Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa
File: 9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa (raw, json)
Hash identifier: Nh8bc26byCkv5gvckcokp5euxtQrzclKwBg68owpgwo=
Subject key identifier: F5:D8:82:16:7E:C4:80:CD:91:08:25:FA:43:1E:9A:17:28:60:5F:61
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019986184A482E62FD44C41652E2EC6C9890
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa
Signing time: Fri 26 Sep 2025 12:56:02 +0000
ROA not before: Fri 26 Sep 2025 12:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 82.163.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:18:4a:48:2e:62:fd:44:c4:16:52:e2:ec:6c:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 26 12:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d882167ec480cd910825fa431e9a1728605f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:3f:43:31:8e:ab:09:18:3b:22:a0:d5:28:
e5:0c:31:56:f0:51:ef:4d:ad:b5:81:e9:d7:da:ad:
35:cb:8f:8c:58:e0:c8:86:1b:79:41:aa:20:6d:eb:
50:f9:a4:7c:92:80:aa:8f:bc:97:33:56:e5:0a:8e:
b1:b6:75:e4:df:4d:36:fc:b2:32:d5:82:e5:8d:52:
43:e7:b7:fd:8e:4b:b6:f9:7b:5e:2f:f0:ca:7c:83:
c8:0f:9a:37:33:ef:71:52:bd:6d:88:25:0f:96:ae:
32:57:a3:07:96:a6:a8:f0:08:2f:c4:63:89:a1:d0:
72:ac:24:ae:7d:dc:7a:90:80:27:95:73:0d:73:19:
7c:2d:b0:9c:f1:f9:d9:33:b9:ae:f7:1d:d2:ec:89:
dc:ba:1f:dd:b7:f1:bc:b5:10:be:77:20:14:15:26:
fc:94:5e:54:da:a7:a9:9a:51:2d:93:b9:24:45:e6:
60:c7:69:38:87:3c:0f:8d:f6:54:00:c3:22:67:69:
dc:b4:28:ff:7a:d1:81:ab:3b:a7:f5:fc:de:56:c1:
ce:9c:f7:36:31:ab:53:2d:09:94:8b:c1:ba:6b:68:
fc:2d:14:17:eb:96:d1:19:2c:5b:d7:4f:bc:b8:9d:
63:6a:c1:89:dd:a5:6f:f8:61:0b:09:6b:2c:d0:6a:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:82:16:7E:C4:80:CD:91:08:25:FA:43:1E:9A:17:28:60:5F:61
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9diCFn7EgM2RCCX6Qx6aFyhgX2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.96.0/21
Signature Algorithm: sha256WithRSAEncryption
41:be:89:5b:79:d8:9e:83:71:63:06:48:27:a9:b7:d8:91:26:
72:af:db:af:a1:70:ff:ee:00:4b:16:c5:1e:ba:8a:76:bd:d9:
bd:17:d2:aa:e4:7b:b7:c8:ca:aa:00:1c:b8:a0:90:41:74:bc:
7d:6d:86:93:0a:b3:2e:a5:70:e1:39:8a:b4:a1:e5:74:f9:f7:
4a:bb:65:d8:00:af:eb:98:98:4a:66:0c:c4:24:61:9f:f0:2c:
a2:4e:77:48:ed:34:58:66:ac:fe:17:bb:6c:c4:e8:02:ef:7a:
69:4d:4c:35:14:86:a4:84:79:19:45:55:56:30:b7:44:ee:87:
dc:95:09:ce:1e:58:04:4e:fa:f4:33:54:49:9e:c3:35:a4:43:
fe:87:8b:da:80:22:14:41:80:75:10:64:b0:76:0c:17:f4:aa:
9d:68:d5:95:33:1d:8a:32:82:73:1e:1d:07:7f:71:6b:c8:34:
52:2f:45:c9:9a:03:14:60:1d:19:d6:d8:4b:c0:e3:1e:7b:b0:
a7:4d:5f:6b:b0:17:15:97:36:7c:27:7d:cb:a1:d1:17:2b:ec:
49:86:da:f2:f5:97:40:4e:75:75:ea:94:c7:8d:ac:b4:fe:27:
ee:5a:f2:97:c3:51:86:c1:04:c1:d1:aa:be:38:3b:47:38:2b:
0a:d3:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:05 2025 by rpki-client