Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_90n9ca5deFGqaGAghGpotuTDkY.roa
File: _90n9ca5deFGqaGAghGpotuTDkY.roa (raw, json)
Hash identifier: MhO/vWf58dCeCzWWb0+D/TfGt4J7B4cmE0R+N/MW+Ds=
Subject key identifier: FF:DD:27:F5:C6:B9:75:E1:46:A9:A1:80:82:11:A9:A2:DB:93:0E:46
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A0B98B946A30079823A4AB39B755A7EF0A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_90n9ca5deFGqaGAghGpotuTDkY.roa
Signing time: Sat 19 Sep 2026 12:02:07 +0000
ROA not before: Sat 19 Sep 2026 12:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:8b:94:6a:30:07:98:23:a4:ab:39:b7:55:a7:ef:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 19 12:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffdd27f5c6b975e146a9a1808211a9a2db930e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:6f:95:a2:ca:0c:c5:3d:7d:53:79:9c:ad:
a3:7e:ae:4f:31:8e:b0:6b:1d:cc:8a:30:a5:8a:e7:
ee:0b:f7:67:72:ed:9c:47:7c:1c:5f:8d:32:94:1f:
f2:63:fc:7a:09:10:0d:cd:f6:cf:7e:b8:8d:41:18:
7e:ec:a7:d7:1e:6c:29:d4:58:0d:1b:d3:13:c0:96:
50:88:b9:29:a9:a5:f9:55:8e:dc:30:5d:d0:b2:a5:
f3:f5:2a:6e:1f:1c:15:f3:48:27:0e:3b:d3:c2:af:
8e:0f:f0:58:3b:5f:d1:cf:6f:6a:8a:df:20:8c:f0:
1d:93:a5:20:8e:5d:25:ea:82:dd:df:41:1a:cf:45:
cc:02:2a:a8:84:1e:d3:3b:ff:71:57:32:64:64:9e:
99:dc:d6:7a:4a:82:22:9c:a4:71:8c:7b:b6:c6:97:
d3:ec:97:54:66:e6:32:91:39:95:ba:52:d6:d4:31:
48:1c:e2:91:13:a1:4a:ec:c7:51:0f:5b:da:ba:cf:
07:b8:e5:39:5d:7b:f8:fd:b7:d2:58:c0:89:be:0d:
a5:65:db:0e:af:63:52:d7:98:f2:b6:9f:59:93:a3:
22:4b:d2:aa:d4:65:2f:18:aa:6f:32:fe:7d:e5:53:
f7:3c:32:e2:b7:6f:92:3d:49:6c:53:28:8e:fe:47:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:27:F5:C6:B9:75:E1:46:A9:A1:80:82:11:A9:A2:DB:93:0E:46
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_90n9ca5deFGqaGAghGpotuTDkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.91.0/24
163.5.136.0/24
163.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:55:ab:fc:20:c2:45:6b:79:7c:a1:5a:2a:59:43:67:60:82:
27:93:cf:83:ea:b6:87:1b:d1:76:64:ad:b4:6d:45:3f:cf:58:
82:ff:e2:65:6e:00:ee:79:2d:29:fc:a6:f7:1b:87:25:b1:3e:
95:60:83:6a:8c:5e:08:c0:61:1c:c9:66:91:2b:5c:6a:18:78:
b2:90:d5:a9:c2:67:42:d2:3b:a3:fa:9e:94:3d:7a:ab:84:8c:
c8:ca:3e:c3:7d:14:fa:15:22:d5:fb:29:b3:da:d5:4a:9f:2b:
92:1c:2e:c8:3f:59:2f:b7:02:dc:37:c4:bc:14:ab:dd:4c:27:
43:ac:af:c4:7d:71:5c:ad:f9:c0:f0:b1:a3:83:ce:20:b3:81:
17:31:9c:87:cf:bd:c7:52:b3:3d:04:a8:e6:c5:34:cf:84:9b:
51:8b:63:6f:a6:9e:96:b4:95:df:a2:54:5b:4f:55:b1:10:e6:
64:3e:db:a2:98:3b:f1:2e:24:eb:36:2e:92:10:32:9f:22:1b:
96:7e:91:47:a6:5d:ae:12:de:a7:58:71:49:2e:51:79:09:ec:
6a:36:0e:c3:92:62:0e:36:57:7f:62:f1:00:32:65:d0:27:52:
a9:aa:cf:f5:c3:c7:85:bd:63:4f:5c:0f:70:d5:79:a8:06:c9:
f2:53:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:13 2026 by rpki-client