Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iHSSb8JkqRoZeAn3Edc9gc3dEUs.roa
File: iHSSb8JkqRoZeAn3Edc9gc3dEUs.roa (raw, json)
Hash identifier: akoD9ctRYP8aGG8i4lSj9Yp6b2ggI3896vV58a0UJt8=
Subject key identifier: 88:74:92:6F:C2:64:A9:1A:19:78:09:F7:11:D7:3D:81:CD:DD:11:4B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01999538FAD6ACE686BE2D13417D1D8AEEF5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iHSSb8JkqRoZeAn3Edc9gc3dEUs.roa
Signing time: Mon 29 Sep 2025 11:26:03 +0000
ROA not before: Mon 29 Sep 2025 11:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 163.5.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:38:fa:d6:ac:e6:86:be:2d:13:41:7d:1d:8a:ee:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 29 11:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8874926fc264a91a197809f711d73d81cddd114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:06:8c:55:b2:9d:ab:c0:3b:b7:65:e4:b2:
ce:34:15:f1:bc:43:c8:aa:ab:72:03:22:2c:e1:dc:
0f:fc:31:aa:b3:7a:15:3b:e1:ee:1a:48:a1:a6:c4:
8c:ef:0a:37:11:9f:23:01:5e:89:ca:0f:63:31:0d:
56:e3:09:a4:21:15:00:f0:8d:49:fb:f6:8e:4e:f3:
c0:ab:ac:51:1f:ca:4f:9a:f0:60:89:d5:c4:5b:9a:
5f:b1:b0:9e:58:23:17:89:59:b1:6a:68:b3:21:db:
23:5b:e0:42:71:b1:d2:08:a1:d4:6f:38:a4:09:67:
36:f8:ed:37:1a:83:9c:ed:7b:82:79:62:d8:87:f1:
24:00:c9:0a:65:95:c0:10:4d:d3:54:99:79:c2:fb:
0f:7e:20:88:2b:d5:8f:9d:cd:58:b2:6e:41:a3:86:
14:f7:40:d8:59:38:3e:03:28:99:39:71:37:16:d8:
66:a7:89:21:1c:fe:25:e0:c6:7f:8d:41:8e:ce:d2:
af:62:fe:a2:69:91:b9:7c:ca:57:1a:3c:8b:49:2e:
dc:7f:be:59:bf:95:43:9a:3f:c3:b2:37:1d:47:8e:
ac:c7:5a:49:18:d4:38:a9:24:f3:80:a9:e0:68:05:
b9:c1:b5:1b:ca:8e:8a:3c:4a:ef:18:36:41:41:26:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:74:92:6F:C2:64:A9:1A:19:78:09:F7:11:D7:3D:81:CD:DD:11:4B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iHSSb8JkqRoZeAn3Edc9gc3dEUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.79.0/24
Signature Algorithm: sha256WithRSAEncryption
af:71:56:0e:87:86:62:f0:97:e0:99:d0:78:7c:98:f3:40:43:
44:46:d4:70:95:93:42:38:d7:bc:a9:1a:46:c8:f7:81:6b:5f:
10:8a:ec:cb:15:3f:ad:e9:7f:4b:8c:98:cf:57:55:a8:7d:e5:
98:a2:d9:91:62:08:2c:ac:6a:59:19:43:a8:45:c4:d8:0f:9d:
c9:4f:d9:db:2b:43:58:ce:61:8f:dd:34:16:ef:28:c6:ca:4e:
50:22:23:c5:52:16:48:93:d5:21:c5:a6:a0:ed:ee:73:a3:9e:
3c:cc:9a:09:85:72:b1:72:54:ec:9e:ad:f3:0b:4d:2b:a8:ef:
ce:84:fb:ee:d2:15:c2:8f:5a:27:52:20:1f:a4:cb:1b:79:e6:
b6:a7:ce:61:bb:d8:75:9f:ad:46:af:66:5b:db:2b:41:61:5d:
30:fc:49:b0:0b:4e:43:ed:f5:a6:86:82:73:7e:0c:80:fe:b6:
a1:35:19:43:cf:87:18:f7:ac:83:2d:d2:64:5f:ee:b5:b2:f0:
89:09:65:c0:a7:d5:76:37:0b:1f:36:94:d9:d1:a1:b3:09:21:
a8:bb:0f:da:cf:dc:4f:2c:c2:40:22:cf:c3:b8:24:17:be:6b:
0a:71:20:72:7b:88:9b:1f:f1:fd:d2:4c:56:37:ed:56:6f:a3:
47:f1:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:22 2025 by rpki-client