Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5Gpugl9qvXvWFS1DpStrfULxE_U.roa
File: 5Gpugl9qvXvWFS1DpStrfULxE_U.roa (raw, json)
Hash identifier: KZiaRVIOQGiZVW3R13UM2WDkj8fWfnSB18hjkaWIqbs=
Subject key identifier: E4:6A:6E:82:5F:6A:BD:7B:D6:15:2D:43:A5:2B:6B:7D:42:F1:13:F5
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0199FB3D3FBFF7B232691BB51FA641CA46FB
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5Gpugl9qvXvWFS1DpStrfULxE_U.roa
Signing time: Sun 19 Oct 2025 06:51:59 +0000
ROA not before: Sun 19 Oct 2025 06:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 82.163.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:3d:3f:bf:f7:b2:32:69:1b:b5:1f:a6:41:ca:46:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 19 06:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e46a6e825f6abd7bd6152d43a52b6b7d42f113f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:10:d5:d8:ce:77:b2:fa:1c:4c:06:b4:31:
0b:56:ad:ca:b9:e3:cd:e8:ce:46:75:23:bd:27:4f:
26:ed:0e:0c:71:1c:a2:c0:e8:d7:03:b1:06:36:54:
9d:94:b8:b5:25:80:23:47:fa:f2:6d:09:f5:1d:ad:
1d:45:e1:0a:80:15:79:3c:c0:10:74:96:e4:f3:95:
c9:a8:89:ef:cd:b4:7d:e5:79:c4:7c:31:59:e4:90:
16:ed:32:97:77:e5:b9:b3:38:3a:ce:b6:40:a2:cc:
c9:ff:65:22:dc:2d:4b:f9:46:08:de:23:8e:14:f3:
8c:38:c4:f3:94:74:86:35:20:17:87:74:6a:49:b1:
02:bd:4e:54:a3:9b:10:3c:71:28:22:a9:10:a4:c6:
8f:0d:98:26:b6:79:0b:8d:a0:e2:c6:04:68:7b:7b:
ba:3c:ef:83:0a:64:49:99:b6:fa:24:f2:13:3d:66:
6e:32:f9:b3:c1:13:2e:b3:54:8b:36:d9:af:a2:01:
96:38:90:7e:7c:12:47:42:d5:f7:33:31:b5:09:9c:
12:c2:51:b7:e1:3f:8c:ac:d3:8b:2d:80:71:20:b7:
5b:1c:08:b4:d5:a1:05:cc:2b:bc:c1:b2:5c:2d:10:
79:62:ba:44:fa:2e:95:7f:c7:6a:ef:21:e3:26:49:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6A:6E:82:5F:6A:BD:7B:D6:15:2D:43:A5:2B:6B:7D:42:F1:13:F5
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/5Gpugl9qvXvWFS1DpStrfULxE_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:80:84:c9:f2:9f:9e:9e:9d:ba:5f:e3:65:5c:39:d6:48:4a:
53:9b:8c:4a:36:70:ab:9d:50:b2:16:7f:e1:d5:9b:73:3f:ae:
41:7d:73:1d:07:f4:cc:f3:20:ca:24:6d:80:cc:9e:97:9d:2b:
4e:e9:c8:cb:3f:20:12:2b:1c:5a:93:9f:d5:1a:0a:7d:50:9f:
04:30:c5:e6:bd:de:70:aa:95:e1:cf:0c:a7:09:41:86:db:35:
95:fb:7b:19:96:eb:28:c8:dc:33:1a:16:4c:38:d8:dd:39:5b:
97:7b:f2:78:62:3c:33:02:1f:da:a0:89:c9:f9:d2:66:36:b2:
73:8b:0d:39:ab:9a:69:e1:9b:d4:47:22:ce:84:45:59:8d:0f:
94:26:bb:15:17:31:51:fb:00:2a:3f:91:66:af:5c:23:13:5c:
e9:c4:3f:30:27:a8:a6:f6:da:f8:ed:38:46:14:5f:1f:d5:58:
d6:7f:94:56:c8:7c:2f:8e:a3:d3:2e:bb:d9:a0:84:a7:a9:3c:
94:5d:51:45:ee:88:cc:a4:43:64:cf:47:a3:d9:fe:d4:c0:23:
8a:42:fe:8f:bb:c2:43:66:0a:d3:22:6e:89:17:b7:de:2b:f5:
8c:0c:87:b9:33:00:c0:d2:cb:ba:0c:77:e2:f9:cc:7f:5b:9d:
79:2d:c7:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZn7PT+/97IyaRu1H6ZBykb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUxMDE5MDY1MTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDZhNmU4MjVmNmFiZDdiZDYxNTJkNDNhNTJiNmI3ZDQyZjExM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT0Q1djOd7L6HEwGtDELVq3KuePN
6M5GdSO9J08m7Q4McRyiwOjXA7EGNlSdlLi1JYAjR/rybQn1Ha0dReEKgBV5PMAQ
dJbk85XJqInvzbR95XnEfDFZ5JAW7TKXd+W5szg6zrZAoszJ/2Ui3C1L+UYI3iOO
FPOMOMTzlHSGNSAXh3RqSbECvU5Uo5sQPHEoIqkQpMaPDZgmtnkLjaDixgRoe3u6
PO+DCmRJmbb6JPITPWZuMvmzwRMus1SLNtmvogGWOJB+fBJHQtX3MzG1CZwSwlG3
4T+MrNOLLYBxILdbHAi01aEFzCu8wbJcLRB5YrpE+i6Vf8dq7yHjJkltJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORqboJfar171hUtQ6Ura31C8RP1MB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvNUdwdWdsOXF2WHZXRlMxRHBTdHJmVUx4RV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUqM0MA0G
CSqGSIb3DQEBCwUAA4IBAQCigITJ8p+enp26X+NlXDnWSEpTm4xKNnCrnVCyFn/h
1ZtzP65BfXMdB/TM8yDKJG2AzJ6XnStO6cjLPyASKxxak5/VGgp9UJ8EMMXmvd5w
qpXhzwynCUGG2zWV+3sZlusoyNwzGhZMONjdOVuXe/J4YjwzAh/aoInJ+dJmNrJz
iw05q5pp4ZvURyLOhEVZjQ+UJrsVFzFR+wAqP5Fmr1wjE1zpxD8wJ6im9tr47ThG
FF8f1VjWf5RWyHwvjqPTLrvZoISnqTyUXVFF7ojMpENkz0ej2f7UwCOKQv6Pu8JD
ZgrTIm6JF7feK/WMDIe5MwDA0su6DHfi+cx/W515Lcet
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:46 2025 by rpki-client