Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PrvuMmVJ8zP1ZzbiS8AL8gWj7M4.roa
File: PrvuMmVJ8zP1ZzbiS8AL8gWj7M4.roa (raw, json)
Hash identifier: bbyAV3v4njH1Frid9JcnAf4UZToxUuxLw35jYUrDm80=
Subject key identifier: 3E:BB:EE:32:65:49:F3:33:F5:67:36:E2:4B:C0:0B:F2:05:A3:EC:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0AEEB90E7EDB25E15E5CC74301724AE7D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PrvuMmVJ8zP1ZzbiS8AL8gWj7M4.roa
Signing time: Thu 17 Sep 2026 10:31:08 +0000
ROA not before: Thu 17 Sep 2026 10:31:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 163.5.193.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:eb:90:e7:ed:b2:5e:15:e5:cc:74:30:17:24:ae:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 17 10:31:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ebbee326549f333f56736e24bc00bf205a3ecce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:8d:dc:d7:53:06:fe:2d:4f:ff:1d:9e:de:
1c:bd:79:26:fa:d5:f4:9b:ac:dc:bd:9c:89:67:6f:
62:b0:e3:3c:21:30:41:61:c8:2a:14:de:ab:65:fe:
2e:37:41:7e:36:ea:7b:c6:89:c5:00:fb:c7:9e:3d:
7e:9e:52:5b:d4:2b:cf:02:6f:29:14:a7:0f:d4:eb:
a1:66:b5:df:59:52:18:ce:ca:0a:9a:dd:d9:20:52:
41:15:1d:1b:03:f4:15:66:21:9d:08:30:ef:ba:c3:
f4:99:59:ee:bb:8f:d0:f0:0f:c4:63:ba:76:d6:da:
2a:f1:eb:8e:54:a0:ac:28:6e:c8:e3:e9:8f:13:df:
12:8c:cc:b3:e2:87:af:5d:f6:75:27:5e:5c:07:cc:
a6:02:93:4a:ea:0d:08:0a:79:13:fd:e8:c7:3e:a8:
5a:08:0e:60:b2:fc:d1:8e:36:35:ae:53:b6:e4:d3:
8e:4d:bb:63:45:8e:13:88:51:f1:10:38:17:81:18:
7a:c5:b5:52:3e:4d:6d:dc:64:0d:e2:8a:b4:d5:8f:
e4:69:15:55:c7:c0:de:cc:ed:1e:aa:bc:b1:8b:cb:
c5:25:3d:79:ae:07:f3:05:42:35:1c:11:2d:6c:c3:
ad:15:e7:b4:28:6f:fd:cb:b9:48:22:c9:36:c3:1e:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:EE:32:65:49:F3:33:F5:67:36:E2:4B:C0:0B:F2:05:A3:EC:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PrvuMmVJ8zP1ZzbiS8AL8gWj7M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.193.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b7:16:a3:d4:ac:78:96:50:5d:50:69:7d:71:bd:e0:66:bf:
96:7e:54:c8:07:26:26:0c:35:d4:ac:e1:5b:ef:43:ce:bf:31:
20:82:04:c7:ca:5f:96:ba:49:d6:f7:e6:69:91:3e:11:06:6a:
f6:23:bb:d3:c8:6e:56:85:1c:02:f2:63:65:29:d7:97:68:5d:
c3:e8:20:fc:7b:26:70:e1:09:12:17:2e:42:c8:04:62:c5:4c:
51:04:46:b0:af:c4:47:1c:7c:f4:c4:0b:83:39:51:7b:b7:eb:
ac:5d:f0:01:64:ca:a4:12:f2:ad:44:2b:ec:ac:64:bd:8c:40:
71:1e:e3:7a:98:a0:d7:b6:fd:38:3a:27:81:ca:6f:5e:82:0f:
a4:32:3b:73:d4:c1:d8:d6:db:cd:0c:67:35:ba:21:10:75:bf:
04:5e:2e:79:16:14:a4:1e:24:40:0b:7f:ab:e4:c1:7a:59:ca:
62:68:f8:7e:a3:74:17:52:87:92:c9:07:4b:ca:a9:ea:0d:06:
4d:bc:b0:c0:aa:ed:fb:d5:38:6f:fe:06:a6:d2:f3:db:23:60:
f1:f2:02:02:d6:80:f2:cc:04:1b:01:26:36:4e:fa:c1:09:14:
b2:99:2b:46:42:5a:8d:83:7c:39:ee:8d:84:7c:8d:f8:cd:3b:
6e:10:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:09 2026 by rpki-client