Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FkbLDleiu_Qpk9ecKhthlq_5yFo.roa
File: FkbLDleiu_Qpk9ecKhthlq_5yFo.roa (raw, json)
Hash identifier: lI3UcYdlsGRc38hXHNNo45GD9pmEh81FT96yTIkKCMA=
Subject key identifier: 16:46:CB:0E:57:A2:BB:F4:29:93:D7:9C:2A:1B:61:96:AF:F9:C8:5A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A0DA3C372EEF4C7D2A15B7B3A814C38631
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FkbLDleiu_Qpk9ecKhthlq_5yFo.roa
Signing time: Fri 25 Sep 2026 20:22:54 +0000
ROA not before: Fri 25 Sep 2026 20:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/22 maxlen: 24
5.102.100.0/22 maxlen: 24
5.102.116.0/22 maxlen: 24
5.102.120.0/22 maxlen: 24
31.186.180.0/22 maxlen: 23
82.163.52.0/23 maxlen: 24
82.163.64.0/22 maxlen: 24
82.163.172.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
185.86.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:3c:37:2e:ef:4c:7d:2a:15:b7:b3:a8:14:c3:86:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 25 20:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1646cb0e57a2bbf42993d79c2a1b6196aff9c85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:09:3e:23:68:0e:b7:de:44:8f:0b:70:6e:
7f:de:34:c2:13:2f:cf:3f:9d:e9:db:f9:df:6d:0c:
2c:60:af:79:e4:b6:e0:0c:7c:3a:93:62:0f:c9:0f:
d1:88:4a:45:90:4d:f1:f6:84:8e:df:b2:76:f2:c5:
84:2e:39:4d:bf:79:f4:6c:00:b7:af:67:99:9c:a4:
f5:b7:09:fe:cf:d1:71:bf:0e:e2:2c:7c:74:40:37:
7a:e7:96:a7:41:c2:8d:fb:ba:e1:37:26:81:f4:6b:
c5:cd:93:8a:b3:dc:be:01:85:52:41:bc:55:6b:66:
74:8e:e3:fd:8b:c4:51:58:1f:5d:17:b8:6d:6b:e4:
2a:55:23:04:bb:ba:01:5e:62:79:02:11:07:c5:53:
05:53:73:3f:60:75:90:f5:93:1c:b6:63:37:36:6b:
0a:a4:d4:dc:07:0f:7c:39:db:52:86:7e:d9:e7:e8:
31:3d:62:08:ff:43:a9:94:e9:36:73:1f:9b:45:03:
97:5d:e3:b6:20:6e:66:6c:2d:fb:40:19:76:7d:41:
f1:9c:0a:7a:5f:1d:7c:91:d3:a2:ff:46:28:a6:92:
0f:e5:df:81:48:d7:fa:35:69:8a:8e:c7:8c:05:99:
1c:74:5c:81:0f:77:0d:d0:e5:42:74:76:95:2a:a1:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:CB:0E:57:A2:BB:F4:29:93:D7:9C:2A:1B:61:96:AF:F9:C8:5A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FkbLDleiu_Qpk9ecKhthlq_5yFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/21
5.102.116.0-5.102.123.255
31.186.180.0/22
82.163.52.0/23
82.163.64.0/22
82.163.172.0/22
82.163.224.0/22
185.86.140.0/23
Signature Algorithm: sha256WithRSAEncryption
49:d5:63:30:47:4b:8f:5a:44:dc:49:69:4d:98:e8:3c:f2:e6:
a3:26:e8:10:b3:4c:f9:d9:ab:64:2b:63:ab:e8:c5:4b:87:23:
90:66:8b:42:31:94:bd:86:35:42:82:5a:86:ba:bd:4a:69:be:
99:de:69:4f:16:83:33:27:20:c1:1b:40:0a:dd:bc:a6:12:30:
80:a9:7b:56:96:ac:5b:09:69:c1:fa:3f:2d:c4:df:ca:5b:81:
6b:8a:89:f3:e1:92:4e:61:8d:a8:1f:28:1f:ac:a4:a5:90:2c:
fe:35:97:30:9c:55:f7:25:f7:7e:06:96:8f:b0:2a:61:7c:74:
a0:13:c8:5f:3a:2d:53:4c:65:de:b9:e8:c6:b6:58:cf:2e:fe:
52:5f:24:63:80:66:9e:27:eb:da:1b:bf:60:8c:2a:c4:dc:99:
c6:2c:1b:22:c6:42:f7:4b:67:da:35:73:1f:28:6e:fc:6d:72:
fc:e7:85:86:8c:90:a9:62:34:67:4d:a6:28:72:3b:5d:74:f8:
3c:51:8a:ea:20:2e:b8:74:c1:ab:94:55:98:c4:05:bb:a7:f4:
29:43:4b:db:17:5c:27:ec:5d:e7:ec:dc:57:e0:36:cb:89:36:
ab:3a:ab:e9:19:dc:a4:02:ac:be:03:f6:70:20:98:f3:fc:ed:
7e:b7:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:17 2026 by rpki-client