Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z7-6rhAtPuXtx-gnmu7zn5_Djbc.roa
File: z7-6rhAtPuXtx-gnmu7zn5_Djbc.roa (raw, json)
Hash identifier: KLqOYgHdgu+6+04VyUFhFFJZJSm/9kINfiDRvg8j1hk=
Subject key identifier: CF:BF:BA:AE:10:2D:3E:E5:ED:C7:E8:27:9A:EE:F3:9F:9F:C3:8D:B7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0199DC080917B037B69AA7014C3D636BE91F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z7-6rhAtPuXtx-gnmu7zn5_Djbc.roa
Signing time: Mon 13 Oct 2025 05:25:38 +0000
ROA not before: Mon 13 Oct 2025 05:25:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.62.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:08:09:17:b0:37:b6:9a:a7:01:4c:3d:63:6b:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 13 05:25:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfbfbaae102d3ee5edc7e8279aeef39f9fc38db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:ea:eb:e9:ca:67:aa:be:25:c1:94:c1:77:
df:e7:81:70:e6:a8:95:ed:8c:8e:02:93:1f:2b:ee:
9a:35:2b:82:31:8d:3b:bd:4e:be:e1:d2:5f:04:40:
dd:dd:21:d9:bb:8d:1f:40:4e:e8:5b:27:6b:83:89:
92:28:fa:8b:24:ee:47:ce:ca:65:95:3e:e2:70:75:
da:b6:9e:85:e2:5d:74:67:74:9d:40:21:57:7d:c2:
87:b8:d7:c0:5c:4f:00:76:49:9b:1a:40:d6:ce:51:
fd:6c:c7:92:1e:cc:08:d0:bb:34:ad:39:06:39:9e:
ae:33:b2:7c:f4:30:98:66:10:6a:62:02:34:25:2d:
11:4f:d2:a0:ba:47:8f:85:91:1d:43:e4:25:92:e4:
2e:f0:24:a5:b3:86:1a:fa:48:a1:ec:52:8f:46:a9:
aa:49:47:a3:d9:40:21:2f:9d:9b:87:d4:32:8e:c3:
e8:b8:12:81:1d:d8:e4:0b:ee:08:96:94:44:3b:d5:
e0:0f:dc:15:ab:28:52:a8:f9:e3:16:fa:48:22:a4:
75:8a:e5:f8:a8:18:b0:6b:65:ab:25:8d:a7:e8:40:
bc:2c:a7:e9:08:64:f4:b5:28:c7:a7:9f:03:2d:75:
31:7e:fa:36:75:86:64:5e:1b:eb:fe:cf:e2:01:4d:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:BA:AE:10:2D:3E:E5:ED:C7:E8:27:9A:EE:F3:9F:9F:C3:8D:B7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z7-6rhAtPuXtx-gnmu7zn5_Djbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.62.0/24
163.5.149.0/24
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8b:80:66:8c:8b:4b:39:33:cd:54:c0:91:da:01:1e:fc:7c:
10:36:19:0f:68:ab:c0:53:2b:6d:1f:6a:8d:b1:fe:c7:6f:69:
cd:05:cc:c8:a1:9b:69:71:68:c1:ac:00:a2:a1:2a:b5:31:d8:
54:82:75:95:f6:1c:45:d6:a8:1c:29:7a:18:b2:6e:66:0a:65:
9a:a6:cc:7d:c4:17:f2:e0:f6:3c:59:5e:05:78:72:4d:33:52:
24:03:f7:f6:8a:8d:45:d7:c7:61:60:39:65:b8:c6:74:32:5e:
ca:e0:89:07:1f:c8:7a:fd:44:56:6c:45:53:8c:ff:4a:42:68:
17:17:de:4b:bd:96:a5:fc:eb:57:1a:52:87:2a:9f:0d:e1:4a:
80:7e:84:d8:99:42:92:26:9f:1c:ec:9b:d9:bd:31:db:22:d7:
85:f2:7e:89:2b:e7:be:1e:a3:87:c7:30:82:15:7a:1d:4f:df:
2d:ba:ce:ba:47:ee:e8:5b:f6:bc:ca:3b:ae:e2:69:eb:23:db:
99:82:a3:10:bb:33:ea:05:77:01:7a:cf:79:61:fc:cb:b2:b5:
b3:7c:77:c6:cd:42:32:07:cd:b8:dc:73:54:b8:1d:ab:8f:aa:
31:6c:b4:6b:1c:33:62:f4:60:cc:ce:d3:02:6b:cf:a0:7f:ed:
ef:bb:aa:92
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZncCAkXsDe2mqcBTD1ja+kfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUxMDEzMDUyNTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmJmYmFhZTEwMmQzZWU1ZWRjN2U4Mjc5YWVlZjM5ZjlmYzM4ZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mPq6+nKZ6q+JcGUwXff54Fw5qiV
7YyOApMfK+6aNSuCMY07vU6+4dJfBEDd3SHZu40fQE7oWydrg4mSKPqLJO5Hzspl
lT7icHXatp6F4l10Z3SdQCFXfcKHuNfAXE8AdkmbGkDWzlH9bMeSHswI0Ls0rTkG
OZ6uM7J89DCYZhBqYgI0JS0RT9KgukePhZEdQ+QlkuQu8CSls4Ya+kih7FKPRqmq
SUej2UAhL52bh9QyjsPouBKBHdjkC+4IlpREO9XgD9wVqyhSqPnjFvpIIqR1iuX4
qBiwa2WrJY2n6EC8LKfpCGT0tSjHp58DLXUxfvo2dYZkXhvr/s/iAU0YLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM+/uq4QLT7l7cfoJ5ru85+fw423MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvejctNnJoQXRQdVh0eC1nbm11N3puNV9EamJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowU+AwQA
owWVAwQAowW7MA0GCSqGSIb3DQEBCwUAA4IBAQAwi4BmjItLOTPNVMCR2gEe/HwQ
NhkPaKvAUyttH2qNsf7Hb2nNBczIoZtpcWjBrACioSq1MdhUgnWV9hxF1qgcKXoY
sm5mCmWapsx9xBfy4PY8WV4FeHJNM1IkA/f2io1F18dhYDlluMZ0Ml7K4IkHH8h6
/URWbEVTjP9KQmgXF95LvZal/OtXGlKHKp8N4UqAfoTYmUKSJp8c7JvZvTHbIteF
8n6JK+e+HqOHxzCCFXodT98tus66R+7oW/a8yjuu4mnrI9uZgqMQuzPqBXcBes95
YfzLsrWzfHfGzUIyB8243HNUuB2rj6oxbLRrHDNi9GDMztMCa8+gf+3vu6qS
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:37 2025 by rpki-client