Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ak5_iiMSFLuk2smIyNa1h0BFyU4.roa
File: Ak5_iiMSFLuk2smIyNa1h0BFyU4.roa (raw, json)
Hash identifier: 9FyC41DOdwziHYS99kyrZGB59LwTpq1poNBRdgbqQFY=
Subject key identifier: 02:4E:7F:8A:23:12:14:BB:A4:DA:C9:88:C8:D6:B5:87:40:45:C9:4E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019E9BD99D94452EADEB3D78F8940A908487
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ak5_iiMSFLuk2smIyNa1h0BFyU4.roa
Signing time: Sat 06 Jun 2026 07:33:10 +0000
ROA not before: Sat 06 Jun 2026 07:33:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 163.5.131.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:d9:9d:94:45:2e:ad:eb:3d:78:f8:94:0a:90:84:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 6 07:33:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=024e7f8a231214bba4dac988c8d6b5874045c94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:f8:48:64:ba:78:bc:8e:09:4c:35:07:8c:
3a:39:c4:9a:65:72:62:33:33:b2:97:83:e3:04:1e:
c9:57:1b:78:8d:1c:b0:63:2b:6e:8a:d9:74:fb:4a:
f1:b9:6c:ee:8d:11:fe:9b:07:83:2a:2f:0e:70:46:
e1:e2:00:83:9f:48:3f:b4:97:84:c4:83:d6:91:56:
e8:79:59:e5:54:f7:d6:90:7a:65:3c:2a:1e:ca:f7:
79:f5:d1:75:87:c9:41:ba:fd:85:85:ff:94:dd:f8:
d4:2c:61:c5:2f:2e:dc:0b:5c:0d:f9:f6:23:ee:4b:
ef:5e:1e:a9:c3:2c:61:3b:f9:ed:50:0e:14:91:e5:
23:1e:34:13:10:13:a2:36:ee:06:e7:04:53:92:6d:
dc:b9:31:1b:81:af:20:17:4f:f9:c5:a0:9f:77:7c:
ed:9d:91:95:14:e2:d4:63:fc:76:88:70:95:05:28:
36:a3:5e:db:f8:18:9c:18:a8:1c:f9:80:16:39:75:
75:29:b3:88:33:c4:5a:d6:b5:cd:21:12:02:af:60:
71:92:3d:ff:ea:0c:d7:b5:22:4e:82:10:51:02:45:
c5:bc:d3:97:b3:71:e2:ef:cf:f3:44:da:5b:83:47:
05:be:5d:e0:08:6d:ca:dc:25:6e:b5:97:09:b3:c5:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:7F:8A:23:12:14:BB:A4:DA:C9:88:C8:D6:B5:87:40:45:C9:4E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ak5_iiMSFLuk2smIyNa1h0BFyU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.131.0/24
163.5.134.0/24
163.5.231.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2e:2b:44:fe:eb:fd:38:dd:e8:a5:18:dc:bd:84:f7:43:92:
b2:f7:38:24:7f:23:b3:30:1d:92:22:92:9d:c4:13:c8:07:c9:
23:a7:4d:14:02:8c:27:3c:11:8c:0a:c2:c2:04:d1:c6:1e:80:
42:3b:cd:a1:20:77:42:06:19:8b:b8:7b:1a:93:df:80:39:f6:
75:b7:b3:1e:1a:51:fd:9d:f4:8b:d8:ce:cf:2e:52:bf:ae:cd:
dc:9a:2d:5f:a7:fe:09:b9:e4:c7:6a:f6:1a:e3:11:aa:e4:c0:
93:d7:fc:fb:fc:dd:6e:bf:61:ba:9c:71:7a:19:90:18:cb:12:
7f:c0:f4:f0:c0:44:2c:00:f5:56:08:b4:b9:93:0a:4a:71:3d:
6c:71:c0:d9:ab:cf:a4:b8:94:7e:e6:b0:2f:15:45:f8:1e:32:
fd:d5:f0:a6:b6:f7:f1:86:fa:ae:f5:60:4f:44:20:e4:d5:16:
ea:a3:c6:06:00:17:ef:1b:ec:ca:0a:07:17:e3:86:33:57:0a:
c0:34:36:97:19:d2:08:6e:09:0e:5d:32:92:1c:d6:25:ff:55:
46:ab:17:ae:d8:41:52:38:79:c4:64:1c:90:49:96:3b:c0:d8:
e3:02:e6:46:c5:52:3d:5a:0b:ea:33:0e:83:72:ae:98:52:8b:
5f:f6:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:44 2026 by rpki-client