Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gfXqjNwdzv6HH27C0B79j8tWePk.roa
File: gfXqjNwdzv6HH27C0B79j8tWePk.roa (raw, json)
Hash identifier: MpIXTQVEgZokxyC3kCPKWqMurqOiDAqr6PoXUdXJtLA=
Subject key identifier: 81:F5:EA:8C:DC:1D:CE:FE:87:1F:6E:C2:D0:1E:FD:8F:CB:56:78:F9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019EB5470C78D296FE751A687A85A5DF9FD7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gfXqjNwdzv6HH27C0B79j8tWePk.roa
Signing time: Thu 11 Jun 2026 06:03:12 +0000
ROA not before: Thu 11 Jun 2026 06:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:47:0c:78:d2:96:fe:75:1a:68:7a:85:a5:df:9f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 11 06:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f5ea8cdc1dcefe871f6ec2d01efd8fcb5678f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:8f:46:6c:08:48:67:3b:11:98:17:9f:d6:
29:3a:27:77:f2:78:e5:a2:cf:8e:79:fd:56:7f:36:
4d:52:c7:c4:94:4a:78:3e:70:70:2f:4c:b6:9d:b1:
0b:f3:f0:f5:89:f8:e3:f1:6c:48:65:23:69:ed:eb:
34:7a:ae:b9:c3:38:93:1f:92:d4:8a:74:fa:64:cb:
27:31:a2:d3:82:13:f1:c3:f6:30:b4:0f:d2:1a:20:
09:01:e3:f8:81:e4:99:0d:05:4a:51:88:ca:41:10:
64:13:a6:e9:41:68:4c:c8:99:9f:61:2f:c5:11:a3:
64:6c:06:17:6f:4b:27:14:df:20:9b:d5:71:ce:31:
e4:61:c2:e4:62:e9:dd:ef:d8:70:2e:5e:4b:03:b4:
7f:8c:99:66:06:70:07:d7:b8:cc:8e:dd:f9:4e:eb:
95:da:1b:12:5e:e7:ee:10:4b:19:d0:f2:7f:ae:44:
45:62:18:cf:e3:70:c9:7b:a6:f9:e4:6f:15:a5:48:
3f:21:f8:2e:de:0e:3a:99:d0:98:bb:94:ae:7e:9a:
da:de:fc:b1:fa:67:47:6c:5a:03:6b:1a:2f:fd:f9:
ac:73:db:9a:5f:6b:0c:0c:19:fa:26:74:71:d3:56:
3a:f1:c5:b2:d7:3a:a4:12:17:d4:cd:90:8e:95:e0:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:EA:8C:DC:1D:CE:FE:87:1F:6E:C2:D0:1E:FD:8F:CB:56:78:F9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gfXqjNwdzv6HH27C0B79j8tWePk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.60.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0/23
163.5.108.0/24
163.5.116.0/23
163.5.130.0/24
163.5.174.0/24
163.5.189.0/24
163.5.225.0/24
163.5.228.0/24
163.5.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b0:24:05:48:53:b3:ef:53:8b:7b:49:c2:95:58:a9:de:f6:
04:58:de:f6:af:bf:80:a3:e5:50:28:0a:6c:a0:6c:a8:df:bd:
56:9b:a1:90:5d:25:9f:cd:cd:a4:a4:27:e3:5c:df:9b:4f:6f:
1d:da:1c:fb:33:71:ce:8a:6b:b5:52:6e:1f:87:36:04:60:d7:
17:8a:c8:a6:ee:b9:0c:23:49:bc:4e:0a:c9:99:a7:05:55:7d:
7e:03:e5:72:47:75:58:08:f9:3a:45:f5:df:36:69:0c:b8:f2:
49:44:d2:02:7b:0a:b9:3c:98:8f:23:ba:82:ef:dd:74:d0:b3:
80:bd:93:c4:55:99:b0:9f:17:50:de:68:43:48:e7:75:6b:4a:
d3:94:09:83:cc:a3:ba:34:14:8e:da:dc:18:53:89:db:63:51:
e5:76:b9:bc:49:ba:96:8b:15:c3:24:dc:47:43:64:d9:10:ea:
10:73:04:4d:c0:0d:0b:3b:ab:97:1b:57:5c:9d:a3:ae:d9:08:
79:9c:17:27:c6:bc:eb:07:13:0c:eb:6b:67:9a:a5:52:14:05:
f4:ae:84:1d:7e:67:7f:3e:15:52:3d:e1:02:3f:7b:ef:1d:fe:
02:f3:b2:03:63:97:15:b0:f8:31:cb:b3:6b:fb:30:6a:74:0a:
81:cb:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:32 2026 by rpki-client