Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CuO9fOkDlDR8UpEKkDc6J-n7OQE.roa
File: CuO9fOkDlDR8UpEKkDc6J-n7OQE.roa (raw, json)
Hash identifier: 24CSWCSfzN0hxX6h7rfuxE4nw6N/Lt8nwweVDzdkqQw=
Subject key identifier: 0A:E3:BD:7C:E9:03:94:34:7C:52:91:0A:90:37:3A:27:E9:FB:39:01
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F9ECD2E8E8F9190BCBAE511D3A91C05A7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CuO9fOkDlDR8UpEKkDc6J-n7OQE.roa
Signing time: Sun 26 Jul 2026 14:21:14 +0000
ROA not before: Sun 26 Jul 2026 14:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.59.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:cd:2e:8e:8f:91:90:bc:ba:e5:11:d3:a9:1c:05:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 26 14:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ae3bd7ce90394347c52910a90373a27e9fb3901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:8f:fa:05:04:58:eb:c4:fa:3c:b8:ae:dc:
05:77:73:2b:57:97:38:ea:9a:73:27:55:74:8d:21:
ec:89:f5:b1:d6:19:82:26:77:fa:69:66:7c:98:fd:
0f:56:f4:8e:11:ef:79:ac:d8:a9:70:a1:a7:7f:b8:
15:2e:74:af:9c:4e:cb:e6:8b:8b:71:d4:b0:c8:13:
32:7a:9d:fa:6d:d4:31:23:8b:3e:68:b1:84:fa:c9:
46:42:a2:72:fb:cb:a2:b0:c4:ad:05:1b:b9:cf:43:
0f:6f:53:67:bf:63:2f:4d:92:6f:ae:6c:79:64:8a:
1e:4f:69:48:37:be:a6:91:4f:a6:5c:99:3e:fe:85:
72:7d:6c:c6:c2:fb:11:ad:53:61:90:55:60:d7:68:
45:44:b7:5d:6d:9f:54:58:f6:e8:a3:66:11:53:ab:
f5:65:73:7c:c0:26:fe:93:fc:46:93:f1:16:9b:28:
26:ae:58:5d:89:2e:ab:d2:b1:09:b8:38:e1:f8:c7:
64:7a:42:9f:04:64:c4:27:b9:fa:76:d4:9a:23:cd:
7e:aa:34:25:84:ee:0a:68:48:b5:4e:02:fd:7e:e8:
cb:de:79:7e:9d:b3:b4:07:b7:48:c4:95:64:db:c7:
ae:d2:22:96:fa:aa:94:a8:ee:27:af:bb:2f:34:8c:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:BD:7C:E9:03:94:34:7C:52:91:0A:90:37:3A:27:E9:FB:39:01
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CuO9fOkDlDR8UpEKkDc6J-n7OQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
163.5.90.0/24
163.5.112.0/24
163.5.117.0/24
163.5.120.0/23
163.5.125.0/24
163.5.129.0-163.5.130.255
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.160.0/23
163.5.167.0/24
163.5.178.0/24
163.5.196.0/24
163.5.204.0/24
163.5.215.0-163.5.216.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
81:14:4b:21:59:71:99:70:68:59:b6:60:68:1d:41:6b:1e:69:
29:3a:6a:2e:ee:36:80:ae:b1:12:23:20:44:91:77:0b:9b:86:
78:46:a1:fa:c7:90:f4:0b:d2:80:31:e0:97:75:a8:26:9f:45:
83:a1:7a:85:3c:fc:04:bb:2c:93:92:c7:20:8b:2b:3d:8f:be:
c5:8e:67:14:10:28:b6:15:9a:3d:18:d2:be:e2:e1:11:a2:90:
00:4d:62:d5:a4:96:01:03:9e:65:35:d6:1f:19:06:bd:7a:48:
95:38:0d:94:d5:65:8a:61:b9:69:ed:31:81:ca:06:da:2b:5b:
90:6d:20:68:51:00:90:bf:5f:b8:23:a0:14:f2:f9:4e:43:82:
b9:1d:64:7d:e3:c2:f3:b9:fe:0e:f0:3b:06:0f:49:28:fa:29:
2e:85:1d:54:e8:53:d7:4b:c3:d2:3c:bb:a5:45:42:1a:9e:18:
0a:dc:74:bf:3d:dc:48:b9:e1:91:bf:8c:53:ac:04:f7:fe:fd:
4b:d9:c4:68:a9:cf:73:31:5c:6f:fb:2a:33:9e:28:2a:34:e5:
71:83:d6:64:53:0b:a3:d4:48:4e:70:7b:28:f0:1c:6a:34:e3:
e3:86:6f:5f:47:c9:d7:4b:73:42:33:9f:7d:57:e0:f8:7e:9c:
12:1c:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:39 2026 by rpki-client