Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/vQkqnUDZKxiJ8e43kvxqlbfksh4.roa
File: vQkqnUDZKxiJ8e43kvxqlbfksh4.roa (raw, json)
Hash identifier: kAOJJ8sg71RF+T8wa19+F6dJ6P7Bf2aeuP/rcYhgoM4=
Subject key identifier: BD:09:2A:9D:40:D9:2B:18:89:F1:EE:37:92:FC:6A:95:B7:E4:B2:1E
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A183CDBCF95547C3F6355404009099F7D6
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/vQkqnUDZKxiJ8e43kvxqlbfksh4.roa
Signing time: Wed 28 Oct 2026 18:37:40 +0000
ROA not before: Wed 28 Oct 2026 18:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49304
IP address blocks: 82.163.64.0/22 maxlen: 24
82.163.168.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:cd:bc:f9:55:47:c3:f6:35:54:04:00:90:99:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 28 18:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd092a9d40d92b1889f1ee3792fc6a95b7e4b21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a5:d1:7a:6f:98:af:8a:0e:6f:3a:26:66:75:
68:c9:8d:3b:97:ab:8f:66:b8:bc:05:92:f8:23:f8:
7b:f3:f6:ff:60:0e:7e:d4:e8:06:ad:7d:49:3f:65:
0d:96:19:d1:8e:99:1e:90:e1:de:ea:03:32:e7:d8:
23:96:12:75:28:93:97:9f:47:b6:4a:ea:d8:80:e6:
f4:7b:2a:b6:4c:41:f5:82:6f:94:9e:0e:a7:60:0f:
32:b9:df:a7:77:9e:e2:d6:ff:f5:50:e5:f4:9f:27:
c2:d7:2b:c5:b2:3d:6d:46:fa:1a:86:34:0c:c3:d9:
5f:68:12:9b:00:58:af:97:27:ea:d0:0f:73:eb:4e:
24:61:60:c0:e5:97:88:a5:fe:69:79:97:63:07:9c:
a3:fb:07:fd:e0:37:78:66:f3:f5:ca:dc:25:30:06:
91:3b:82:7c:c1:f9:06:07:ba:68:d5:34:d0:57:e9:
59:5f:bb:86:e1:e7:f1:19:b2:5f:d0:41:df:c1:2f:
40:1a:06:04:85:9c:a2:ca:58:a9:1d:dd:a6:99:61:
63:92:c5:12:98:66:6a:d4:db:fd:71:d6:28:e0:bf:
3a:a0:33:88:10:7e:b4:47:38:e9:c0:77:d5:27:7c:
a8:25:f4:0c:de:98:23:04:34:1d:30:4b:92:52:fd:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:2A:9D:40:D9:2B:18:89:F1:EE:37:92:FC:6A:95:B7:E4:B2:1E
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/vQkqnUDZKxiJ8e43kvxqlbfksh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.64.0/22
82.163.168.0/22
82.163.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:9c:d1:0b:0d:39:4c:70:42:a7:ba:39:17:db:fe:69:00:43:
35:7a:3d:38:d0:01:7b:7e:3e:f6:f9:89:1c:bc:5c:0a:83:6d:
41:d7:5d:ca:f4:6c:22:be:5b:23:d5:01:9b:59:31:c6:24:dc:
6d:33:d8:67:9e:9d:dc:8c:3d:c5:f1:83:f7:41:53:ef:71:c9:
2c:0f:6f:c8:c8:8b:86:6f:14:b8:a6:f4:17:c2:0d:d7:ff:c4:
90:b5:f9:ac:14:b1:b7:91:69:a5:8f:ff:aa:dc:d5:ed:d2:81:
6a:9c:f0:8f:de:c0:89:25:51:9a:eb:1f:90:09:76:e0:9b:c0:
0b:93:cf:eb:7a:7b:21:ec:5c:e6:1c:ad:14:b3:48:65:2f:9f:
df:fe:a6:28:2c:ec:04:fe:b1:e0:12:3d:18:61:dc:05:fd:8a:
2f:9d:86:8f:c6:8f:94:85:61:b4:5d:38:92:ad:a6:b4:55:61:
20:15:66:2b:5c:17:7c:83:4b:8b:0f:10:1a:e6:ba:9f:2c:c0:
c5:eb:29:f6:b4:b6:b0:1b:ab:8d:82:44:59:34:64:4b:2f:b3:
cd:c3:16:00:08:5a:d5:78:73:83:8c:45:98:d3:23:0d:51:30:
a9:a7:6b:40:9d:ec:9f:dc:8f:cd:ba:a7:66:cf:8c:cc:a5:05:
aa:20:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:09 2026 by rpki-client