Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/i_5GgFY65mhct5XMfGA2cRGx7lE.roa
File: i_5GgFY65mhct5XMfGA2cRGx7lE.roa (raw, json)
Hash identifier: u8f3lfAClBezvakZmVD5y6jZdKYCu72g+x8pASRVo2g=
Subject key identifier: 8B:FE:46:80:56:3A:E6:68:5C:B7:95:CC:7C:60:36:71:11:B1:EE:51
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 019F2368410E4125324398BC3C29A191C602
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/i_5GgFY65mhct5XMfGA2cRGx7lE.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 82.192.96.0/24 maxlen: 24
82.192.97.0/24 maxlen: 24
82.192.100.0/24 maxlen: 24
82.192.101.0/24 maxlen: 24
82.192.102.0/24 maxlen: 24
82.192.103.0/24 maxlen: 24
82.192.108.0/24 maxlen: 24
82.192.109.0/24 maxlen: 24
82.192.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:41:0e:41:25:32:43:98:bc:3c:29:a1:91:c6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bfe4680563ae6685cb795cc7c60367111b1ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:f8:a0:55:d8:97:2d:f9:61:fc:d1:76:43:
ba:cd:0b:88:33:3d:99:8a:8d:3f:95:cd:b0:9b:a1:
49:a7:31:ec:2e:b8:bd:51:af:5f:d4:ec:de:a2:7b:
8a:53:6e:41:a1:75:0a:18:3f:56:eb:40:95:d7:9f:
01:89:77:9c:71:2d:95:b6:b3:41:d3:b5:a7:e7:d9:
76:08:38:96:da:81:ad:96:24:4e:cf:fe:a9:ee:47:
a4:55:c8:83:e3:4a:19:d4:8f:58:ad:73:5f:96:98:
0f:56:24:78:9a:62:19:5c:d9:7f:89:c5:bc:d1:8a:
21:0f:c8:6e:fd:f6:8d:20:c2:70:43:9d:74:6b:ac:
98:8c:7d:5f:79:cf:8c:6e:c6:bf:02:9a:6f:ab:28:
3c:03:74:c8:c7:b2:09:9b:e9:d5:f8:a6:b1:b1:40:
10:0f:73:44:c6:29:fd:e7:3c:18:50:8f:2c:c6:51:
2a:3b:43:d5:b1:30:8b:4e:63:26:e0:14:0e:d6:1c:
32:3a:98:48:44:80:9c:2e:74:49:e5:63:45:2f:80:
06:52:3e:d7:6c:c0:ef:41:f2:2c:9f:c0:2a:16:4d:
e5:c6:f3:ae:1f:6f:02:0c:f0:88:ea:c4:5c:77:1b:
3b:1c:08:b2:d1:72:d8:ba:59:67:ff:c2:c2:57:9d:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FE:46:80:56:3A:E6:68:5C:B7:95:CC:7C:60:36:71:11:B1:EE:51
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/i_5GgFY65mhct5XMfGA2cRGx7lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0/22
82.192.108.0-82.192.110.255
Signature Algorithm: sha256WithRSAEncryption
76:e5:dd:60:5b:ff:69:f4:d2:54:d1:88:e9:2c:8b:96:63:10:
a1:fa:03:57:68:5e:d9:8d:4d:d2:ab:95:f5:8b:5f:a2:ef:9c:
9a:c6:e6:24:85:38:19:53:23:c0:d0:d4:a2:0f:ed:bd:a3:31:
b5:5b:b1:53:07:25:a9:dc:f2:51:d3:a0:93:e7:97:d2:db:52:
eb:93:3d:aa:1d:59:63:52:93:01:8f:e8:97:dc:9c:f2:d4:e1:
99:9e:72:9a:8a:6d:e2:52:fe:13:9d:7f:8b:bb:1f:a3:32:22:
cd:ac:92:74:e3:ff:94:e9:31:16:6b:d5:29:34:60:b7:e3:ff:
b9:67:06:86:ca:c5:0b:88:03:c6:fc:2a:7b:7b:75:fd:ec:5d:
e8:a2:bf:7f:ad:26:4a:42:48:1e:69:51:07:3e:b1:d0:b5:fd:
6c:23:41:97:c8:b6:21:4c:d1:71:40:b5:6f:d4:27:ba:9a:98:
1e:4a:49:b0:0e:99:12:e6:d6:2e:59:9d:42:94:98:7a:53:fc:
8e:63:5a:dc:e3:20:2a:46:e8:12:0b:aa:a6:cf:79:22:7b:86:
e5:e0:dc:6e:f2:46:42:38:59:c0:2b:59:19:36:5e:96:41:1a:
7e:b5:79:33:4d:7a:4e:36:d4:9d:82:f0:ea:ed:c1:df:20:29:
11:9c:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 19:03:27 2026 by rpki-client