Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/SqKkKM173VSrB36qGmxTUJHKCo0.roa
File: SqKkKM173VSrB36qGmxTUJHKCo0.roa (raw, json)
Hash identifier: 48hEcJJ8yoYkRJhZ40G+F37LnKZ8jLN3UCGXFfcuN8I=
Subject key identifier: 4A:A2:A4:28:CD:7B:DD:54:AB:07:7E:AA:1A:6C:53:50:91:CA:0A:8D
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01983BA2DC8A8A045701586971A6B335B68E
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/SqKkKM173VSrB36qGmxTUJHKCo0.roa
Signing time: Thu 24 Jul 2025 08:53:05 +0000
ROA not before: Thu 24 Jul 2025 08:53:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 82.163.172.0/22 maxlen: 22
86.104.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:a2:dc:8a:8a:04:57:01:58:69:71:a6:b3:35:b6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 24 08:53:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aa2a428cd7bdd54ab077eaa1a6c535091ca0a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:f9:62:72:13:7f:58:8a:6e:91:1c:01:d7:
e3:a0:de:5f:6d:3e:9c:bb:4a:87:4e:2b:09:be:a8:
ed:be:d6:f3:90:db:c0:7d:ca:ef:59:69:de:37:e9:
04:f9:a2:af:ae:f9:bc:df:ca:3f:d7:d8:85:24:7c:
1e:5f:20:8a:e3:bb:98:36:af:be:23:b4:01:a2:86:
5f:b7:74:79:bc:88:c7:23:df:99:9d:13:f3:3d:81:
98:1c:0e:30:6b:25:60:25:58:55:7c:7b:41:6a:b8:
98:8b:7d:c1:50:2b:8b:eb:2e:75:35:32:a9:58:86:
55:23:08:18:3e:58:65:3d:88:a7:cc:47:30:30:e1:
47:90:91:2a:f0:cd:3a:97:c4:23:1c:82:b5:ea:70:
4c:be:f2:02:0f:dd:39:72:b9:3c:4d:af:51:22:4d:
5e:3c:bd:5f:ec:3b:5c:8e:30:04:06:38:1d:f0:27:
4e:50:dd:5f:25:61:c8:e6:31:67:71:a9:ca:81:00:
dd:37:b1:64:26:38:c9:4a:c6:a8:5b:72:62:50:db:
64:ba:f5:da:8d:f6:84:9d:f2:d5:c4:5b:9e:db:b6:
e3:6b:01:e4:cb:54:89:20:74:00:e7:75:82:09:43:
00:52:e2:bc:32:33:3f:81:10:af:fb:d4:d4:e2:16:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:A4:28:CD:7B:DD:54:AB:07:7E:AA:1A:6C:53:50:91:CA:0A:8D
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/SqKkKM173VSrB36qGmxTUJHKCo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.172.0/22
86.104.160.0/22
Signature Algorithm: sha256WithRSAEncryption
86:7a:e5:38:e6:ed:cf:79:3e:4c:3c:9b:5b:f9:f8:6d:71:5e:
45:1d:4f:76:66:2f:ca:c6:41:d7:b6:56:6b:3a:10:d7:1e:8b:
b8:c8:76:95:9c:7c:83:9e:11:c4:ba:8f:a1:2b:ce:ae:f6:9d:
bc:d4:9a:94:ae:a3:93:5d:9b:e9:a7:6d:ea:03:04:7c:3d:da:
7a:75:82:de:7d:3d:83:7d:c2:d1:a2:bb:6b:d8:2c:dc:4a:3d:
26:12:30:af:c3:0a:f4:a9:46:ef:30:e9:a0:a5:3e:ae:c0:1d:
0d:29:8f:52:c2:f1:f5:e3:a4:64:f7:f7:2f:ce:32:b5:94:0b:
85:2b:52:d4:15:00:4f:1e:d8:ab:5d:21:c7:23:ef:1e:fa:8f:
07:27:34:5a:ce:e3:4a:b0:94:1c:d1:67:99:24:83:33:72:d1:
61:a0:2a:2b:c3:02:80:73:47:2e:71:24:80:53:00:de:b1:b0:
33:16:5c:d3:9f:d4:20:0b:3e:9c:27:78:a4:9b:a9:9c:1d:cb:
59:88:d4:e6:9c:22:dd:37:91:30:a7:0a:48:47:a4:1f:58:fd:
a6:86:7f:c9:de:11:34:68:8d:8a:6f:d5:9c:3a:2d:ed:5d:8d:
52:67:fe:93:17:96:bf:41:f3:9a:71:02:c4:1d:b5:db:a5:e8:
75:e5:51:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZg7otyKigRXAVhpcaazNbaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjUwNzI0MDg1MzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWEyYTQyOGNkN2JkZDU0YWIwNzdlYWExYTZjNTM1MDkxY2EwYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqb5YnITf1iKbpEcAdfjoN5fbT6c
u0qHTisJvqjtvtbzkNvAfcrvWWneN+kE+aKvrvm838o/19iFJHweXyCK47uYNq++
I7QBooZft3R5vIjHI9+ZnRPzPYGYHA4wayVgJVhVfHtBariYi33BUCuL6y51NTKp
WIZVIwgYPlhlPYinzEcwMOFHkJEq8M06l8QjHIK16nBMvvICD905crk8Ta9RIk1e
PL1f7DtcjjAEBjgd8CdOUN1fJWHI5jFncanKgQDdN7FkJjjJSsaoW3JiUNtkuvXa
jfaEnfLVxFue27bjawHky1SJIHQA53WCCUMAUuK8MjM/gRCv+9TU4hZuQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEqipCjNe91Uqwd+qhpsU1CRygqNMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvU3FLa0tNMTczVlNyQjM2cUdteFRVSkhLQ28wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUqOsAwQC
VmigMA0GCSqGSIb3DQEBCwUAA4IBAQCGeuU45u3PeT5MPJtb+fhtcV5FHU92Zi/K
xkHXtlZrOhDXHou4yHaVnHyDnhHEuo+hK86u9p281JqUrqOTXZvpp23qAwR8Pdp6
dYLefT2DfcLRortr2CzcSj0mEjCvwwr0qUbvMOmgpT6uwB0NKY9SwvH146Rk9/cv
zjK1lAuFK1LUFQBPHtirXSHHI+8e+o8HJzRazuNKsJQc0WeZJIMzctFhoCorwwKA
c0cucSSAUwDesbAzFlzTn9QgCz6cJ3ikm6mcHctZiNTmnCLdN5EwpwpIR6QfWP2m
hn/J3hE0aI2Kb9WcOi3tXY1SZ/6TF5a/QfOacQLEHbXbpeh15VGv
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:35 2025 by rpki-client