Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EWv3L53Mx6McN0gw5FqdpYzeNwo.roa
File: EWv3L53Mx6McN0gw5FqdpYzeNwo.roa (raw, json)
Hash identifier: ZPFHI8PfUM5xEQq/6RbFu6w2UY8GU0qu31mJRQS+2ig=
Subject key identifier: 11:6B:F7:2F:9D:CC:C7:A3:1C:37:48:30:E4:5A:9D:A5:8C:DE:37:0A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01976B5BA6DB2E4ADAAE756E8A2C2DD11CDB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EWv3L53Mx6McN0gw5FqdpYzeNwo.roa
Signing time: Fri 13 Jun 2025 22:14:17 +0000
ROA not before: Fri 13 Jun 2025 22:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:5b:a6:db:2e:4a:da:ae:75:6e:8a:2c:2d:d1:1c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 13 22:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=116bf72f9dccc7a31c374830e45a9da58cde370a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:46:18:f7:1e:f0:7e:29:d5:55:5f:2b:f4:
ac:30:1a:5b:d1:43:a3:d0:e7:b4:0c:fb:ea:06:07:
8f:8f:d1:bc:b6:1a:77:ef:32:7f:ea:a1:2f:48:78:
4a:47:63:51:24:b6:9a:bd:5d:67:cd:70:a5:a5:31:
d7:80:21:b0:50:9c:03:81:74:f2:02:ad:63:d2:d8:
02:09:43:9f:5a:85:9d:59:c5:ec:74:35:27:15:0e:
9e:ff:e3:4b:3c:e8:5c:df:3c:98:bd:0f:93:a4:5e:
f4:9d:70:1c:91:32:16:90:41:1d:44:50:f9:c5:82:
c9:fd:1b:f2:a3:ad:d4:72:a8:d3:db:1e:92:b7:5b:
14:8b:13:49:32:8f:54:ad:23:c6:0e:b2:01:a3:d1:
46:1a:a0:57:b2:b0:ed:7d:85:57:ea:63:e7:24:f7:
de:ad:b9:37:be:d2:85:68:23:e3:d0:03:16:3f:74:
2d:6d:4a:cf:f5:2a:f2:b2:33:b3:2d:d2:11:e6:63:
5d:c6:02:2c:77:21:c5:89:fd:4d:74:10:04:51:71:
1e:36:dc:52:e4:5a:03:ff:8b:9d:21:12:ba:87:87:
b9:07:9c:de:5a:0a:9b:3c:fb:91:c0:7c:1f:e8:b2:
d9:c2:be:44:3f:c7:8f:79:9c:a5:23:75:bf:d8:d0:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:F7:2F:9D:CC:C7:A3:1C:37:48:30:E4:5A:9D:A5:8C:DE:37:0A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EWv3L53Mx6McN0gw5FqdpYzeNwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.59.0/24
163.5.89.0/24
163.5.112.0/24
163.5.121.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.201.0/24
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c5:1f:2d:18:ea:fc:a1:83:43:34:29:ed:8b:96:58:5a:db:
a8:63:58:d4:f3:9a:08:f9:1d:62:23:14:94:25:f1:67:05:c1:
4c:19:d5:21:e4:64:37:31:9e:6a:0f:a3:16:87:e7:5b:be:48:
de:0d:48:79:a6:10:14:1f:91:15:3b:a6:83:ab:92:55:b8:f2:
15:d6:b7:5a:80:49:d1:4a:a0:cd:d4:89:33:8c:a5:17:05:f2:
69:0c:19:19:8b:ba:f0:0b:86:ce:47:55:1e:7c:ca:78:1a:10:
b7:8d:1b:f7:6e:84:9a:b8:7c:ac:3b:14:e6:bc:fc:82:9b:9f:
f2:34:71:6d:55:6e:13:43:22:f1:07:d3:df:40:ce:32:e6:5f:
6e:6a:ad:55:39:ca:e1:b5:11:3f:fe:3f:b8:49:17:d1:13:c2:
0b:ca:bd:3f:ef:cf:74:60:53:29:82:92:8a:32:7e:22:44:e7:
3f:74:04:c7:2a:c9:15:3b:47:17:da:62:90:bb:f5:26:4b:a0:
70:c2:31:6b:f0:ab:fd:45:93:e2:76:3f:cb:68:50:2f:de:0c:
52:8a:8f:ab:2e:a2:8d:f6:2a:ee:18:49:a3:c8:2d:62:10:24:
47:dc:2f:cb:9e:3f:53:b8:9b:87:b8:6e:ae:0a:20:1b:39:e4:
98:2f:88:73
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZdrW6bbLkrarnVuiiwt0RzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNjEzMjIxNDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTZiZjcyZjlkY2NjN2EzMWMzNzQ4MzBlNDVhOWRhNThjZGUzNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw91GGPce8H4p1VVfK/SsMBpb0UOj
0Oe0DPvqBgePj9G8thp37zJ/6qEvSHhKR2NRJLaavV1nzXClpTHXgCGwUJwDgXTy
Aq1j0tgCCUOfWoWdWcXsdDUnFQ6e/+NLPOhc3zyYvQ+TpF70nXAckTIWkEEdRFD5
xYLJ/Rvyo63UcqjT2x6St1sUixNJMo9UrSPGDrIBo9FGGqBXsrDtfYVX6mPnJPfe
rbk3vtKFaCPj0AMWP3QtbUrP9SrysjOzLdIR5mNdxgIsdyHFif1NdBAEUXEeNtxS
5FoD/4udIRK6h4e5B5zeWgqbPPuRwHwf6LLZwr5EP8ePeZylI3W/2NCS8QIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFBFr9y+dzMejHDdIMORanaWM3jcKMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRVd2M0w1M014Nk1jTjBndzVGcWRwWXplTndvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAGj
BR4DBACjBTsDBACjBVkDBACjBXADBACjBXkDBAGjBYADBACjBYsDBACjBY8DBACj
BZIDBACjBZcDBACjBaADBACjBaIDBACjBacDBACjBbIDBACjBbYDBACjBboDBACj
Bb0DBACjBckwDAMEAKMFywMEAKMFzgMEAKMF0QMEAKMF2gMEAKMF3TAMAwQAowXf
AwQAowXgAwQAowXkAwQAowXxMA0GCSqGSIb3DQEBCwUAA4IBAQBexR8tGOr8oYND
NCnti5ZYWtuoY1jU85oI+R1iIxSUJfFnBcFMGdUh5GQ3MZ5qD6MWh+dbvkjeDUh5
phAUH5EVO6aDq5JVuPIV1rdagEnRSqDN1IkzjKUXBfJpDBkZi7rwC4bOR1UefMp4
GhC3jRv3boSauHysOxTmvPyCm5/yNHFtVW4TQyLxB9PfQM4y5l9uaq1VOcrhtRE/
/j+4SRfRE8ILyr0/7890YFMpgpKKMn4iROc/dATHKskVO0cX2mKQu/UmS6BwwjFr
8Kv9RZPidj/LaFAv3gxSio+rLqKN9iruGEmjyC1iECRH3C/Lnj9TuJuHuG6uCiAb
OeSYL4hz
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:02:50 2025 by rpki-client