Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/y2WmpUt3mhpILwsSIc7JPhbWGy0.roa
File: y2WmpUt3mhpILwsSIc7JPhbWGy0.roa (raw, json)
Hash identifier: 8vo+2oPq68O7xbTTh/5AH9ozDhXe0BvYVDRj/araa+Y=
Subject key identifier: CB:65:A6:A5:4B:77:9A:1A:48:2F:0B:12:21:CE:C9:3E:16:D6:1B:2D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01A19CE967B573ECE53284667B1E7837AC04
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/y2WmpUt3mhpILwsSIc7JPhbWGy0.roa
Signing time: Mon 02 Nov 2026 15:38:24 +0000
ROA not before: Mon 02 Nov 2026 15:38:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 163.5.59.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:e9:67:b5:73:ec:e5:32:84:66:7b:1e:78:37:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 2 15:38:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb65a6a54b779a1a482f0b1221cec93e16d61b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:6a:90:72:d7:71:00:2c:02:e1:ff:fa:4b:
7a:b6:9b:11:88:98:bb:0b:e0:2e:50:69:fa:58:4c:
53:cd:da:82:29:58:5b:b5:d8:ea:22:32:d6:21:b7:
01:a1:de:f9:17:36:a9:2a:89:2d:5b:b8:85:42:24:
75:13:cf:5c:4e:4c:ef:79:95:b1:8b:46:02:14:3d:
55:1e:2b:bd:30:2e:fb:f4:ae:15:9a:34:8d:5c:9f:
c0:28:b8:f9:da:13:52:1c:d9:0c:fa:ba:19:18:ff:
44:84:9b:83:13:21:d9:20:ba:4e:10:02:03:a3:35:
27:29:31:74:38:65:45:0f:b7:45:c7:0d:ad:59:a8:
3b:0e:a3:26:5a:97:10:de:1b:0a:86:1d:46:69:9d:
ab:ce:a6:49:4d:fe:d6:d5:a7:6b:1d:1f:3a:36:b7:
79:e5:29:7d:47:89:18:3e:9c:68:94:03:b0:02:83:
11:e7:ae:47:26:fc:97:cd:0f:46:d0:99:9b:64:a1:
c9:78:0c:d2:ad:58:cf:6c:1a:32:13:82:ec:d9:37:
87:d8:8f:18:66:df:07:1f:e6:78:56:67:32:a9:0c:
bb:21:6c:a5:b7:11:ae:87:06:99:ff:f7:f5:17:bf:
39:92:f0:b2:cd:8a:62:7d:7f:d7:01:96:0c:22:01:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:65:A6:A5:4B:77:9A:1A:48:2F:0B:12:21:CE:C9:3E:16:D6:1B:2D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/y2WmpUt3mhpILwsSIc7JPhbWGy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
163.5.112.0/24
163.5.121.0/24
163.5.129.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.229.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:29:90:1a:16:14:e7:7d:9a:45:2d:a4:0b:2a:2a:66:67:cc:
f6:dd:6a:38:60:b1:4c:bd:fd:8b:2d:03:c2:9b:4e:1f:79:15:
92:f9:c6:db:84:d4:2a:6e:b9:e8:46:25:9c:75:65:40:54:43:
19:73:aa:db:39:0c:b8:6a:05:6c:74:7f:7c:d8:da:66:ca:61:
ed:f8:d2:33:bd:3e:6f:19:1d:e2:d8:a1:69:75:ab:8f:7a:54:
38:d1:97:f9:0f:86:67:93:3c:75:20:d0:40:9e:2c:7f:b5:43:
5c:9c:cb:ec:93:ae:e6:9f:ad:44:2a:a5:ab:2f:bf:a3:ed:d5:
07:17:b4:62:51:92:d7:c3:ba:fd:e1:b8:d8:7f:48:41:0b:7f:
2d:75:bb:91:6d:a7:72:58:b3:02:f4:c2:e3:98:1b:f9:0d:5c:
3c:fa:7a:99:09:8f:03:96:cc:c4:78:a5:48:ed:bf:f6:ad:cd:
3b:43:c2:5e:3e:3d:49:4e:d3:7c:34:47:1f:52:af:89:51:37:
0a:fd:54:22:0c:72:2d:7f:d0:0b:69:e7:1a:29:10:8b:00:bb:
be:f1:fd:d7:61:21:ed:eb:2c:01:d1:de:72:5a:5e:d9:df:83:
35:34:58:ee:cb:7a:4e:fd:22:24:90:c5:d3:10:3a:8c:d4:19:
51:07:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:29:54 2026 by rpki-client