Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Aqk7_qcRtPnm7aFlnVzP0TPQnEU.roa
File: Aqk7_qcRtPnm7aFlnVzP0TPQnEU.roa (raw, json)
Hash identifier: Aqac2nlpb2tjE+vxBDwblPkUIKl8WKOgIst3vT3SYTU=
Subject key identifier: 02:A9:3B:FE:A7:11:B4:F9:E6:ED:A1:65:9D:5C:CF:D1:33:D0:9C:45
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F93F8F715C84077E8BE8A4522AEDC40CB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Aqk7_qcRtPnm7aFlnVzP0TPQnEU.roa
Signing time: Fri 24 Jul 2026 11:53:14 +0000
ROA not before: Fri 24 Jul 2026 11:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.39.0/24 maxlen: 24
163.5.49.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:f8:f7:15:c8:40:77:e8:be:8a:45:22:ae:dc:40:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 24 11:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02a93bfea711b4f9e6eda1659d5ccfd133d09c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:90:bb:82:aa:e7:a2:b6:e7:11:04:ec:12:
3c:4e:5d:2b:34:c8:41:02:8b:bc:7e:07:8b:b7:8d:
11:43:07:f0:29:68:ff:0d:18:66:d7:c7:36:de:77:
9c:a0:6e:94:6a:33:28:90:c9:6a:ec:db:e9:9f:f5:
50:c9:56:b3:30:2f:e4:85:fa:45:3f:11:df:b0:e0:
3b:af:34:d1:d2:8c:bd:ea:a4:c1:cb:ce:fd:30:cf:
82:2b:ea:25:3d:32:63:d9:bf:57:91:00:1f:e4:e3:
7c:cb:0e:25:e1:bd:50:1a:d8:49:f6:fc:62:f6:b0:
c9:05:13:a7:92:76:55:bf:e8:03:d6:c8:bb:90:cf:
9f:1c:a6:2a:fd:dd:2a:cc:bb:a1:44:fb:04:b3:be:
dd:79:91:2d:38:1b:85:f9:10:90:14:a8:04:fe:fb:
ed:80:6d:9b:e6:f8:bb:e8:ee:40:44:02:54:fc:48:
ba:f4:6a:71:a4:69:bc:d9:48:a9:cc:3d:24:36:ad:
32:ba:46:d5:19:36:4e:92:29:eb:e5:1b:e6:7c:4f:
03:46:d6:da:23:f8:b0:a2:0d:2c:04:6f:67:09:5f:
19:60:03:cd:5f:90:40:e8:9a:3d:04:0d:41:88:81:
6d:d2:86:e9:6f:79:2c:42:1b:d4:e6:fa:99:a4:b1:
38:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:3B:FE:A7:11:B4:F9:E6:ED:A1:65:9D:5C:CF:D1:33:D0:9C:45
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Aqk7_qcRtPnm7aFlnVzP0TPQnEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.39.0/24
163.5.49.0/24
163.5.66.0/24
163.5.182.0/24
163.5.206.0/24
163.5.226.0/24
163.5.237.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d3:ce:1e:59:bb:e8:76:11:77:5d:71:42:5f:21:20:97:35:
f6:31:c8:d4:fb:d9:12:95:68:fa:e5:fd:f8:d0:be:a2:9e:99:
a1:56:8f:08:e7:a6:68:73:e2:08:a3:22:01:29:82:69:1a:0c:
a6:94:f9:f2:4a:a3:e2:59:4a:ff:82:7f:f8:0f:d1:84:1b:cf:
b6:4d:ad:5e:ae:69:2e:e9:5d:f6:c0:16:0f:ce:4e:60:9a:ca:
9b:df:16:de:01:43:de:3f:99:be:4d:70:5d:e5:82:38:a4:3c:
69:dd:2d:be:6f:fa:79:07:61:3a:3a:0b:0c:b6:fe:c6:53:0c:
4d:5b:11:3e:82:01:7a:0e:c5:08:ac:47:bd:c3:19:f0:b9:c9:
9d:31:fc:7b:c7:99:1f:65:01:7b:af:0f:37:b0:9e:c4:83:e5:
1c:dd:e6:66:72:ab:a5:07:c0:3f:d7:2c:aa:19:00:05:9b:3e:
e5:88:4b:fa:01:33:fe:c9:11:46:59:fc:3b:e0:e5:89:00:29:
dd:94:6e:12:bd:71:1a:94:bb:a9:66:fa:87:6b:e4:2c:5f:84:
96:32:d2:b3:8f:3c:b9:ad:99:5b:7d:45:6c:a1:4d:7f:8c:84:
1c:88:64:e7:9d:94:ca:44:f9:e6:71:11:4e:98:1d:88:64:25:
b8:7c:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:28:36 2026 by rpki-client