Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/C463m9ZyZEk3eM2l-6N_RbriHU4.roa
File: C463m9ZyZEk3eM2l-6N_RbriHU4.roa (raw, json)
Hash identifier: 7UxqANlJ4UF+XXfc6ygm/hisOtlOicfBVxWeVwS1Pqk=
Subject key identifier: 0B:8E:B7:9B:D6:72:64:49:37:78:CD:A5:FB:A3:7F:45:BA:E2:1D:4E
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019F1DE745D3FBC7F65F6C5B82B4E499018B
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/C463m9ZyZEk3eM2l-6N_RbriHU4.roa
Signing time: Wed 01 Jul 2026 13:38:43 +0000
ROA not before: Wed 01 Jul 2026 13:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.183.62.0/24 maxlen: 24
5.183.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:e7:45:d3:fb:c7:f6:5f:6c:5b:82:b4:e4:99:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jul 1 13:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b8eb79bd67264493778cda5fba37f45bae21d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:f5:e6:0c:f6:5e:87:c4:d3:81:68:37:8a:
8a:81:ed:1f:d7:05:fe:04:db:d1:f4:96:c3:a5:11:
1e:cb:16:90:33:62:84:ca:d0:ef:e1:91:c9:4f:c2:
3e:1e:1a:38:5a:1b:0b:90:be:01:76:16:92:3c:dd:
b6:e3:fb:e3:0b:d4:fa:d7:57:26:31:57:39:d2:67:
45:dd:8e:04:e9:8f:6d:08:0f:85:c3:8e:fe:c1:a6:
26:52:d5:a1:a8:86:9b:9d:94:cf:92:eb:42:bc:3f:
b5:5e:4e:bb:8f:d5:7d:70:07:64:a8:df:79:90:b7:
51:c9:6a:6d:13:b0:91:0a:08:2d:39:66:4f:d0:c8:
24:81:74:08:70:8d:85:06:6c:eb:b8:a3:5c:30:86:
be:c3:65:31:c9:07:26:90:d0:e4:6f:a5:59:97:a7:
85:31:07:25:d9:e6:31:16:f6:eb:4d:b0:f6:fd:fc:
b3:97:72:47:e8:67:8d:fd:31:77:3f:71:87:bb:67:
1e:f3:56:46:66:dc:19:19:c6:73:6d:a9:ea:81:ff:
a3:c3:fe:b4:16:01:82:f4:5d:08:37:22:14:48:5b:
90:79:74:9e:47:ec:5a:44:a9:3f:64:ba:0d:31:85:
fd:76:d0:a2:86:c1:42:49:18:3f:71:27:40:9f:21:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:B7:9B:D6:72:64:49:37:78:CD:A5:FB:A3:7F:45:BA:E2:1D:4E
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/C463m9ZyZEk3eM2l-6N_RbriHU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.62.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:4a:3f:0a:1f:45:1a:bc:36:14:8d:62:f3:a0:4a:8c:fc:cf:
3a:a4:46:d3:42:74:1a:e2:5c:bf:f8:bd:c5:bf:33:37:fd:9c:
55:fe:69:ba:58:6a:53:74:f4:89:60:c7:ea:78:1c:ca:47:58:
b6:69:08:9a:e8:1b:1f:8c:7a:30:e4:dd:5c:90:6f:c2:29:56:
6b:81:1e:b9:53:ea:62:3b:74:3c:18:72:fb:fb:7f:c4:79:2f:
33:6d:53:a9:ed:ad:03:29:49:bc:b9:17:cb:c1:a5:d0:3f:33:
95:25:50:e9:26:4e:50:0a:62:a8:51:57:1c:60:a2:9e:1e:cc:
bd:b5:16:86:63:c7:ad:17:fd:f5:8e:36:90:46:0e:4c:35:96:
b1:78:f6:73:53:01:55:f9:c6:78:ee:b7:47:27:82:51:36:b8:
3b:57:d0:84:45:34:87:b9:ed:74:92:85:ae:29:7b:83:f6:b1:
db:8d:52:f8:ce:fc:0f:a3:51:14:ae:21:32:e5:7d:26:f4:c2:
94:41:e8:ad:3a:90:6d:f6:14:99:5d:77:a7:89:1d:08:c9:6d:
12:69:0b:74:73:71:8f:2f:a0:e4:9a:5c:0e:20:6d:25:36:a5:
30:53:9d:4c:9c:8e:07:a1:f8:45:5b:df:f6:b8:ad:c0:1f:d8:
62:a8:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:17 2026 by rpki-client