Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sbB01oe5z52xVmb0sefaUAmiuDU.roa
File: sbB01oe5z52xVmb0sefaUAmiuDU.roa (raw, json)
Hash identifier: AeQX3/km/vXiQtGtsTk6RvPL872X31CJa5v0JDAaC3A=
Subject key identifier: B1:B0:74:D6:87:B9:CF:9D:B1:56:66:F4:B1:E7:DA:50:09:A2:B8:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0D3FFC55EB5A29999CAED61EB2653F752
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sbB01oe5z52xVmb0sefaUAmiuDU.roa
Signing time: Thu 24 Sep 2026 15:19:09 +0000
ROA not before: Thu 24 Sep 2026 15:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.1.0/24 maxlen: 24
163.5.2.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.21.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.24.0/24 maxlen: 24
163.5.28.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ff:c5:5e:b5:a2:99:99:ca:ed:61:eb:26:53:f7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 24 15:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1b074d687b9cf9db15666f4b1e7da5009a2b835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:9c:70:38:f5:64:24:55:ae:9e:da:5f:6b:
89:15:de:6b:f4:be:0e:34:88:21:d5:54:62:a1:c2:
ff:df:21:8a:b4:18:de:c7:cc:b3:37:09:fe:be:b9:
e1:de:1e:25:1a:c2:69:2d:28:97:ce:c8:90:9c:66:
b8:96:40:bf:b0:f6:2f:06:0b:08:94:35:d0:48:b6:
a7:e7:3c:61:7a:58:bf:90:28:ad:e9:cc:db:c3:cf:
7d:e2:22:77:4f:91:a7:ce:63:4f:fd:67:ce:4e:38:
73:fe:ab:63:e0:97:06:74:a2:8b:e5:c7:77:e1:50:
09:8e:b8:a7:b1:92:57:2f:59:d3:b1:50:6a:ca:82:
85:4a:e4:c8:f8:03:16:ac:5f:b5:03:2c:aa:92:bb:
c4:9d:48:c7:87:fc:b1:b6:e0:f3:78:25:26:f5:2a:
a3:41:6b:8a:86:5d:3c:76:6a:45:fc:cb:3a:fa:33:
97:fa:63:ff:bd:d8:ea:96:49:e8:c4:47:fc:5a:c9:
bc:88:94:13:f0:01:ef:10:02:5e:bf:f6:88:a0:2e:
64:a1:4c:6b:63:69:49:7d:c8:fb:61:3d:83:16:dd:
c8:2d:b5:5c:64:e6:61:94:32:0e:3d:f8:c5:c9:30:
76:e8:86:d0:7f:31:38:c4:34:9b:39:8c:0f:b4:b5:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:74:D6:87:B9:CF:9D:B1:56:66:F4:B1:E7:DA:50:09:A2:B8:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sbB01oe5z52xVmb0sefaUAmiuDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0-163.5.6.255
163.5.10.0/23
163.5.20.0/23
163.5.23.0-163.5.24.255
163.5.28.0/24
163.5.42.0/24
163.5.45.0/24
163.5.48.0/24
163.5.55.0/24
163.5.68.0/23
163.5.80.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bf:b6:f3:4b:30:db:83:0e:c2:65:b4:74:04:66:d9:b6:84:
11:5f:03:7f:52:99:8f:1d:0a:8c:e0:96:c3:dc:9a:71:9d:bf:
43:0c:13:68:5e:62:b0:f8:81:bb:35:7a:a9:5f:42:84:29:0a:
f7:f1:95:9d:94:cf:cf:2a:45:4b:3f:fe:3d:0a:f0:72:aa:21:
54:ee:b2:c0:a4:fa:23:09:87:32:f7:73:e3:2c:c1:f0:b3:fb:
80:26:ad:da:a3:0c:16:05:d4:0e:53:a7:38:d2:6b:55:e3:0c:
e8:73:d8:47:94:66:59:8b:21:be:16:f6:d8:d2:77:ee:95:23:
9a:f8:1b:cc:3e:02:e0:eb:aa:9c:0b:67:60:7e:9a:e2:d7:94:
36:72:0c:fb:af:37:17:86:fe:8f:36:44:36:2b:f5:ca:4f:a8:
e1:89:d0:e9:75:02:69:92:10:d8:32:05:37:06:b9:b7:85:59:
44:f5:b0:f1:4d:89:0a:4a:59:d6:d4:ab:3d:5b:aa:84:c6:1c:
76:31:f5:15:37:b1:34:37:90:fe:57:d1:3e:7b:06:f2:ff:69:
06:76:72:5a:c8:45:1e:8f:81:a6:59:c5:dc:37:38:63:1b:8d:
ba:a7:dd:7f:77:9f:31:fe:6c:43:19:68:33:2a:d4:5d:69:eb:
4b:19:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:02:52 2026 by rpki-client