Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rG6aq0RXXfGhzACFgqkByCSi3uA.roa
File: rG6aq0RXXfGhzACFgqkByCSi3uA.roa (raw, json)
Hash identifier: 3aO/z0oh/3Kl+ZW9tKtDHIYft1E77k2WUJ6R0fZN3Rg=
Subject key identifier: AC:6E:9A:AB:44:57:5D:F1:A1:CC:00:85:82:A9:01:C8:24:A2:DE:E0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019D43E6E54C0AA307175512D21ABD6703EA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rG6aq0RXXfGhzACFgqkByCSi3uA.roa
Signing time: Tue 31 Mar 2026 12:38:18 +0000
ROA not before: Tue 31 Mar 2026 12:38:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 163.5.41.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:e6:e5:4c:0a:a3:07:17:55:12:d2:1a:bd:67:03:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 31 12:38:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac6e9aab44575df1a1cc008582a901c824a2dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:6e:42:4f:13:d9:4c:46:0d:6f:5e:75:0c:
51:47:6b:14:96:66:30:c2:9e:53:b3:e7:e8:17:1f:
1b:39:b0:d5:7d:11:44:2c:a2:22:52:9b:72:67:93:
e7:5f:e5:da:d3:32:99:6e:60:81:52:0b:3c:28:0c:
22:92:fb:16:e4:3a:0c:65:5f:67:c1:20:c9:e0:1b:
03:7a:a2:31:99:d9:4a:93:df:38:c9:e2:a8:e6:59:
91:75:1d:5e:ac:c1:91:b3:7b:80:51:fd:7a:d7:87:
29:e2:b3:a1:17:bc:cd:a6:c1:5d:c8:ef:a8:ff:03:
63:b8:ae:9a:c1:1e:33:7d:07:cf:3c:ea:0d:2d:fb:
99:57:e9:d8:48:b4:e1:7b:0c:95:f9:37:f6:f3:c8:
e1:23:ec:71:40:81:22:0f:42:74:ed:d8:d1:89:b3:
e5:f6:3b:a1:41:51:3a:a4:7e:e5:44:f1:43:6b:e2:
30:a2:7a:65:ab:80:ef:b5:dc:7e:b2:dc:46:60:7c:
94:82:36:58:e3:f1:3d:c6:f9:58:01:aa:c2:0e:ff:
f8:83:ca:29:23:af:27:86:c7:eb:0a:e5:ce:7a:d0:
59:c0:5b:d0:d0:7b:12:b8:83:c0:8e:69:e9:3d:a8:
97:eb:6a:dd:8b:c8:cc:03:85:7b:bd:57:db:45:d2:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:9A:AB:44:57:5D:F1:A1:CC:00:85:82:A9:01:C8:24:A2:DE:E0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rG6aq0RXXfGhzACFgqkByCSi3uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.41.0/24
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:41:fc:ee:5e:b5:34:06:2f:8e:42:ee:ef:77:27:0d:1c:ba:
9a:c7:da:a9:8b:13:b9:21:01:14:e5:d4:03:ea:1a:bb:22:75:
0f:e3:d3:2e:57:3b:cf:fa:b4:90:36:27:d3:37:d4:6a:76:9a:
02:3e:d4:bf:28:00:81:13:e1:32:2d:d7:0c:4d:d5:df:88:f0:
4f:cc:d4:f0:49:ae:0d:af:10:9f:af:e5:a7:31:c4:27:84:2d:
f2:f7:69:33:46:0c:4b:3a:48:6a:f4:6d:8c:fd:88:09:ce:11:
0b:ab:bb:d1:80:c7:1c:9d:d7:b6:e2:f7:dc:ef:bf:3e:dd:ee:
1d:05:7e:6e:6b:72:77:d5:b8:41:a4:68:d1:bf:24:49:e8:7c:
19:a8:89:c1:e0:8b:ee:b0:7c:6a:f9:ab:35:27:e4:71:05:84:
9a:aa:ee:52:39:d8:be:8d:3a:55:fb:30:ba:93:4c:0a:5c:7a:
f5:30:90:f1:bd:91:85:e0:39:07:d2:e5:fb:45:c4:f7:5e:90:
64:13:ec:7f:9e:e5:77:58:ac:7f:87:a6:d7:f1:1d:b3:45:15:
eb:44:19:1b:92:ef:40:f1:8c:c9:ca:ea:03:17:1a:1a:31:da:
91:56:74:a1:df:c7:10:83:fd:c4:0e:3c:5d:29:be:59:5a:63:
21:ec:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:15:05 2026 by rpki-client