Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H6-GeOBMjHJ-b-LIDy0HTuz6sC4.roa
File: H6-GeOBMjHJ-b-LIDy0HTuz6sC4.roa (raw, json)
Hash identifier: L7hkX0cxNb4VNU12IiE2rnlXujFu1U3i4slJ1xZBHm4=
Subject key identifier: 1F:AF:86:78:E0:4C:8C:72:7E:6F:E2:C8:0F:2D:07:4E:EC:FA:B0:2E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D3E7AF46C8D745A64B7B5484388F5798D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H6-GeOBMjHJ-b-LIDy0HTuz6sC4.roa
Signing time: Mon 30 Mar 2026 11:22:18 +0000
ROA not before: Mon 30 Mar 2026 11:22:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.1.0/24 maxlen: 24
163.5.2.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.21.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.24.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:7a:f4:6c:8d:74:5a:64:b7:b5:48:43:88:f5:79:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 30 11:22:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1faf8678e04c8c727e6fe2c80f2d074eecfab02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:2c:e1:e7:77:e5:7d:99:91:cf:df:2b:fd:
f6:6c:08:87:1c:4a:7b:86:42:d1:d3:44:e2:44:17:
e1:36:5d:2f:f1:26:da:57:6f:90:4b:c8:a1:31:d8:
b8:9a:63:77:d4:d8:ae:ca:60:3c:ae:75:d4:10:52:
86:25:90:e8:b3:87:be:ae:6c:ee:66:60:4b:f7:ee:
a8:cd:bb:fb:40:3c:c1:32:89:10:66:4c:c4:24:4d:
a6:1a:a7:0d:82:d6:bc:62:cc:ee:c9:75:6c:31:cd:
ca:d7:e6:c3:cb:2a:52:a7:60:fe:c8:01:4a:12:43:
63:13:28:2e:b4:d9:5e:7b:75:af:46:4f:c8:a7:5d:
af:8e:1b:4e:35:2d:c7:ed:83:7a:10:55:91:c4:66:
f3:c4:cf:da:3b:80:39:c5:4f:c3:39:13:76:50:71:
59:ce:0d:ae:a9:46:d9:e5:05:0b:c7:47:c6:04:1d:
27:dd:79:b9:41:fe:0e:87:1a:1d:b5:c0:a7:27:d7:
3b:7c:e0:de:12:c1:e7:4f:5d:fe:05:62:be:5e:77:
0c:6a:e1:9d:a6:27:18:c4:4b:2c:36:7a:e6:be:0d:
88:8a:8b:ca:84:7c:77:69:24:d7:23:ec:ab:52:8c:
20:1f:46:eb:2d:bc:89:0f:f4:e6:ec:96:47:57:3c:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AF:86:78:E0:4C:8C:72:7E:6F:E2:C8:0F:2D:07:4E:EC:FA:B0:2E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/H6-GeOBMjHJ-b-LIDy0HTuz6sC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0-163.5.6.255
163.5.10.0/23
163.5.20.0/23
163.5.23.0-163.5.24.255
163.5.42.0/24
163.5.45.0/24
163.5.48.0/24
163.5.55.0/24
163.5.68.0/23
163.5.80.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e7:b2:a6:c0:c0:e4:39:76:75:f2:9f:f2:e6:5b:5f:13:f1:
a8:89:94:49:70:4e:01:29:56:c5:f6:bf:a1:ad:49:e7:ac:ba:
9a:03:6e:5f:db:af:a9:24:26:19:51:e5:f4:e6:92:c6:f2:11:
b7:bc:e9:d5:cc:bb:c5:e0:9c:f5:5c:2d:74:50:0f:88:75:2c:
bd:14:57:62:9c:22:58:dc:e8:b2:3f:22:92:c1:87:7e:89:b1:
bc:1f:83:04:6c:23:d9:62:68:34:91:07:24:1d:1d:fa:96:5e:
39:c5:5f:05:74:4e:87:8a:f5:92:df:d3:75:6c:ec:5a:0b:59:
c3:80:55:3d:74:ee:e7:c6:89:a3:75:6e:bb:75:7e:d3:a1:34:
3d:bc:2d:d9:74:fd:b1:cb:56:20:3d:b2:99:b1:e9:24:16:b2:
87:80:72:e6:7c:cb:2a:77:e7:1b:98:c0:df:e6:07:f4:75:3b:
b2:89:42:81:09:3b:3f:7c:f2:2d:ac:02:6d:81:05:4c:49:54:
20:95:2c:3a:9c:17:4d:5e:6a:ea:de:e7:94:3b:3d:d3:70:c7:
55:7c:5b:36:77:4e:74:83:94:12:2b:64:ef:69:f3:3a:70:34:
e6:9a:dc:57:d9:0a:29:a3:3f:22:7f:ed:d3:09:e2:c3:86:29:
6f:2e:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:12 2026 by rpki-client