Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eym3EQD0kjTqc87x3Cf4n7Pm8Vs.roa
File: eym3EQD0kjTqc87x3Cf4n7Pm8Vs.roa (raw, json)
Hash identifier: 0VMN2yJOd5xI9pMsZkJYbc0AS1KesvzkmGy9U/8Xx/E=
Subject key identifier: 7B:29:B7:11:00:F4:92:34:EA:73:CE:F1:DC:27:F8:9F:B3:E6:F1:5B
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A183CEA4411E018D23720E3094E0E8206B
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eym3EQD0kjTqc87x3Cf4n7Pm8Vs.roa
Signing time: Wed 28 Oct 2026 18:38:40 +0000
ROA not before: Wed 28 Oct 2026 18:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209554
IP address blocks: 82.163.64.0/22 maxlen: 24
82.163.168.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ce:a4:41:1e:01:8d:23:72:0e:30:94:e0:e8:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 28 18:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b29b71100f49234ea73cef1dc27f89fb3e6f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:00:72:7c:8c:a8:cc:c5:0a:d0:44:b8:d0:
5a:d2:9e:a8:c1:75:7d:02:56:54:b2:03:9b:d7:b8:
9b:18:34:b8:19:8c:a1:df:ac:a6:ce:7c:c0:92:c3:
91:0d:0a:df:8e:8d:17:e8:5b:93:36:8a:58:5f:98:
2e:40:e9:7f:7c:bd:44:40:30:40:eb:12:c6:9e:14:
4a:14:aa:bf:ef:20:e0:98:5c:00:d6:18:fa:1c:ff:
d5:b3:2e:18:fe:52:cf:65:5e:b4:b0:eb:e8:8a:97:
8f:46:2c:2b:9e:16:d5:6a:d7:62:ad:1d:52:73:98:
70:f3:2a:7b:a3:1c:b6:98:9c:fa:83:08:ec:88:b4:
69:0e:4d:58:8b:46:83:61:11:2c:ef:56:9c:47:e5:
b9:7e:b5:fb:ac:3a:af:58:07:a6:54:b5:6e:4c:c6:
c9:0a:54:d7:bb:19:a4:a0:48:f6:ab:bc:e7:2b:7b:
00:11:cc:b3:7d:69:5e:42:f9:49:d8:59:3f:de:a6:
14:4e:87:81:84:69:b4:71:c1:c9:9f:50:17:8f:7f:
2b:9f:0d:f5:8c:0d:2c:b7:4e:a7:89:07:b9:bc:f5:
a1:e3:f3:3a:27:77:a2:34:30:be:ed:4e:e7:5e:a3:
b8:14:4d:d9:a0:bc:ec:2b:15:e9:be:f3:ab:e3:15:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:B7:11:00:F4:92:34:EA:73:CE:F1:DC:27:F8:9F:B3:E6:F1:5B
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/eym3EQD0kjTqc87x3Cf4n7Pm8Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.64.0/22
82.163.168.0/22
82.163.224.0/22
Signature Algorithm: sha256WithRSAEncryption
75:81:69:28:38:6e:eb:58:97:34:3c:7d:be:74:62:13:4d:e1:
3a:07:84:e5:9f:d2:fb:42:4a:e5:70:0e:20:36:b5:88:ab:e1:
2f:90:91:30:12:9e:ae:45:fa:1d:91:5a:df:b4:6c:ba:87:ac:
6c:06:f9:58:a8:75:0e:fc:b2:8b:a6:bc:88:a9:1c:e3:d5:59:
da:96:0f:64:53:9c:50:c1:68:98:8d:b6:24:69:05:a0:b2:73:
2a:16:ce:63:c1:f8:e0:f2:ce:0c:2b:e8:f3:fe:52:8f:d9:7b:
4a:bb:b1:aa:36:22:77:d0:de:51:6b:70:c6:d0:8b:87:bd:92:
dd:ff:a6:91:b3:b5:3d:8f:6a:f8:d7:ec:25:3c:8c:08:de:68:
fa:93:e1:1d:bf:8c:51:b6:d9:e9:f3:93:25:c7:8d:e6:83:71:
40:66:65:ba:aa:1d:51:21:20:bf:da:7c:3c:f5:51:3a:0d:cb:
23:67:90:ff:63:2f:b9:1d:91:4f:11:6f:7f:06:15:03:3e:97:
fa:46:43:db:89:1d:7d:3b:90:77:5f:7a:86:b2:99:56:4f:d8:
aa:af:01:e5:09:61:38:98:45:53:ac:d2:01:b5:9b:b1:cf:ae:
01:90:55:44:b7:1d:17:d3:8f:a8:c9:7f:ea:49:d9:db:b5:b7:
c5:f1:02:eb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaGDzqRBHgGNI3IOMJTg6CBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjYxMDI4MTgzODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjI5YjcxMTAwZjQ5MjM0ZWE3M2NlZjFkYzI3Zjg5ZmIzZTZmMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVYAcnyMqMzFCtBEuNBa0p6owXV9
AlZUsgOb17ibGDS4GYyh36ymznzAksORDQrfjo0X6FuTNopYX5guQOl/fL1EQDBA
6xLGnhRKFKq/7yDgmFwA1hj6HP/Vsy4Y/lLPZV60sOvoipePRiwrnhbVatdirR1S
c5hw8yp7oxy2mJz6gwjsiLRpDk1Yi0aDYREs71acR+W5frX7rDqvWAemVLVuTMbJ
ClTXuxmkoEj2q7znK3sAEcyzfWleQvlJ2Fk/3qYUToeBhGm0ccHJn1AXj38rnw31
jA0st06niQe5vPWh4/M6J3eiNDC+7U7nXqO4FE3ZoLzsKxXpvvOr4xX+1QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHsptxEA9JI06nPO8dwn+J+z5vFbMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvZXltM0VRRDBralRxYzg3eDNDZjRuN1BtOFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUqNAAwQC
UqOoAwQCUqPgMA0GCSqGSIb3DQEBCwUAA4IBAQB1gWkoOG7rWJc0PH2+dGITTeE6
B4Tln9L7QkrlcA4gNrWIq+EvkJEwEp6uRfodkVrftGy6h6xsBvlYqHUO/LKLpryI
qRzj1Vnalg9kU5xQwWiYjbYkaQWgsnMqFs5jwfjg8s4MK+jz/lKP2XtKu7GqNiJ3
0N5Ra3DG0IuHvZLd/6aRs7U9j2r41+wlPIwI3mj6k+Edv4xRttnp85Mlx43mg3FA
ZmW6qh1RISC/2nw89VE6DcsjZ5D/Yy+5HZFPEW9/BhUDPpf6RkPbiR19O5B3X3qG
splWT9iqrwHlCWE4mEVTrNIBtZuxz64BkFVEtx0X04+oyX/qSdnbtbfF8QLr
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:07 2026 by rpki-client