Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9mAfU6Q-Nh6Noi4MBBEtyVqZf08.roa
File: 9mAfU6Q-Nh6Noi4MBBEtyVqZf08.roa (raw, json)
Hash identifier: JZXtohlY2CeXVNwkXsPmLqlqxSojindkupiA61SdfuA=
Subject key identifier: F6:60:1F:53:A4:3E:36:1E:8D:A2:2E:0C:04:11:2D:C9:5A:99:7F:4F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019A49CE87E4BF04D47B2D79BE8A43F78439
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9mAfU6Q-Nh6Noi4MBBEtyVqZf08.roa
Signing time: Mon 03 Nov 2025 13:01:03 +0000
ROA not before: Mon 03 Nov 2025 13:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:ce:87:e4:bf:04:d4:7b:2d:79:be:8a:43:f7:84:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 3 13:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6601f53a43e361e8da22e0c04112dc95a997f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:2c:38:18:22:29:0f:7b:dc:0b:2a:da:24:
94:39:09:8f:58:c8:d1:e5:bc:d1:26:b3:5c:29:f4:
e7:20:bb:b7:f3:44:c4:f8:03:56:fb:0c:dc:db:21:
41:40:0c:9d:ea:18:c6:95:e4:9a:dd:ec:23:0e:c5:
7c:e0:eb:24:a1:88:47:29:34:06:91:f9:3b:56:5f:
7e:69:d4:89:a4:ee:cd:a3:12:8e:10:e1:89:89:0b:
cf:15:87:70:fb:15:81:a0:ef:5f:64:b6:45:c3:b5:
a5:9a:03:84:11:05:10:a8:89:c9:63:18:ae:60:ef:
25:03:50:07:b1:3e:11:bf:55:85:a0:c1:f6:d9:da:
b3:60:ab:5c:83:49:33:d6:18:2d:0f:46:2b:26:5e:
63:9e:11:a9:e4:f6:9e:b3:39:15:35:86:8e:8c:92:
07:86:de:64:34:3c:bd:00:ad:3b:2e:80:9f:9e:d3:
c3:cc:a2:e6:6f:07:8e:87:1a:98:b3:2c:94:df:f0:
40:6b:1d:0c:d9:1e:28:6e:e2:80:0f:aa:a6:95:7e:
64:7f:5d:3d:7c:c5:c8:b0:c7:b5:f1:e8:94:49:88:
e1:97:68:3c:61:1a:9f:59:88:7e:c2:d6:0e:53:b5:
5f:73:94:f0:80:e2:e1:31:76:47:72:8f:51:8d:b6:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:1F:53:A4:3E:36:1E:8D:A2:2E:0C:04:11:2D:C9:5A:99:7F:4F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9mAfU6Q-Nh6Noi4MBBEtyVqZf08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.8.0/23
163.5.13.0/24
163.5.30.0/24
163.5.38.0/24
163.5.58.0/23
163.5.71.0/24
163.5.106.0/24
163.5.112.0/24
163.5.119.0/24
163.5.121.0/24
163.5.125.0/24
163.5.127.0-163.5.129.255
163.5.132.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.200.0/23
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.238.0/24
163.5.241.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a9:8a:f1:f9:de:45:3c:64:4b:32:ec:5e:ec:ff:b0:d1:12:
9c:84:bf:88:f8:94:5d:dd:6b:b8:ef:96:66:a8:04:cf:0d:b0:
09:1d:d2:88:ad:79:dd:25:79:77:7e:ef:25:70:c7:1e:b3:86:
a0:c5:31:26:f9:e6:6f:01:30:15:97:f9:8f:15:f1:16:0c:bf:
36:37:37:b6:a8:e5:9f:17:f9:00:33:b9:5a:54:cf:f1:fa:12:
c8:41:af:ef:83:4a:97:da:c5:1e:85:50:2b:19:d3:0f:72:d8:
e9:df:48:b0:13:34:31:8a:d1:2d:10:ca:c2:85:42:e3:4f:0f:
9b:3a:77:54:f9:0e:94:d7:f7:b3:71:30:42:06:d6:99:4d:b6:
49:c3:1d:b3:46:af:7e:6c:8c:d8:24:56:df:a2:a8:11:33:18:
41:1f:0c:df:ef:07:9f:bd:ef:95:4c:f5:c9:8c:8e:ea:10:53:
1c:e1:9d:7b:47:12:e5:d8:d2:aa:cd:ed:2a:98:2d:cf:9c:ef:
ad:ce:b0:7c:ee:ee:c5:3a:64:78:3f:80:91:1f:3b:10:65:4d:
0f:d6:c5:b2:55:d0:d1:9c:c7:32:73:94:01:1b:b4:2d:90:c9:
80:2f:08:62:bd:9a:6b:33:5d:0e:a3:b8:56:e2:00:14:3c:40:
bd:94:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:59 2025 by rpki-client