Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u-Fc0YHyYpzkB8xMt9-17IcVcNQ.roa
File: u-Fc0YHyYpzkB8xMt9-17IcVcNQ.roa (raw, json)
Hash identifier: UIY/Oo1SifrXTeGsHwlfp+gZgZaQsG61nLxmT5jhXew=
Subject key identifier: BB:E1:5C:D1:81:F2:62:9C:E4:07:CC:4C:B7:DF:B5:EC:87:15:70:D4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0198CB8C95A66AF3FF1A796F28FE97DB20D9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u-Fc0YHyYpzkB8xMt9-17IcVcNQ.roa
Signing time: Thu 21 Aug 2025 07:34:04 +0000
ROA not before: Thu 21 Aug 2025 07:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.47.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:8c:95:a6:6a:f3:ff:1a:79:6f:28:fe:97:db:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 21 07:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe15cd181f2629ce407cc4cb7dfb5ec871570d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:ed:c8:c8:00:e9:74:d0:c2:a6:c5:e1:b2:
6e:68:6e:c0:3a:50:87:0a:58:21:95:dd:67:eb:57:
bc:0c:71:71:f6:ca:20:4c:68:c0:6e:76:ef:4d:6e:
dc:d9:f4:df:f1:93:76:d9:2e:ca:b1:70:e1:d4:20:
38:8f:f3:5e:76:93:31:4b:23:eb:51:83:b0:63:0e:
74:2f:29:43:16:e0:e0:98:8e:e5:38:bc:dc:f7:8e:
70:a5:96:51:19:f9:08:a2:fe:cb:10:6d:ee:7d:1f:
bf:76:ff:93:11:53:04:01:15:f8:53:16:42:de:63:
6c:cf:e2:bc:17:e2:bb:94:4f:d0:38:37:e2:d7:57:
c9:b5:a1:0d:7c:b5:a9:01:40:4a:e9:00:78:a8:a4:
dc:b8:64:7e:19:a4:ae:de:35:7d:d6:6e:c3:95:d5:
2a:7a:d6:f7:a9:77:3f:52:c0:09:ff:39:93:e8:70:
e2:bd:dd:38:5c:aa:3a:46:b8:4c:c4:4b:d9:cf:16:
6f:79:78:50:c2:53:be:64:ae:5e:a0:3e:49:52:23:
3c:36:78:c6:56:a4:7b:ca:aa:12:c9:e1:60:dc:14:
98:e5:72:85:87:b2:82:a9:60:0a:99:47:fc:53:bb:
3a:a6:14:01:0b:90:e4:98:fd:9d:2d:7e:26:b7:85:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:5C:D1:81:F2:62:9C:E4:07:CC:4C:B7:DF:B5:EC:87:15:70:D4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u-Fc0YHyYpzkB8xMt9-17IcVcNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.33.0/24
163.5.47.0/24
163.5.61.0/24
163.5.91.0/24
163.5.211.0/24
163.5.215.0/24
163.5.239.0/24
163.5.245.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c6:7a:92:85:c8:21:7f:64:5b:c6:5f:64:d9:f3:47:6d:75:
0a:e7:20:c1:7f:9f:90:b4:3f:fa:a6:2a:e2:1d:70:96:64:ae:
4c:09:9c:5d:30:f9:49:c8:eb:ab:e5:f9:25:c7:c7:b3:35:c6:
61:f0:c6:a8:35:9f:82:38:42:64:08:3c:82:fe:84:af:18:29:
d3:c5:fe:3b:a2:48:20:7c:ed:0f:52:4a:3d:a6:86:50:40:72:
0c:8b:ef:01:a4:40:84:97:00:e1:09:45:4b:3b:db:14:70:e8:
86:1a:f7:e3:08:b4:dd:5a:f8:e5:d4:91:b9:60:8c:b7:be:ab:
aa:be:03:63:d7:2b:29:48:fa:05:bb:8b:41:bc:ab:c1:76:1e:
91:c3:91:1c:1e:70:c7:d8:82:eb:1d:07:b9:a1:34:c7:6c:53:
7e:0d:30:00:bb:d8:bd:7d:45:7a:9e:7a:0c:4c:9b:03:f6:b2:
73:c2:52:12:9a:a6:57:bf:7a:9c:a4:37:d0:2f:13:f9:62:41:
19:78:56:3c:d6:39:95:94:39:0f:2e:68:c9:63:3d:8e:b2:fd:
b6:2e:14:be:40:1e:21:0c:45:fd:9b:94:73:1a:5d:38:00:56:
6d:72:3f:4b:ed:18:c3:9d:df:97:03:ad:31:45:c3:6b:b8:69:
83:25:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:00 2025 by rpki-client