Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/a5GQY47FMRJrqpP_Du8ou0LUUiE.roa
File: a5GQY47FMRJrqpP_Du8ou0LUUiE.roa (raw, json)
Hash identifier: bTdF7ib3I7akYU/6AWsOqJVRvl6fWX+M7EFIuQn8Qfs=
Subject key identifier: 6B:91:90:63:8E:C5:31:12:6B:AA:93:FF:0E:EF:28:BB:42:D4:52:21
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0197645FA0C1132A829F896A059ABFE132EE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/a5GQY47FMRJrqpP_Du8ou0LUUiE.roa
Signing time: Thu 12 Jun 2025 13:41:18 +0000
ROA not before: Thu 12 Jun 2025 13:41:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:5f:a0:c1:13:2a:82:9f:89:6a:05:9a:bf:e1:32:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 12 13:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b9190638ec531126baa93ff0eef28bb42d45221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:ac:fb:0f:2d:3b:aa:6f:0e:1a:84:1e:a7:
28:3f:8b:5f:6b:97:63:72:ac:81:0b:41:ca:8b:7b:
62:da:a5:dc:8c:3a:e1:69:c5:2b:5b:50:18:61:e2:
12:dc:53:46:78:50:a3:d0:da:d1:1e:c4:82:ea:b7:
07:89:8f:cf:8b:ed:dd:be:4e:2a:db:e3:ed:8c:5b:
03:d0:e1:d9:27:3f:fe:2a:e4:88:ea:bb:5a:8e:bb:
1e:60:02:85:e2:36:0f:51:2d:2e:ee:44:78:8e:74:
d3:db:72:79:54:74:6e:cd:8d:9b:ed:5e:89:a2:48:
c1:0f:52:9f:ca:10:f2:55:d4:6e:cb:02:9b:31:df:
7e:7e:5b:df:5e:38:df:7d:e4:47:56:ec:bd:92:7b:
52:48:05:69:ec:2a:f4:ed:f4:98:e7:fc:39:4d:6d:
a4:fc:70:fc:9f:cf:c3:5c:b6:b7:c8:4a:11:ae:83:
bf:dd:85:24:ba:94:e5:59:91:15:b5:e0:2c:95:ab:
00:c4:ab:4d:b7:8c:0e:7e:0d:32:88:60:32:e0:f6:
4d:4a:3c:1b:a8:00:c8:8e:33:64:00:2c:97:67:a9:
12:70:7e:5b:ed:25:90:40:e4:71:8a:8d:c5:5f:49:
af:18:3c:48:db:89:ae:78:88:0d:a6:02:1b:bd:79:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:90:63:8E:C5:31:12:6B:AA:93:FF:0E:EF:28:BB:42:D4:52:21
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/a5GQY47FMRJrqpP_Du8ou0LUUiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.136.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7f:c5:bd:64:0a:7d:85:ee:2b:62:07:21:a5:af:9c:28:b7:
2f:13:a7:31:83:3f:16:6b:f5:eb:2f:8a:a4:89:5e:7c:0e:25:
a8:10:ed:89:d5:93:a9:93:fa:0b:45:2e:33:fc:0a:35:a6:a0:
59:a2:59:a9:94:72:fb:9a:86:d9:26:0c:fe:71:56:d6:d1:e1:
43:e5:bd:47:f9:1c:c3:19:64:0b:34:76:76:8c:a3:7d:a6:fb:
2f:dd:12:2a:69:46:31:d5:21:e2:98:aa:92:d6:4d:a1:7b:71:
0a:4d:18:78:d3:fa:9a:32:52:12:65:10:df:49:44:33:69:44:
e4:60:9e:04:01:ab:aa:f2:c1:26:37:d4:21:db:5d:4d:18:3d:
81:5b:fb:d1:f9:5a:f2:24:87:0b:42:ca:10:51:f0:c0:d3:5f:
d7:ad:97:51:3d:1d:74:9c:c6:c1:de:7e:a3:c4:38:39:f8:6b:
e5:c7:6f:84:8c:1f:72:6c:a6:5b:c8:1a:51:e0:62:02:d6:a1:
bd:5a:69:ea:5e:07:06:d7:b0:74:5a:fc:74:4f:0c:9c:5f:31:
32:da:52:ca:ed:1e:f1:aa:e5:b2:46:e8:0d:0d:f7:dc:3a:5b:
36:19:a4:a1:9a:0b:df:cc:de:19:74:21:1e:85:2e:64:9f:3f:
65:a6:1f:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdkX6DBEyqCn4lqBZq/4TLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNjEyMTM0MTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjkxOTA2MzhlYzUzMTEyNmJhYTkzZmYwZWVmMjhiYjQyZDQ1MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVas+w8tO6pvDhqEHqcoP4tfa5dj
cqyBC0HKi3ti2qXcjDrhacUrW1AYYeIS3FNGeFCj0NrRHsSC6rcHiY/Pi+3dvk4q
2+PtjFsD0OHZJz/+KuSI6rtajrseYAKF4jYPUS0u7kR4jnTT23J5VHRuzY2b7V6J
okjBD1KfyhDyVdRuywKbMd9+flvfXjjffeRHVuy9kntSSAVp7Cr07fSY5/w5TW2k
/HD8n8/DXLa3yEoRroO/3YUkupTlWZEVteAslasAxKtNt4wOfg0yiGAy4PZNSjwb
qADIjjNkACyXZ6kScH5b7SWQQORxio3FX0mvGDxI24mueIgNpgIbvXlDFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGuRkGOOxTESa6qT/w7vKLtC1FIhMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvYTVHUVk0N0ZNUkpycXBQX0R1OG91MExVVWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUcAwQA
owWIMA0GCSqGSIb3DQEBCwUAA4IBAQAif8W9ZAp9he4rYgchpa+cKLcvE6cxgz8W
a/XrL4qkiV58DiWoEO2J1ZOpk/oLRS4z/Ao1pqBZolmplHL7mobZJgz+cVbW0eFD
5b1H+RzDGWQLNHZ2jKN9pvsv3RIqaUYx1SHimKqS1k2he3EKTRh40/qaMlISZRDf
SUQzaUTkYJ4EAauq8sEmN9Qh211NGD2BW/vR+VryJIcLQsoQUfDA01/XrZdRPR10
nMbB3n6jxDg5+Gvlx2+EjB9ybKZbyBpR4GIC1qG9WmnqXgcG17B0Wvx0TwycXzEy
2lLK7R7xquWyRugNDffcOls2GaShmgvfzN4ZdCEehS5knz9lph9G
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:07 2025 by rpki-client