Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/4U6TAx0I3Dr5PEDJAWguosXKYEc.roa
File: 4U6TAx0I3Dr5PEDJAWguosXKYEc.roa (raw, json)
Hash identifier: Cqe+GfFKh2Ky3zbDk3PaBNhILy+VnAgYRzcYi0H6oss=
Subject key identifier: E1:4E:93:03:1D:08:DC:3A:F9:3C:40:C9:01:68:2E:A2:C5:CA:60:47
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019E11E4A22A4512868EB3437AE78FF9512C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/4U6TAx0I3Dr5PEDJAWguosXKYEc.roa
Signing time: Sun 10 May 2026 12:37:36 +0000
ROA not before: Sun 10 May 2026 12:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/22 maxlen: 24
5.102.100.0/22 maxlen: 24
5.102.116.0/22 maxlen: 24
5.102.120.0/22 maxlen: 24
31.186.180.0/22 maxlen: 23
82.163.64.0/22 maxlen: 24
82.163.168.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
185.86.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:e4:a2:2a:45:12:86:8e:b3:43:7a:e7:8f:f9:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 10 12:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e14e93031d08dc3af93c40c901682ea2c5ca6047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:52:6a:25:02:28:fe:cf:87:37:ca:82:03:
c2:a5:68:84:d3:55:6f:df:86:35:33:0a:67:bf:85:
48:4d:43:42:8e:31:00:7f:a2:db:80:39:d8:98:a7:
f2:ed:ca:2e:c2:14:16:87:76:08:69:75:a5:bb:6e:
54:49:11:32:33:5a:31:69:42:74:89:66:f6:22:16:
a0:cd:b2:97:00:aa:b6:80:15:f0:b5:1c:f2:af:44:
bf:2f:a8:39:2a:9c:e0:4b:ac:8e:92:11:d3:50:09:
48:76:8a:c1:8f:69:3f:1c:f3:76:bf:df:47:da:60:
dd:46:9b:8c:86:0d:6b:37:d9:46:b7:1a:70:eb:fa:
3f:03:b6:a0:b0:0a:cf:2c:30:98:fe:b0:36:a3:9f:
8a:28:62:64:05:ab:3a:78:df:db:d6:c4:d8:36:8b:
d4:74:fa:59:74:07:7b:c2:fd:0c:1e:34:cb:e8:bb:
79:29:e0:ac:6d:4d:5a:d8:21:8e:a2:5d:99:4e:2e:
89:40:f0:10:44:91:68:9b:f6:da:a1:ee:58:ad:45:
be:0b:73:1a:10:69:56:e8:94:89:8f:71:b4:2d:bf:
3d:73:af:88:59:04:17:82:ff:66:d0:3b:ee:be:53:
7f:c5:63:a2:19:98:c5:c0:1b:a1:9d:37:b2:13:f7:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:93:03:1D:08:DC:3A:F9:3C:40:C9:01:68:2E:A2:C5:CA:60:47
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/4U6TAx0I3Dr5PEDJAWguosXKYEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/21
5.102.116.0-5.102.123.255
31.186.180.0/22
82.163.64.0/22
82.163.168.0/22
82.163.224.0/22
185.86.140.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c6:fe:af:36:b6:b1:e7:79:b7:af:13:7b:3f:d1:02:37:4f:
8c:fb:50:ad:14:92:41:7d:00:1d:6c:a7:28:53:f8:a3:cc:5f:
a4:42:9c:12:c1:4d:0f:e9:3d:46:8c:7b:8e:de:be:db:76:76:
83:fa:80:e8:11:36:44:e5:a6:38:93:f8:73:42:e5:22:e8:ba:
a1:cc:f3:10:39:51:2d:ce:ba:eb:10:4a:bb:8e:97:1f:25:82:
66:4a:01:e9:90:87:26:fd:bc:e2:d4:b3:4a:95:a4:30:1a:31:
07:63:5b:92:68:27:e6:13:b1:3e:8b:da:95:8c:5b:e2:6a:46:
58:ce:c9:9a:63:32:e0:de:8a:64:e1:55:1a:1a:93:6f:af:c7:
67:e4:6a:92:80:67:1e:69:c6:f2:5c:0e:80:7a:27:56:37:9f:
0e:15:64:5d:2e:63:99:f9:fc:22:52:67:ed:d2:07:df:0f:c7:
79:33:c5:c5:5d:38:b7:c9:4e:27:c4:67:2e:20:bc:05:60:8c:
22:ff:aa:c1:3f:7c:c0:2a:1e:cf:f1:da:55:0f:68:f7:51:d4:
cb:48:f8:e4:6e:79:f6:e8:36:d2:78:31:d6:e5:53:44:e0:c5:
19:de:92:ec:c4:49:73:5c:3b:88:a4:4e:1b:a3:0e:ce:e4:d7:
91:37:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:48 2026 by rpki-client