Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/hZr6mNjSHqTgv3UgV0r5NKysYhc.roa
File: hZr6mNjSHqTgv3UgV0r5NKysYhc.roa (raw, json)
Hash identifier: AR+e3H/5yBz4nRQW+W404T/nXrb1KqyGNQGS5zNA/os=
Subject key identifier: 85:9A:FA:98:D8:D2:1E:A4:E0:BF:75:20:57:4A:F9:34:AC:AC:62:17
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 0199C38244B4B7F2DBE0845907A341B4B739
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/hZr6mNjSHqTgv3UgV0r5NKysYhc.roa
Signing time: Wed 08 Oct 2025 11:08:38 +0000
ROA not before: Wed 08 Oct 2025 11:08:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198248
IP address blocks: 176.102.72.0/21 maxlen: 21
176.102.77.0/24 maxlen: 24
2001:67c:25c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:82:44:b4:b7:f2:db:e0:84:59:07:a3:41:b4:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Oct 8 11:08:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859afa98d8d21ea4e0bf7520574af934acac6217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:cb:6c:fe:ed:b0:20:8f:60:db:0b:71:08:
a5:f0:44:ff:fc:5d:44:54:8b:1b:58:47:40:47:05:
24:07:34:ce:08:4b:6f:f6:24:e5:76:bc:ae:91:98:
34:a1:e5:be:1b:07:e4:f1:4c:3a:cd:95:2b:4c:29:
af:94:47:23:d2:e6:68:52:45:05:b4:7e:8e:ac:67:
70:17:9e:d7:5a:26:56:33:52:b9:9b:31:ac:7c:26:
c0:60:52:22:31:88:d8:5b:d5:db:57:29:7b:d6:37:
86:dc:b9:8d:82:aa:c7:c5:54:a3:54:0b:89:9c:3a:
08:0e:d9:ae:1a:fd:76:cf:d2:d3:9a:08:ba:e2:c4:
ac:7e:81:b7:ad:8f:2b:4b:44:8c:7c:10:92:c5:44:
22:32:c1:e8:d5:ac:15:9f:6a:db:c1:50:17:d4:e6:
90:74:9a:a3:30:00:2f:6e:41:bb:c2:99:9c:1d:2f:
56:a1:a0:b1:94:fa:13:a2:93:a6:9e:7d:e9:df:28:
5f:0c:5b:c5:4b:8c:12:68:4b:8a:bb:43:f4:e1:05:
ca:7d:dc:cc:42:77:16:9e:b6:ad:f8:d0:16:74:ce:
62:0a:2d:27:86:f2:72:69:6a:12:b3:41:72:c0:73:
16:36:62:75:38:54:0a:09:8c:1b:3e:c8:ee:e9:62:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:FA:98:D8:D2:1E:A4:E0:BF:75:20:57:4A:F9:34:AC:AC:62:17
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/hZr6mNjSHqTgv3UgV0r5NKysYhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.72.0/21
IPv6:
2001:67c:25c0::/48
Signature Algorithm: sha256WithRSAEncryption
03:35:c4:53:19:1b:9b:c9:58:a5:89:e5:8b:04:ef:7a:54:9e:
ab:a3:97:c3:18:c1:17:ce:a1:40:0f:43:6d:44:92:37:0a:2f:
72:76:e1:5d:46:da:c5:ea:43:47:9c:18:58:8a:a1:eb:c7:a1:
16:ba:2f:5f:fc:07:d7:da:bb:1a:bb:5d:eb:13:a2:ce:10:7d:
81:90:ef:08:bf:89:95:4e:44:7c:a4:25:4e:b5:8a:f6:86:5b:
40:98:28:43:e4:23:1a:61:8d:40:9b:32:11:78:53:b8:d2:2e:
8a:f9:88:7b:35:c3:78:3b:fb:e9:26:11:d3:61:db:38:67:ed:
5b:d4:12:52:10:f4:1f:95:14:b8:5b:3d:81:3d:0f:b6:36:ae:
99:1a:ba:7b:76:eb:05:81:13:27:49:32:d7:dc:0d:bf:cc:ff:
21:fe:7e:d5:12:2d:03:46:8a:c7:d3:2f:42:ab:53:46:fc:ac:
e9:ab:9d:8d:5b:d5:b5:71:a9:97:c2:53:35:9d:2d:a5:57:d2:
ea:fb:6a:f9:3f:23:0c:4a:95:17:b4:b4:05:ed:19:0f:50:6d:
e6:e6:85:d1:7b:9b:e6:a9:a9:72:54:25:b3:68:58:12:1b:9e:
b1:10:33:e1:aa:c0:11:d5:ae:b6:de:1d:ef:08:eb:b7:3a:85:
51:39:32:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZnDgkS0t/Lb4IRZB6NBtLc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNmNjOTkzOGMzMmUwNGRjNTQ0M2RkNmMwNWEwMjdhNTYx
N2Q5N2IwHhcNMjUxMDA4MTEwODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTlhZmE5OGQ4ZDIxZWE0ZTBiZjc1MjA1NzRhZjkzNGFjYWM2MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm/LbP7tsCCPYNsLcQil8ET//F1E
VIsbWEdARwUkBzTOCEtv9iTldryukZg0oeW+Gwfk8Uw6zZUrTCmvlEcj0uZoUkUF
tH6OrGdwF57XWiZWM1K5mzGsfCbAYFIiMYjYW9XbVyl71jeG3LmNgqrHxVSjVAuJ
nDoIDtmuGv12z9LTmgi64sSsfoG3rY8rS0SMfBCSxUQiMsHo1awVn2rbwVAX1OaQ
dJqjMAAvbkG7wpmcHS9WoaCxlPoTopOmnn3p3yhfDFvFS4wSaEuKu0P04QXKfdzM
QncWnrat+NAWdM5iCi0nhvJyaWoSs0FywHMWNmJ1OFQKCYwbPsju6WKAOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIWa+pjY0h6k4L91IFdK+TSsrGIXMB8GA1UdIwQY
MBaAFIJsyZOMMuBNxUQ91sBaAnpWF9l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYt
YWY3ZDZhODk3NTJhLzEvaFpyNm1OalNIcVRndjNVZ1YwcjVOS3lzWWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYtYWY3ZDZhODk3NTJh
LzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDsGZIMA8E
AgACMAkDBwAgAQZ8JcAwDQYJKoZIhvcNAQELBQADggEBAAM1xFMZG5vJWKWJ5YsE
73pUnqujl8MYwRfOoUAPQ21EkjcKL3J24V1G2sXqQ0ecGFiKoevHoRa6L1/8B9fa
uxq7XesTos4QfYGQ7wi/iZVORHykJU61ivaGW0CYKEPkIxphjUCbMhF4U7jSLor5
iHs1w3g7++kmEdNh2zhn7VvUElIQ9B+VFLhbPYE9D7Y2rpkaunt26wWBEydJMtfc
Db/M/yH+ftUSLQNGisfTL0KrU0b8rOmrnY1b1bVxqZfCUzWdLaVX0ur7avk/IwxK
lRe0tAXtGQ9QbebmhdF7m+apqXJUJbNoWBIbnrEQM+GqwBHVrrbeHe8I67c6hVE5
Mk4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:07 2025 by rpki-client