Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GXcR9YuCDHUbQPqD2_OjmyHrLB4.roa
File: GXcR9YuCDHUbQPqD2_OjmyHrLB4.roa (raw, json)
Hash identifier: 69movRHtZ/rQaA6ef9Z78jqzc3/yj0VGFIRk6rcuNwc=
Subject key identifier: 19:77:11:F5:8B:82:0C:75:1B:40:FA:83:DB:F3:A3:9B:21:EB:2C:1E
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A093A08C68EFF097065BD6E06AD3CFFE57
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GXcR9YuCDHUbQPqD2_OjmyHrLB4.roa
Signing time: Sat 12 Sep 2026 03:19:27 +0000
ROA not before: Sat 12 Sep 2026 03:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49304
IP address blocks: 82.163.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:a0:8c:68:ef:f0:97:06:5b:d6:e0:6a:d3:cf:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 12 03:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=197711f58b820c751b40fa83dbf3a39b21eb2c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:a3:b4:70:0f:6d:db:12:f3:1a:ba:30:f3:
60:2b:0e:9d:8f:51:86:b3:24:50:56:62:3b:0a:76:
f2:7b:67:5c:ec:71:db:a6:40:32:30:df:00:e0:97:
13:c5:bf:5e:c3:c5:dc:af:d7:e4:07:68:1f:9c:2e:
50:3f:e1:ff:d5:d5:e2:ab:7c:18:7d:d1:f3:41:8f:
06:91:3b:ab:02:0f:34:db:43:bc:82:46:43:ec:a2:
48:e8:ec:2b:8c:10:e2:e5:5d:e8:15:98:bc:1e:b3:
0d:16:28:f2:3c:6d:d8:31:0e:59:65:17:ff:c3:5b:
fb:95:69:f4:f9:52:27:31:b5:80:f3:61:cf:ec:1a:
9a:f0:5d:a8:54:f7:32:44:16:a8:38:3f:7c:8e:2a:
fc:9b:a2:50:2c:6b:41:ba:4c:c7:8a:10:c3:f0:71:
bd:76:72:e8:01:03:53:d2:5f:fd:6d:8f:fb:ec:73:
88:70:98:80:53:35:12:d2:b3:d5:c7:5c:d2:09:8b:
f2:b6:f3:ad:44:e5:34:32:bf:d5:8a:ea:72:4d:84:
2c:0c:05:7b:9a:9e:af:1c:d0:ba:03:33:1b:a6:de:
73:0a:fa:13:74:57:55:72:36:1d:7e:e1:cc:39:38:
e9:b4:f9:e9:81:c0:2c:d0:76:d1:a3:33:6f:3e:ac:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:77:11:F5:8B:82:0C:75:1B:40:FA:83:DB:F3:A3:9B:21:EB:2C:1E
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/GXcR9YuCDHUbQPqD2_OjmyHrLB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.168.0/22
Signature Algorithm: sha256WithRSAEncryption
81:9e:23:db:3c:b2:6c:2f:42:47:b3:a9:f9:3e:d8:4f:c6:6f:
de:d5:56:3f:a4:e0:94:88:57:7b:f2:e6:3d:df:aa:68:9f:09:
5c:70:21:cb:e5:86:39:93:52:cd:66:8a:f1:ce:db:85:0d:da:
07:ce:c5:96:db:b0:14:c9:77:11:a0:f7:54:2d:94:06:b3:b6:
92:4a:c3:04:50:35:14:4c:18:50:81:c1:8a:52:00:34:74:89:
89:23:d0:3d:63:90:a6:30:fa:73:a7:d3:fa:72:70:87:ec:af:
ae:11:38:77:9a:a6:d9:4f:f0:f7:04:f4:3c:89:5b:0f:ee:dc:
4d:c6:48:8e:c5:44:83:08:ee:30:86:7c:df:a2:a4:a1:83:0e:
b5:fe:25:a1:56:b3:4e:ea:f7:4a:35:cb:a3:02:6e:c1:74:7d:
e0:99:e5:25:91:86:11:3e:d3:e9:71:53:20:d0:82:fe:e7:93:
7b:07:a2:e6:71:e5:5f:62:db:66:10:48:fc:80:da:1b:4a:02:
d1:47:04:e6:45:79:18:32:0f:ce:46:87:d5:76:f9:cb:72:45:
cd:4a:65:f5:a8:90:21:fb:17:c3:76:77:48:9b:a2:b8:17:a8:
4f:54:6d:11:a6:dd:46:ae:3e:bb:ad:b2:16:b0:45:ca:dd:69:
79:27:9f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:23 2026 by rpki-client