Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EwMk9XfUuhF1YaVsltNX0U3csGE.roa
File: EwMk9XfUuhF1YaVsltNX0U3csGE.roa (raw, json)
Hash identifier: mgXMwd6HtH7k27r1f3kqta1HKCXvijYp5/bPwKAscS0=
Subject key identifier: 13:03:24:F5:77:D4:BA:11:75:61:A5:6C:96:D3:57:D1:4D:DC:B0:61
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019EA215636AD34148A13CEB57F65BF11DAB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EwMk9XfUuhF1YaVsltNX0U3csGE.roa
Signing time: Sun 07 Jun 2026 12:36:11 +0000
ROA not before: Sun 07 Jun 2026 12:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.16.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.41.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a2:15:63:6a:d3:41:48:a1:3c:eb:57:f6:5b:f1:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 7 12:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=130324f577d4ba117561a56c96d357d14ddcb061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:79:b4:53:d4:92:23:63:a9:0a:e8:c4:28:
9f:18:f5:0a:16:b0:ee:c0:93:56:e7:b9:d8:8a:53:
3a:dc:59:89:5c:8e:87:ae:ad:4e:ed:dc:b8:9b:00:
40:2e:f9:0e:2f:a4:0e:ce:b9:5c:0a:33:ed:8a:07:
83:a2:5f:37:86:74:d9:5a:44:af:81:a3:b2:b1:8c:
64:0c:5d:eb:ca:9b:4d:ea:29:07:5a:40:14:76:ec:
ac:67:b2:85:06:dd:7e:d6:e5:19:df:28:03:06:c1:
70:d9:d3:06:0e:9a:c4:d9:65:9c:90:cf:fa:51:77:
2b:fa:ea:0d:1e:71:71:b9:52:4e:b4:aa:ff:b4:b4:
2d:6c:1a:d0:95:86:28:d4:92:66:fc:f6:29:df:19:
b3:35:3a:ff:f1:8c:2c:ac:93:ae:c9:06:99:79:28:
72:10:52:67:e5:2c:c4:7c:2e:05:77:b4:83:b4:98:
6a:a7:c2:e1:6c:0f:06:8a:7e:c5:e7:f1:33:bc:15:
ac:c1:ac:60:8a:14:8c:71:2b:b3:94:25:96:f9:24:
6c:48:de:a4:3c:1e:20:7f:ad:bf:ef:16:28:e2:d6:
f0:79:72:e3:38:b1:4a:33:df:92:45:e4:06:5b:78:
24:6a:0b:4c:d4:6e:6d:ac:a0:44:d7:cf:c0:96:e7:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:24:F5:77:D4:BA:11:75:61:A5:6C:96:D3:57:D1:4D:DC:B0:61
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EwMk9XfUuhF1YaVsltNX0U3csGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.16.0/24
163.5.29.0/24
163.5.41.0/24
163.5.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2d:8a:3e:cc:ca:bc:10:79:68:ae:26:5b:0e:8a:5e:f1:e4:
e3:f3:11:0d:a2:e7:e1:57:24:3e:ca:85:e4:32:21:a2:71:5c:
06:46:28:78:70:e6:dd:27:6e:08:80:54:27:fe:61:2d:b9:c0:
05:11:90:f3:c9:b5:84:a5:36:96:b4:4d:63:3c:70:b3:5f:c2:
9d:c5:06:08:75:06:8e:59:6f:32:52:73:7c:55:73:f6:f3:18:
b3:ea:15:d3:da:bd:bd:13:5d:9f:95:9a:78:ac:b7:ec:62:2c:
57:55:11:69:d6:5b:8c:d4:27:b2:4c:ad:b5:45:fa:7d:5c:42:
d5:62:a0:4b:10:86:95:6a:24:ea:99:3d:4c:87:b4:8f:07:07:
2b:f5:b3:30:aa:df:d7:fc:e6:2b:50:0e:4e:d9:7f:54:89:3d:
75:ff:ab:a8:08:80:5e:8b:e2:83:ed:28:c1:ac:64:9a:f3:45:
f2:97:b8:fe:b7:31:3f:1f:b3:19:d2:f7:be:30:5d:90:05:10:
8c:cb:1b:bc:3d:d4:c1:36:77:1b:67:35:fe:af:33:1c:25:56:
a6:9a:92:e4:23:79:a8:5b:be:b9:db:b1:26:2a:b6:23:d9:ea:
b4:e2:bc:07:78:19:b3:d8:47:d3:dc:55:f7:0d:fb:2d:f8:ce:
a2:e9:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:01 2026 by rpki-client