Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/02Ra5XLUOiSqJhXc_BY2SbnTFPk.roa
File: 02Ra5XLUOiSqJhXc_BY2SbnTFPk.roa (raw, json)
Hash identifier: jWd4ZrQ7cj7tjeLk9IloqsQIlAKliPsfBFb2nlijgTo=
Subject key identifier: D3:64:5A:E5:72:D4:3A:24:AA:26:15:DC:FC:16:36:49:B9:D3:14:F9
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A183CDBD3EF2400B187EBBAACD82C234E4
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/02Ra5XLUOiSqJhXc_BY2SbnTFPk.roa
Signing time: Wed 28 Oct 2026 18:37:40 +0000
ROA not before: Wed 28 Oct 2026 18:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202069
IP address blocks: 82.163.64.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:cd:bd:3e:f2:40:0b:18:7e:bb:aa:cd:82:c2:34:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 28 18:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3645ae572d43a24aa2615dcfc163649b9d314f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:e1:79:b2:35:35:a2:76:40:23:9c:c1:57:
c4:b4:47:d9:2f:85:d0:5b:40:bd:3d:00:fe:60:ba:
d6:db:a8:79:55:da:ed:94:36:16:0b:4c:4f:1d:be:
57:d5:ff:c3:f2:44:d3:8a:4d:1d:54:58:68:ef:e3:
28:63:6d:3c:ad:a6:ec:1e:dd:a5:14:43:b4:dc:4c:
c2:1a:d6:14:db:a5:e1:c5:68:7e:4c:21:06:d3:72:
1c:52:2b:4c:33:1a:7a:11:44:99:c8:cf:62:6c:7f:
20:8e:4f:e3:d0:01:28:5d:87:9a:17:de:91:2d:6c:
21:8f:fc:18:47:7e:3b:fb:56:a1:0e:d6:42:c2:cc:
5f:b2:b1:bd:b8:9f:d2:5d:3c:90:c3:23:47:80:47:
9e:1b:0e:68:63:ed:d4:9b:f8:f2:b0:5d:85:eb:b5:
f0:35:c8:8a:41:86:4d:10:6f:40:71:d6:7a:ba:88:
3a:ba:22:f8:c3:8f:e6:f2:8a:6a:3b:43:7c:08:bb:
c9:40:92:4f:d9:9b:ac:b7:72:20:2f:16:ed:35:e2:
da:97:b8:6f:39:82:08:cb:0f:1c:cf:33:ad:1b:08:
37:73:d6:1b:09:b7:86:8f:7c:84:7f:32:38:13:e9:
99:b5:08:e9:9e:bd:10:16:6b:c0:81:0d:cf:d6:64:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:5A:E5:72:D4:3A:24:AA:26:15:DC:FC:16:36:49:B9:D3:14:F9
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/02Ra5XLUOiSqJhXc_BY2SbnTFPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.64.0/22
82.163.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:1c:4b:1b:0f:64:ed:5b:69:9e:ed:9c:52:78:88:56:a2:01:
57:46:0c:2c:0e:1b:5c:2d:bb:b8:b2:27:50:d5:f8:3a:9d:66:
d1:88:66:2c:ab:49:f1:80:cc:cc:6d:6d:8b:25:b4:3b:87:58:
9c:34:97:ca:f3:76:c9:72:e9:03:f1:5a:5c:2d:5d:79:72:74:
91:ce:6b:e9:2a:de:df:85:16:c1:64:d4:de:88:42:97:0c:e8:
c5:86:4b:48:04:af:7e:bb:a5:f0:82:4f:e8:b0:09:c6:12:ca:
64:c9:f3:06:2f:c0:27:7b:69:8d:c6:c0:50:ac:37:4a:a2:4a:
ba:38:bf:bb:75:61:cc:c0:be:cb:ca:57:f5:1d:e2:66:4a:09:
8f:37:c7:c2:0e:16:d2:78:3b:95:be:91:1c:d5:47:f4:aa:10:
ef:51:41:13:fb:34:a3:0c:84:6f:1a:27:65:e8:1d:c5:69:a0:
a5:b8:3b:2e:2b:dd:22:64:8d:07:97:5b:75:c3:d9:af:41:30:
63:d8:51:06:5e:f3:03:90:68:f1:6a:17:ab:6a:d2:55:30:08:
2d:b9:28:71:66:6d:e9:50:43:ff:c3:f9:2f:42:e5:10:57:a5:
83:3e:89:ae:3d:37:b0:9e:83:2b:49:f4:37:50:00:a6:d7:d3:
0d:d7:92:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGDzb0+8kALGH67qs2CwjTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjYxMDI4MTgzNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzY0NWFlNTcyZDQzYTI0YWEyNjE1ZGNmYzE2MzY0OWI5ZDMxNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS3hebI1NaJ2QCOcwVfEtEfZL4XQ
W0C9PQD+YLrW26h5VdrtlDYWC0xPHb5X1f/D8kTTik0dVFho7+MoY208rabsHt2l
FEO03EzCGtYU26XhxWh+TCEG03IcUitMMxp6EUSZyM9ibH8gjk/j0AEoXYeaF96R
LWwhj/wYR347+1ahDtZCwsxfsrG9uJ/SXTyQwyNHgEeeGw5oY+3Um/jysF2F67Xw
NciKQYZNEG9AcdZ6uog6uiL4w4/m8opqO0N8CLvJQJJP2Zust3IgLxbtNeLal7hv
OYIIyw8czzOtGwg3c9YbCbeGj3yEfzI4E+mZtQjpnr0QFmvAgQ3P1mSHCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNNkWuVy1DokqiYV3PwWNkm50xT5MB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvMDJSYTVYTFVPaVNxSmhYY19CWTJTYm5URlBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUqNAAwQC
UqPgMA0GCSqGSIb3DQEBCwUAA4IBAQBeHEsbD2TtW2me7ZxSeIhWogFXRgwsDhtc
Lbu4sidQ1fg6nWbRiGYsq0nxgMzMbW2LJbQ7h1icNJfK83bJcukD8VpcLV15cnSR
zmvpKt7fhRbBZNTeiEKXDOjFhktIBK9+u6Xwgk/osAnGEspkyfMGL8Ane2mNxsBQ
rDdKokq6OL+7dWHMwL7Lylf1HeJmSgmPN8fCDhbSeDuVvpEc1Uf0qhDvUUET+zSj
DIRvGidl6B3FaaCluDsuK90iZI0Hl1t1w9mvQTBj2FEGXvMDkGjxaheratJVMAgt
uShxZm3pUEP/w/kvQuUQV6WDPomuPTewnoMrSfQ3UACm19MN15Ih
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:12:06 2026 by rpki-client