Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wJAlBUmYe42KOx2tCaF06o0t0pg.roa
File: wJAlBUmYe42KOx2tCaF06o0t0pg.roa (raw, json)
Hash identifier: aknTSx/FaTXyVrp5NgiU7vXETTnusgRJTCtXz2lhJZg=
Subject key identifier: C0:90:25:05:49:98:7B:8D:8A:3B:1D:AD:09:A1:74:EA:8D:2D:D2:98
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019F0FEB72CEF2580D8EF93B81E42556D1E0
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wJAlBUmYe42KOx2tCaF06o0t0pg.roa
Signing time: Sun 28 Jun 2026 20:28:36 +0000
ROA not before: Sun 28 Jun 2026 20:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/22 maxlen: 24
5.102.100.0/22 maxlen: 24
5.102.116.0/22 maxlen: 24
5.102.120.0/22 maxlen: 24
31.186.180.0/22 maxlen: 23
82.163.52.0/23 maxlen: 24
82.163.64.0/22 maxlen: 24
82.163.168.0/22 maxlen: 24
82.163.172.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
185.86.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:eb:72:ce:f2:58:0d:8e:f9:3b:81:e4:25:56:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jun 28 20:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c090250549987b8d8a3b1dad09a174ea8d2dd298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:4a:44:cd:b8:d4:3f:c3:6a:5b:40:15:55:
eb:fb:f0:f5:4b:f8:c3:d2:ef:ea:33:32:65:3e:92:
0a:e9:40:d8:bd:b8:8b:b3:ec:50:6a:e0:d1:74:3b:
2f:66:37:f9:9f:0f:6f:0d:0e:21:fd:3f:03:ae:f0:
98:a3:81:c9:03:d8:ef:9d:4c:ab:92:81:dc:6d:e9:
af:1c:07:f6:55:04:55:cc:31:fa:a5:36:0f:06:73:
18:c8:55:ef:30:12:77:75:d1:65:fc:77:5f:42:c8:
40:8d:43:08:b3:d1:2b:e3:69:c6:f3:d6:2e:b0:a1:
a5:cc:85:7d:26:be:47:cc:3c:ec:e0:8b:70:a1:96:
f0:1e:45:f1:f7:a2:0f:09:dd:68:9b:40:5f:12:a8:
4d:93:5e:0c:45:db:b1:8f:66:cf:57:c7:12:36:8b:
fe:b4:c7:c9:43:7d:93:79:ff:0c:43:97:7c:ea:93:
22:27:3d:ac:9d:91:d3:7e:5a:e9:a1:f7:ba:3a:80:
d0:4f:84:65:e9:bb:ac:40:11:c9:00:bc:f7:ff:c1:
b0:b7:6a:55:1f:10:7c:9d:75:e1:0e:6e:0b:6e:ea:
4b:50:1e:d3:53:31:57:47:f1:4e:26:fe:0b:1c:f0:
c9:4d:39:f6:e5:c3:9f:83:a0:f8:1d:b9:90:f1:0e:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:25:05:49:98:7B:8D:8A:3B:1D:AD:09:A1:74:EA:8D:2D:D2:98
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wJAlBUmYe42KOx2tCaF06o0t0pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/21
5.102.116.0-5.102.123.255
31.186.180.0/22
82.163.52.0/23
82.163.64.0/22
82.163.168.0/21
82.163.224.0/22
185.86.140.0/23
Signature Algorithm: sha256WithRSAEncryption
64:15:1f:ca:9e:e5:38:96:ec:fb:97:aa:ea:0c:df:20:a0:8d:
43:e9:61:53:70:c9:cf:3f:59:85:8a:8c:a5:eb:09:78:29:c3:
58:23:a0:29:c0:25:55:4a:f8:8a:b8:ad:00:f0:b3:80:a7:ee:
eb:62:47:4b:37:71:2e:32:6f:c6:fe:da:37:2d:df:16:44:da:
48:48:9a:12:68:4e:62:44:d3:04:33:17:41:ee:29:56:47:9e:
d7:80:d6:8a:ba:51:c2:b5:3a:e6:2b:eb:4e:55:62:09:32:a0:
59:14:7b:99:5c:19:8e:52:6f:f8:9c:67:5d:af:5f:96:63:0e:
72:7e:6e:d4:3d:49:78:2f:d6:b1:a4:2b:84:a5:05:b3:d7:e0:
f7:b5:b4:19:13:7d:96:bd:c0:40:41:0c:60:c6:96:d2:c7:f6:
14:72:f1:db:e9:b3:2c:57:28:9b:6a:b9:db:10:57:2a:19:26:
7c:36:76:2c:68:90:72:93:3c:80:c2:2b:b0:ef:c0:99:b9:a8:
b3:05:f8:e7:51:85:a8:3b:b1:8b:cf:5f:e6:c1:86:91:cd:9f:
0a:e1:23:0d:31:d8:74:70:8b:29:7c:9c:09:e8:fb:70:b2:71:
44:50:20:db:2e:d1:49:ff:7e:a2:a5:6d:e2:c5:ff:cd:7d:0f:
09:c7:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:08 2026 by rpki-client