Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dpaJdXOb1WwX9x75vk6ygB2PESQ.roa
File: dpaJdXOb1WwX9x75vk6ygB2PESQ.roa (raw, json)
Hash identifier: 0PCA5Enoc1B3NfxkGf8ifZrhcCrSV3ao+nUexFRWWLo=
Subject key identifier: 76:96:89:75:73:9B:D5:6C:17:F7:1E:F9:BE:4E:B2:80:1D:8F:11:24
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01975E7E800EFA33BC3E7405B676CB65AA96
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dpaJdXOb1WwX9x75vk6ygB2PESQ.roa
Signing time: Wed 11 Jun 2025 10:17:17 +0000
ROA not before: Wed 11 Jun 2025 10:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 163.5.17.0/24 maxlen: 24
163.5.25.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:7e:80:0e:fa:33:bc:3e:74:05:b6:76:cb:65:aa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 11 10:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76968975739bd56c17f71ef9be4eb2801d8f1124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:84:9d:b5:60:08:92:f0:43:31:67:1d:55:
a9:33:58:38:f9:ec:41:52:fe:63:c7:7a:29:69:05:
f4:69:84:a8:be:f7:29:0d:1f:c5:b1:86:c0:6d:7b:
e0:38:60:c7:91:4b:fd:ac:b5:1d:9a:3d:68:37:ff:
c2:c0:e9:85:9a:ed:1c:e7:23:d0:d5:f9:34:ee:89:
68:86:46:6e:7b:7d:79:7e:8a:8d:36:32:17:7b:c2:
22:d0:3c:24:69:06:52:4e:63:33:ea:f4:5a:fa:d5:
60:c8:81:fe:30:6c:75:29:cd:7f:98:17:76:4f:5f:
cb:32:e4:a0:ed:f0:bb:08:3c:df:b2:98:0b:ea:0c:
75:f9:17:e8:21:f7:6e:7d:de:fa:6a:4c:56:db:f5:
35:ee:52:78:07:5c:62:72:ad:9d:33:b6:92:3a:60:
4c:de:28:4f:8c:67:cb:0b:b7:29:48:e2:29:53:43:
c4:41:fa:fa:ac:58:d1:77:52:17:fd:f5:1a:f6:0e:
b1:67:6a:6e:c4:9c:72:d7:0b:c8:8e:8a:57:9e:37:
16:e6:f9:7c:96:e9:a9:04:90:34:71:e1:1c:43:bb:
4a:d7:2d:ff:66:f9:f2:8d:d3:e7:e2:69:d0:3c:be:
08:77:c3:53:ac:bc:c2:06:18:80:9c:62:00:d9:14:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:89:75:73:9B:D5:6C:17:F7:1E:F9:BE:4E:B2:80:1D:8F:11:24
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dpaJdXOb1WwX9x75vk6ygB2PESQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.17.0/24
163.5.25.0/24
163.5.35.0/24
163.5.40.0/24
163.5.44.0/24
163.5.54.0/24
163.5.110.0/24
163.5.126.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
63:79:7a:12:b7:d1:43:12:a9:84:bf:2f:95:a3:d4:86:8f:d1:
e9:91:c5:15:93:db:ff:5c:0d:8b:ac:28:0e:da:a4:1c:74:3a:
ed:07:a7:50:39:67:eb:1d:de:4d:3d:bd:b3:e7:61:cc:18:52:
60:53:48:48:40:8b:fd:8e:a5:58:d3:6c:ef:d2:97:77:80:f6:
f5:40:89:d5:b6:16:b2:e6:e0:79:1a:d8:14:fd:84:40:37:31:
8d:e2:c4:3d:85:9c:da:40:7f:67:84:46:d0:d6:53:43:58:f2:
16:6f:76:32:86:ed:be:51:28:ee:cc:d3:b0:f6:c6:b3:77:90:
d7:ed:6d:c6:ca:95:f2:57:bf:bd:3c:22:6c:fe:d7:94:3c:80:
d1:b6:0d:ee:5f:74:94:c5:a6:08:23:30:59:97:31:28:a2:16:
b2:39:92:92:d8:57:47:20:5d:67:26:db:37:e1:1f:66:10:22:
02:c1:d2:ef:17:9f:8d:70:f8:43:b7:20:33:93:b3:4a:21:85:
f5:78:81:fa:49:ae:60:21:e3:75:37:51:9d:25:83:84:1a:7b:
ed:a3:21:13:57:01:0b:88:60:29:19:27:d7:02:03:db:c0:4a:
d2:0d:ce:cf:ca:bc:0d:7c:a5:1f:18:d3:bd:6d:0e:9c:a1:91:
3b:cc:d4:b6
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZdefoAO+jO8PnQFtnbLZaqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNjExMTAxNzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Njk2ODk3NTczOWJkNTZjMTdmNzFlZjliZTRlYjI4MDFkOGYxMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1uEnbVgCJLwQzFnHVWpM1g4+exB
Uv5jx3opaQX0aYSovvcpDR/FsYbAbXvgOGDHkUv9rLUdmj1oN//CwOmFmu0c5yPQ
1fk07olohkZue315foqNNjIXe8Ii0DwkaQZSTmMz6vRa+tVgyIH+MGx1Kc1/mBd2
T1/LMuSg7fC7CDzfspgL6gx1+RfoIfdufd76akxW2/U17lJ4B1xicq2dM7aSOmBM
3ihPjGfLC7cpSOIpU0PEQfr6rFjRd1IX/fUa9g6xZ2puxJxy1wvIjopXnjcW5vl8
lumpBJA0ceEcQ7tK1y3/ZvnyjdPn4mnQPL4Id8NTrLzCBhiAnGIA2RQ6uQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHaWiXVzm9VsF/ce+b5OsoAdjxEkMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZHBhSmRYT2IxV3dYOXg3NXZrNnlnQjJQRVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAowURAwQA
owUZAwQAowUjAwQAowUoAwQAowUsAwQAowU2AwQAowVuAwQAowV+AwQAowX9MA0G
CSqGSIb3DQEBCwUAA4IBAQBjeXoSt9FDEqmEvy+Vo9SGj9HpkcUVk9v/XA2LrCgO
2qQcdDrtB6dQOWfrHd5NPb2z52HMGFJgU0hIQIv9jqVY02zv0pd3gPb1QInVthay
5uB5GtgU/YRANzGN4sQ9hZzaQH9nhEbQ1lNDWPIWb3Yyhu2+USjuzNOw9sazd5DX
7W3GypXyV7+9PCJs/teUPIDRtg3uX3SUxaYIIzBZlzEoohayOZKS2FdHIF1nJts3
4R9mECICwdLvF5+NcPhDtyAzk7NKIYX1eIH6Sa5gIeN1N1GdJYOEGnvtoyETVwEL
iGApGSfXAgPbwErSDc7PyrwNfKUfGNO9bQ6coZE7zNS2
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:16:35 2025 by rpki-client