Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SUSN1BG5DoVmmPQom5IRNi5nz9c.roa
File: SUSN1BG5DoVmmPQom5IRNi5nz9c.roa (raw, json)
Hash identifier: d49OByxjg4wjF7OFiUwvBl3qtg4PFHZlbfxQwwCXHDA=
Subject key identifier: 49:44:8D:D4:11:B9:0E:85:66:98:F4:28:9B:92:11:36:2E:67:CF:D7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019C84B8C50BB474F47F0D43DDCD0DD57302
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SUSN1BG5DoVmmPQom5IRNi5nz9c.roa
Signing time: Sun 22 Feb 2026 09:40:27 +0000
ROA not before: Sun 22 Feb 2026 09:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.53.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:84:b8:c5:0b:b4:74:f4:7f:0d:43:dd:cd:0d:d5:73:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 22 09:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49448dd411b90e856698f4289b9211362e67cfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:da:ff:26:dd:d5:ec:82:a3:7f:a3:b7:5f:
08:75:0c:f9:fd:cc:2c:47:46:aa:f1:fc:4d:24:d9:
46:d5:2b:3d:a4:75:02:6c:2c:e6:33:cb:43:6d:39:
12:4f:90:54:4f:d9:18:86:03:9c:46:f3:62:11:fb:
02:68:de:8f:13:7a:6f:ce:c0:e5:a5:f7:00:f3:da:
87:e5:9e:bf:40:0f:11:56:bc:2c:79:bd:44:ac:e4:
0f:ba:ce:db:e8:56:0e:5c:c4:22:a8:be:c3:8f:cd:
3b:67:b2:a7:c4:32:ec:01:2f:1a:37:d2:b3:40:87:
96:86:d9:f5:17:06:cc:4f:9e:9c:16:8e:a0:96:d2:
bd:d1:dd:5a:16:79:8d:58:51:82:2e:7e:2d:64:21:
38:19:8a:70:33:7b:15:4e:f3:b3:89:8a:62:55:a3:
82:c5:eb:db:58:50:83:b9:5f:54:ea:18:36:c9:7d:
b9:43:59:a2:8f:dc:1d:46:2f:46:b3:18:72:59:f2:
93:12:fa:7c:b9:b3:c5:d0:42:11:fd:c3:5f:5d:b0:
ba:e4:53:8e:76:6a:9e:55:cf:90:0c:ec:df:7a:fc:
1c:db:3a:a5:4a:26:fb:75:04:c9:25:20:c3:f7:8d:
a1:7e:1f:34:c6:80:0c:84:4d:2d:12:f3:fe:83:81:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:44:8D:D4:11:B9:0E:85:66:98:F4:28:9B:92:11:36:2E:67:CF:D7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SUSN1BG5DoVmmPQom5IRNi5nz9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.53.0/24
163.5.136.0/24
163.5.157.0/24
163.5.161.0/24
163.5.179.0/24
163.5.182.0/24
163.5.200.0/24
163.5.215.0/24
163.5.238.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:26:96:05:ae:80:df:18:aa:fa:18:85:1a:f1:40:ec:c1:b0:
ca:94:16:54:47:08:ca:0b:fb:94:47:be:ba:c9:e4:71:c8:7d:
bb:61:14:26:0a:d7:34:d7:cb:cb:a2:28:39:9c:12:03:40:6b:
5a:a1:37:b8:a9:bd:61:c4:b6:e1:fa:03:34:38:03:7d:d7:94:
d9:ee:5a:2f:be:68:c0:da:ee:5c:25:13:8b:f0:ce:e4:51:db:
d7:75:cb:99:3f:2d:ae:0f:a3:97:d1:94:73:3e:16:86:86:16:
aa:af:15:cf:c8:a6:1b:c5:b3:c1:5a:be:06:e1:dc:ac:89:4c:
33:a1:81:23:5a:1b:19:2c:03:c4:17:51:6b:b7:aa:0b:c3:10:
e6:aa:38:43:8e:ef:e9:b7:a1:e8:7a:9e:03:2f:7c:00:17:8c:
bc:4a:b5:12:29:ad:92:06:bd:5e:8a:99:ee:7b:61:da:a8:26:
34:77:a6:20:31:c0:50:35:ad:93:80:18:95:56:ba:28:62:a5:
2b:13:1d:a8:b6:0a:8e:6f:7c:4b:50:fc:ec:97:d6:7b:54:4d:
07:f6:ad:17:7c:40:f3:6a:78:b0:73:a5:c0:dd:73:14:12:68:
1b:77:ce:28:bf:3b:59:6d:9d:bd:11:b7:48:d8:38:b7:21:41:
54:a8:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:12 2026 by rpki-client