Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SqZ2sxF4z6hXHyfWHA0GgfNb4x4.roa
File: SqZ2sxF4z6hXHyfWHA0GgfNb4x4.roa (raw, json)
Hash identifier: 9ptQWYhhFnbur/9WWzVEVmd+9wyiMf9pv8oKewL1y54=
Subject key identifier: 4A:A6:76:B3:11:78:CF:A8:57:1F:27:D6:1C:0D:06:81:F3:5B:E3:1E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A08AE6AAF52C4A6AAE184D7DBBF848BCC1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SqZ2sxF4z6hXHyfWHA0GgfNb4x4.roa
Signing time: Thu 10 Sep 2026 10:39:27 +0000
ROA not before: Thu 10 Sep 2026 10:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 163.5.8.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.22.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:e6:aa:f5:2c:4a:6a:ae:18:4d:7d:bb:f8:48:bc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 10 10:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4aa676b31178cfa8571f27d61c0d0681f35be31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:86:df:31:75:be:71:98:71:25:06:a9:ce:
22:c7:4b:d3:fd:42:42:2c:c0:d6:63:2e:8d:6b:73:
29:0d:4f:fc:c1:78:56:14:78:0a:0e:a4:bb:95:da:
3e:5c:29:c4:ed:26:33:72:f5:40:85:83:67:ff:6e:
1e:c7:3e:b9:a2:00:43:32:4a:95:46:ef:85:97:42:
ce:16:b4:1f:c6:12:eb:a2:86:f4:6f:aa:31:14:29:
62:91:09:e1:df:23:e3:ec:a9:27:d8:94:65:97:a7:
18:a0:f8:1a:dc:bd:3b:96:fd:9d:9c:e9:9a:c4:f8:
46:da:51:d4:5c:21:bf:94:80:21:0b:53:3b:dc:12:
36:6d:bb:72:a4:0c:f6:4b:e1:17:96:a0:42:a3:b8:
11:5a:b2:5f:7b:5d:d3:27:4b:52:bf:7d:4b:69:c0:
38:59:d3:0c:f9:d9:8a:0e:81:cf:65:8d:94:32:32:
fc:8f:ab:a7:40:30:09:06:df:a6:29:23:6e:9b:c7:
02:02:1e:a1:e0:32:50:f6:23:a0:c6:99:10:25:31:
1b:dd:a5:fc:8b:80:3a:02:b4:32:8e:d1:44:ec:2d:
82:aa:fa:84:59:6a:bc:21:56:a3:4d:22:c1:32:ea:
bc:b5:b5:f1:90:54:3b:7b:3d:de:28:ae:b6:d6:51:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:76:B3:11:78:CF:A8:57:1F:27:D6:1C:0D:06:81:F3:5B:E3:1E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SqZ2sxF4z6hXHyfWHA0GgfNb4x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.8.0/24
163.5.13.0/24
163.5.22.0/24
163.5.91.0/24
163.5.106.0/24
163.5.109.0/24
163.5.127.0/24
163.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
83:42:5b:b5:da:38:f6:b4:80:fd:85:81:b1:37:7b:64:12:96:
1b:d5:ae:98:2f:15:8a:81:fc:c4:85:eb:bb:80:42:e0:a8:38:
c3:68:06:0d:7c:7c:17:cf:a8:85:43:45:76:ff:f1:7d:0c:cc:
04:df:0c:d1:14:21:8d:98:3f:0c:4a:5a:cc:e6:44:c9:bf:96:
8b:14:62:6e:02:c2:67:59:90:5c:0e:f0:0a:20:d6:c8:8b:8f:
bb:95:e6:c6:68:3a:fa:b3:ff:86:1b:28:97:74:fb:b4:83:90:
54:1f:72:93:29:93:c8:c2:56:c0:99:44:9d:3b:c1:42:a0:55:
08:94:52:d4:21:cf:48:af:ed:4c:4c:d4:c8:3e:28:17:40:db:
8c:5d:c5:11:a9:93:5c:df:8a:57:fe:23:86:93:54:74:b2:6b:
b0:3b:c5:f8:21:be:af:80:e1:10:a9:2e:6e:78:9f:a5:a8:d0:
4f:fd:4c:cd:55:15:87:4b:1d:ef:fd:6d:ce:97:82:2a:92:1d:
b3:6c:a6:b4:95:7b:82:75:7b:ba:81:24:26:de:16:c5:c7:77:
ba:bb:bf:5b:7d:00:eb:46:15:a0:f7:76:09:ed:9b:99:02:29:
db:64:8f:8b:35:6f:af:39:7b:05:70:bf:62:72:a3:d9:20:77:
6d:b6:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:44 2026 by rpki-client