88:a8:58:32:af:29:c7:74:f3:6c:
45:97:be:03:2d:d3:a3:f5:cf:2d:9e:7f:ed:8e:9b:
45:73:fc:c1:e7:e9:c6:5a:27:9e:be:f4:1e:af:11:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:70:93:C1:DA:0B:5D:B9:E9:D3:E7:9C:79:F5:A8:B3:D9:19:7C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dVVwk8HaC1256dPnnHn1qLPZGXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.50.0/23
163.5.71.0/24
163.5.117.0/24
163.5.119.0/24
163.5.135.0/24
163.5.203.0/24
163.5.226.0/24
163.5.240.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bf:c3:dc:f0:8c:ab:fa:46:be:c9:bd:69:c6:de:8a:e0:bc:
7b:be:71:a0:e5:75:2c:94:46:c5:cf:e6:76:de:12:9e:42:fd:
dc:21:83:77:b4:44:60:1c:36:fc:25:33:d5:6b:91:f8:1b:c0:
20:2e:c1:69:3e:2d:8a:84:06:aa:cb:0b:8f:9f:5b:c6:2f:14:
1c:1d:c5:32:8d:25:8c:fc:9c:6d:ef:d9:62:9a:d3:b7:73:23:
1e:9e:86:85:16:6f:d6:e0:28:48:10:ca:74:41:a0:78:e8:96:
c6:59:c9:b8:d7:95:5e:48:f9:62:18:da:e0:06:57:c4:5a:07:
05:92:76:36:f9:e0:3e:8b:bf:a7:c0:77:6a:6d:e2:88:45:ed:
fb:0d:90:cc:78:70:d9:e2:d7:34:78:8e:0f:9d:68:ff:00:3b:
83:c5:82:69:74:9d:7a:f2:18:e0:3d:fe:3d:79:ed:de:09:c5:
64:bf:65:38:dc:1f:bf:0b:6d:31:bf:83:22:d7:d0:d4:ce:19:
4c:1c:f1:cb:5d:3b:3d:f3:ca:d0:dd:34:5c:50:b9:1f:70:9e:
62:85:22:c6:7c:a0:f7:84:f9:a1:a1:dc:26:f7:25:70:99:c9:
fe:7a:1e:80:2b:ef:8a:1b:00:a0:f3:5f:ef:9d:69:1c:c2:fb:
d1:81:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:12:59 2026 by rpki-client