Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/HncOpC0cPLkDLV136oAS4qAtbEk.roa
File: HncOpC0cPLkDLV136oAS4qAtbEk.roa (raw, json)
Hash identifier: id6UMdtXryGkMPWSsEKiWYxcEmbnr02iMMrsqZnYQy8=
Subject key identifier: 1E:77:0E:A4:2D:1C:3C:B9:03:2D:5D:77:EA:80:12:E2:A0:2D:6C:49
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019A1C6529E0BBA69AED05248281CCB72B75
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/HncOpC0cPLkDLV136oAS4qAtbEk.roa
Signing time: Sat 25 Oct 2025 17:23:03 +0000
ROA not before: Sat 25 Oct 2025 17:23:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.102.116.0/22 maxlen: 24
5.102.120.0/22 maxlen: 24
82.163.64.0/22 maxlen: 24
82.163.168.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
185.86.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:65:29:e0:bb:a6:9a:ed:05:24:82:81:cc:b7:2b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Oct 25 17:23:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e770ea42d1c3cb9032d5d77ea8012e2a02d6c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:45:4e:b3:01:38:b3:14:f3:db:24:5e:60:
80:f8:d5:94:8f:c6:18:6f:f2:f8:be:25:51:55:ca:
65:15:de:9f:25:f5:0e:f7:2f:83:17:c2:94:f5:e5:
61:cb:77:44:58:50:11:ac:24:94:b1:e0:38:88:ab:
16:9b:a6:45:44:ba:9e:8c:59:77:db:a3:20:b7:b7:
de:70:a2:ad:70:32:85:b3:6c:b2:b4:b8:46:3b:d5:
b0:f9:b0:4b:64:70:11:ce:af:7d:28:85:0e:7e:4d:
f2:01:42:25:0a:f7:01:30:2a:46:a3:25:0d:57:ff:
2c:ee:67:ed:3a:6b:c3:20:a2:e2:38:41:36:85:00:
96:64:e0:c1:3d:66:cd:4c:53:35:de:1f:ba:f6:9d:
b8:07:3b:ff:a2:92:14:0d:ea:72:25:a9:b1:11:21:
c4:55:61:ff:df:de:12:30:d3:89:2b:2a:ea:81:f1:
1c:00:4d:6e:56:d8:a6:8e:0c:80:1b:52:a6:d8:a5:
b4:58:03:c4:f6:61:93:c5:04:9f:15:26:8b:db:c9:
cd:e3:cb:1e:7d:ad:c2:b2:ca:5a:b3:b2:e3:c9:43:
40:c6:f9:b1:fe:3f:4f:b4:82:e1:d2:9e:83:eb:4a:
65:19:14:34:cd:d9:27:df:b1:33:9f:1c:a7:cc:c9:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:0E:A4:2D:1C:3C:B9:03:2D:5D:77:EA:80:12:E2:A0:2D:6C:49
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/HncOpC0cPLkDLV136oAS4qAtbEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.116.0-5.102.123.255
82.163.64.0/22
82.163.168.0/22
82.163.224.0/22
185.86.140.0/23
Signature Algorithm: sha256WithRSAEncryption
82:eb:80:2d:d4:29:b3:ee:f2:89:01:37:16:14:d3:4d:ba:95:
9b:7f:8f:c9:07:4e:2e:0f:4c:29:c8:f2:10:d5:34:a9:77:62:
bc:4d:7f:ba:5a:96:42:e4:42:77:f9:87:84:6d:10:e6:04:00:
d7:f0:b6:20:5d:e3:8d:5f:05:b4:4a:25:48:7d:48:e8:c1:ad:
2b:cb:e4:af:86:84:61:6a:ca:f8:37:64:2a:49:62:a3:58:d5:
fe:64:65:dc:15:90:f2:f9:30:cd:9d:11:80:89:6f:0e:d9:11:
7f:be:a5:d9:7b:1d:e3:59:7b:50:61:19:45:80:6c:a0:2f:b0:
84:45:a9:4d:93:a9:4d:0f:4c:02:6b:4c:63:38:7c:80:51:d6:
e0:12:82:d0:bb:56:fc:c0:75:75:3d:8d:0a:c3:03:a8:59:8f:
94:0e:73:91:bf:0e:77:33:3c:ce:e9:90:5b:06:77:2c:dd:2c:
5d:c4:ea:bf:7a:e3:3d:fa:ed:6d:76:ba:c1:61:47:40:c7:f8:
5c:c1:75:50:a9:a0:af:b0:44:b5:88:ff:53:8c:c6:a8:6e:9e:
98:63:96:28:28:4b:45:0c:44:21:dd:27:99:61:20:25:a6:33:
df:37:21:a4:fe:bf:59:5c:7f:8a:69:e6:55:2a:d3:07:f5:44:
7b:aa:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:35:51 2025 by rpki-client