Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PoJ-umFJ8BC7O2EfJHcbvgX5HUI.roa
File: PoJ-umFJ8BC7O2EfJHcbvgX5HUI.roa (raw, json)
Hash identifier: Fl6J5HenZYqQsJdm/GSMhF7QKEfOienxwlJJ0yJfVkk=
Subject key identifier: 3E:82:7E:BA:61:49:F0:10:BB:3B:61:1F:24:77:1B:BE:05:F9:1D:42
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01985BED85E9FF1ECF2F449FFDECC00171DB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PoJ-umFJ8BC7O2EfJHcbvgX5HUI.roa
Signing time: Wed 30 Jul 2025 15:22:29 +0000
ROA not before: Wed 30 Jul 2025 15:22:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.47.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:ed:85:e9:ff:1e:cf:2f:44:9f:fd:ec:c0:01:71:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 30 15:22:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e827eba6149f010bb3b611f24771bbe05f91d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:82:ae:4a:0a:0f:39:56:48:56:10:cb:f8:
e2:d2:d4:7e:8f:04:a6:c0:6c:91:d4:72:7d:f8:ed:
bd:ab:01:79:27:9a:5a:34:f1:b4:fd:e7:5d:48:0c:
b7:02:05:75:e3:91:08:71:bf:c7:a8:a8:cd:07:df:
1d:e4:71:ca:47:59:b7:c2:58:1e:20:55:e1:c3:b1:
95:d8:5e:ee:b0:b0:41:ff:4f:c6:2b:78:c3:6c:a8:
46:5f:93:ab:82:64:81:27:3b:7d:e5:42:89:10:03:
39:e8:5c:b0:ec:d0:d0:46:d3:26:72:01:dc:28:c1:
ae:b4:3e:f7:92:5a:e4:98:f8:bc:f4:97:6b:3f:39:
f1:d7:ef:7e:47:a9:6b:f9:37:9a:2f:6b:43:e4:0f:
88:a0:bf:36:b8:8f:ef:fa:e7:58:f7:6a:82:53:d8:
6a:b6:ea:87:d9:29:60:37:7b:c9:d2:8f:51:14:80:
06:ff:75:36:db:2a:49:25:18:e4:71:0d:23:b8:c7:
6d:51:60:2b:08:13:47:a2:7f:cf:f4:31:da:ff:4d:
c1:30:cd:5e:c4:38:c0:bb:55:e8:c9:a6:64:a7:44:
df:9b:e3:74:b5:db:d5:90:c7:28:6d:f8:63:2e:9d:
23:a3:60:0c:dd:be:e7:a8:97:cc:2d:b9:be:09:da:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:82:7E:BA:61:49:F0:10:BB:3B:61:1F:24:77:1B:BE:05:F9:1D:42
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PoJ-umFJ8BC7O2EfJHcbvgX5HUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.47.0/24
163.5.59.0/24
163.5.66.0/24
163.5.84.0/24
163.5.89.0/24
163.5.104.0/24
163.5.106.0/24
163.5.112.0/24
163.5.121.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.201.0/24
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.237.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:71:01:6b:28:ba:72:3e:93:0f:3b:9a:3d:de:88:91:8d:44:
92:30:30:ce:2d:0c:4d:6f:bd:02:4d:68:90:ad:69:6d:64:bf:
93:2e:cf:92:b2:28:2e:ce:63:9f:56:ae:ca:71:f8:14:80:d0:
12:0e:ac:d3:ad:4a:ac:f1:3c:ca:44:bd:1b:a3:6b:10:48:7f:
b1:e6:b2:85:ee:86:46:48:18:98:e0:7f:59:2f:fa:7d:62:5f:
76:84:90:62:ff:d5:93:68:16:28:6b:d6:c6:da:e1:98:e6:90:
8b:f9:57:59:18:90:c2:da:62:42:a4:dd:99:bf:95:be:3e:fa:
42:b1:61:22:fb:42:01:fd:e9:a4:e0:ba:78:4c:44:5e:30:cf:
b2:0c:cf:8e:ff:9f:d8:0e:5b:d8:2a:11:db:0c:76:30:60:4e:
5a:4f:e4:a1:a1:08:56:46:77:e7:f7:21:a4:02:de:35:81:d3:
30:44:f2:69:ad:98:80:07:5a:c9:79:91:68:f4:da:03:ee:cd:
5c:c5:79:05:de:c5:44:75:34:f2:fa:04:b8:6d:c1:29:55:05:
0c:4e:32:b6:76:dd:dc:88:c8:f1:3c:3b:66:bc:ab:19:fb:4f:
6d:60:3a:43:68:c4:ed:fe:04:87:78:b2:6d:ad:f6:2b:72:51:
c5:ed:e1:33
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAZhb7YXp/x7PL0Sf/ezAAXHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNzMwMTUyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTgyN2ViYTYxNDlmMDEwYmIzYjYxMWYyNDc3MWJiZTA1ZjkxZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ByCrkoKDzlWSFYQy/ji0tR+jwSm
wGyR1HJ9+O29qwF5J5paNPG0/eddSAy3AgV145EIcb/HqKjNB98d5HHKR1m3wlge
IFXhw7GV2F7usLBB/0/GK3jDbKhGX5OrgmSBJzt95UKJEAM56Fyw7NDQRtMmcgHc
KMGutD73klrkmPi89JdrPznx1+9+R6lr+TeaL2tD5A+IoL82uI/v+udY92qCU9hq
tuqH2SlgN3vJ0o9RFIAG/3U22ypJJRjkcQ0juMdtUWArCBNHon/P9DHa/03BMM1e
xDjAu1XoyaZkp0Tfm+N0tdvVkMcobfhjLp0jo2AM3b7nqJfMLbm+CdpE8QIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFD6CfrphSfAQuzthHyR3G74F+R1CMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUG9KLXVtRko4QkM3TzJFZkpIY2J2Z1g1SFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBACj
BR4DBACjBS8DBACjBTsDBACjBUIDBACjBVQDBACjBVkDBACjBWgDBACjBWoDBACj
BXADBACjBXkDBAGjBYADBACjBYsDBACjBY8DBACjBZIDBACjBZcDBACjBaADBACj
BacDBACjBbIDBACjBbYDBACjBboDBACjBb0DBACjBckwDAMEAKMFywMEAKMFzgME
AKMF0QMEAKMF2gMEAKMF4AMEAKMF5AMEAKMF7QMEAKMF8TANBgkqhkiG9w0BAQsF
AAOCAQEAbnEBayi6cj6TDzuaPd6IkY1EkjAwzi0MTW+9Ak1okK1pbWS/ky7PkrIo
Ls5jn1auynH4FIDQEg6s061KrPE8ykS9G6NrEEh/seayhe6GRkgYmOB/WS/6fWJf
doSQYv/Vk2gWKGvWxtrhmOaQi/lXWRiQwtpiQqTdmb+Vvj76QrFhIvtCAf3ppOC6
eExEXjDPsgzPjv+f2A5b2CoR2wx2MGBOWk/koaEIVkZ35/chpALeNYHTMETyaa2Y
gAdayXmRaPTaA+7NXMV5Bd7FRHU08voEuG3BKVUFDE4ytnbd3IjI8Tw7ZryrGftP
bWA6Q2jE7f4Eh3iyba32K3JRxe3hMw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:56:43 2025 by rpki-client