Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Un-ebvq_CS0_5SERTpefh7yIrLQ.roa
File: Un-ebvq_CS0_5SERTpefh7yIrLQ.roa (raw, json)
Hash identifier: qlu1rvJWsyUs6YoedBX4vVQwtl6WUnckMEn80Dl0sb0=
Subject key identifier: 52:7F:9E:6E:FA:BF:09:2D:3F:E5:21:11:4E:97:9F:87:BC:88:AC:B4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0B98A3B526F205EE6E353A89AAD972D76
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Un-ebvq_CS0_5SERTpefh7yIrLQ.roa
Signing time: Sat 19 Sep 2026 12:00:39 +0000
ROA not before: Sat 19 Sep 2026 12:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 163.5.50.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:8a:3b:52:6f:20:5e:e6:e3:53:a8:9a:ad:97:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 19 12:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=527f9e6efabf092d3fe521114e979f87bc88acb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:98:35:38:05:33:1b:bf:a6:6d:8f:ec:d7:
3b:d7:85:33:80:96:f4:ec:47:03:99:78:ca:25:38:
b7:8a:c8:81:f9:65:ac:1c:f4:70:c3:e2:f4:a1:5f:
ab:3a:83:a2:d9:f4:31:35:15:02:64:d3:3d:97:7a:
ad:95:54:15:ba:b9:21:4e:66:81:19:7f:cd:84:a6:
a7:33:9e:3b:8f:e3:dc:b4:b3:ac:9c:03:38:7a:10:
a4:12:66:43:a0:2e:f1:16:5b:cd:70:2a:7a:5b:ab:
2b:07:70:7f:a9:71:fd:85:4f:52:c3:17:d4:56:4b:
61:35:e1:e1:e6:45:26:0c:e6:ce:a8:93:07:6c:15:
d5:29:79:09:88:52:6a:4c:6d:bd:1f:d7:b6:1c:11:
ad:ce:8e:57:1b:08:c6:8f:b6:aa:40:c7:34:a7:e7:
95:9d:b4:0a:c3:93:bb:1d:84:59:3a:97:a5:39:dc:
d4:6b:c1:34:29:2b:c7:ed:aa:f7:fc:11:16:3a:b7:
a4:db:29:ee:97:cd:25:eb:5b:7f:d8:bd:9b:21:79:
0c:c0:b1:4f:0a:ac:4f:88:f0:75:c0:e5:18:d2:87:
88:97:9e:5d:8b:ce:0a:c1:7d:04:ac:a0:af:24:a0:
19:5f:a8:7b:c5:46:51:ec:95:e7:1e:0c:97:d3:7b:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:9E:6E:FA:BF:09:2D:3F:E5:21:11:4E:97:9F:87:BC:88:AC:B4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Un-ebvq_CS0_5SERTpefh7yIrLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.50.0/23
163.5.71.0/24
163.5.117.0/24
163.5.135.0/24
163.5.150.0/24
163.5.203.0/24
163.5.226.0/24
163.5.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:88:8d:64:a9:19:9a:b4:7f:81:fa:c0:9c:4e:8c:c6:ad:66:
e6:a7:71:fc:ff:9b:99:ab:b1:92:5a:1e:f7:85:5b:70:32:fd:
32:58:4a:f7:ea:93:de:af:11:f1:b7:5e:de:2d:56:30:da:f0:
c0:3d:83:67:20:6e:d6:34:1c:44:16:54:aa:74:8a:94:64:01:
f1:f7:5a:c4:38:cf:bf:65:4b:02:ec:4e:eb:01:11:6a:ec:7a:
08:a7:52:33:e5:b6:06:65:6c:41:3f:ba:3a:87:a6:00:36:db:
4a:a3:80:96:80:f8:d0:50:80:dd:05:06:a0:18:f2:20:d7:99:
8e:c6:fc:fb:40:5a:4d:79:55:7d:41:a5:49:35:b5:d8:e9:b2:
da:fe:94:4c:f5:5d:03:35:72:5f:38:c1:68:b2:e1:07:c6:d1:
bd:5d:b9:8c:57:57:06:1c:00:bd:1b:28:a3:75:48:f2:e3:17:
3c:28:48:d6:fa:9b:01:49:1c:0e:14:0d:8f:03:0c:0f:cd:eb:
d8:50:44:a8:c8:d6:08:d8:06:15:98:b0:aa:9b:0c:2b:8c:66:
e1:87:0b:31:05:7e:c1:c4:8a:51:bb:c5:10:6d:2d:f2:c1:bc:
6a:0e:ba:84:a6:0b:a7:71:80:00:5e:09:2c:9f:91:86:05:1b:
38:ef:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:04 2026 by rpki-client