Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KcqXV03SbTN23W8k7Zveul8m73c.roa
File: KcqXV03SbTN23W8k7Zveul8m73c.roa (raw, json)
Hash identifier: IPNbdqPZ0V+UN6wGd6huyA9RRsHrCPO8c3J5qv7WIUM=
Subject key identifier: 29:CA:97:57:4D:D2:6D:33:76:DD:6F:24:ED:9B:DE:BA:5F:26:EF:77
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A093A1762635EBC4E33E0100BD5667FF83
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KcqXV03SbTN23W8k7Zveul8m73c.roa
Signing time: Sat 12 Sep 2026 03:20:27 +0000
ROA not before: Sat 12 Sep 2026 03:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209554
IP address blocks: 82.163.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:a1:76:26:35:eb:c4:e3:3e:01:00:bd:56:67:ff:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 12 03:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29ca97574dd26d3376dd6f24ed9bdeba5f26ef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:1e:9b:3a:28:64:f7:0c:97:29:7f:c9:66:
3a:87:5f:e8:f2:b3:7d:52:ab:6f:d3:85:d4:9f:9c:
f6:69:27:f3:3d:a0:2f:c3:35:dd:66:e4:a2:78:08:
33:1a:ad:36:fd:2b:6f:23:2e:22:ab:d8:d9:bc:2c:
41:e0:29:2c:24:49:ae:08:82:70:fe:df:e9:25:40:
f3:a5:6c:dc:a9:cf:77:88:45:3d:00:85:ae:fc:6b:
6d:89:d9:8d:47:cf:d9:1f:a4:e4:93:85:3c:7d:65:
91:2b:2f:3b:84:b0:f9:4c:d5:ac:74:50:45:97:8f:
41:b1:37:9d:6e:33:c7:45:fa:c0:ee:d9:d3:4b:5f:
07:47:23:6a:c7:ef:f1:7d:21:f0:94:62:2a:da:9f:
ee:90:3a:92:ad:ec:78:fc:b2:46:5d:a1:f6:31:71:
fc:5c:c8:05:d7:aa:11:06:3c:bb:57:0a:f7:b3:99:
6b:3d:7c:c5:97:ec:e4:ee:fc:e6:42:18:87:0d:d7:
11:32:96:18:14:83:8e:15:22:21:c7:0f:58:a6:6c:
8b:b9:5d:a2:bd:5f:35:a0:3b:6d:1a:f2:0f:ea:a6:
31:5e:ff:02:c8:41:c2:d7:42:df:64:35:5b:24:ed:
b7:bf:e6:2b:03:4e:ba:ec:8a:03:78:07:86:57:ca:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:97:57:4D:D2:6D:33:76:DD:6F:24:ED:9B:DE:BA:5F:26:EF:77
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/KcqXV03SbTN23W8k7Zveul8m73c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:c4:71:79:43:97:8c:74:5e:83:8c:25:9b:a0:01:15:04:7a:
74:e0:1a:1f:a8:c2:7c:40:3b:91:6b:b1:e8:7d:26:8e:18:81:
52:b3:5f:15:3f:3f:40:77:95:e6:e9:e1:aa:b5:96:e3:86:1f:
07:d5:e7:b0:cb:95:1f:8f:aa:4c:bd:11:c4:5e:e3:61:e5:48:
01:7f:7a:f1:2d:95:31:0f:fd:3b:56:3c:ff:39:c1:25:0d:50:
d1:27:e8:77:4a:b0:52:cf:ba:61:d1:f2:85:7d:e0:7f:ef:02:
5a:05:ef:29:36:24:95:31:27:16:e2:2c:67:c7:e6:2a:c4:f9:
e7:06:21:1d:61:ec:d6:a2:12:e7:54:37:2d:d2:5c:41:90:c6:
c0:d3:32:ff:64:e3:a1:86:42:6e:08:94:52:7c:6e:c7:08:c7:
53:03:b1:57:f0:76:41:77:9a:b1:59:67:e0:9b:b0:21:62:2a:
5b:63:e2:dd:ff:2e:aa:63:7f:27:ad:4b:30:e9:0a:4d:58:bf:
b7:ab:69:dc:b8:16:6c:64:66:a2:63:13:6e:a6:0b:b3:7f:43:
c8:92:95:4d:e8:77:53:d6:3e:f2:80:b5:a0:38:6a:22:8a:5a:
64:4d:c0:7e:f9:fb:17:ec:d0:c1:c3:3f:1b:fc:38:97:21:82:
db:a6:df:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCToXYmNevE4z4BAL1WZ/+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjYwOTEyMDMyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWNhOTc1NzRkZDI2ZDMzNzZkZDZmMjRlZDliZGViYTVmMjZlZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F8emzooZPcMlyl/yWY6h1/o8rN9
Uqtv04XUn5z2aSfzPaAvwzXdZuSieAgzGq02/StvIy4iq9jZvCxB4CksJEmuCIJw
/t/pJUDzpWzcqc93iEU9AIWu/GttidmNR8/ZH6Tkk4U8fWWRKy87hLD5TNWsdFBF
l49BsTedbjPHRfrA7tnTS18HRyNqx+/xfSHwlGIq2p/ukDqSrex4/LJGXaH2MXH8
XMgF16oRBjy7Vwr3s5lrPXzFl+zk7vzmQhiHDdcRMpYYFIOOFSIhxw9YpmyLuV2i
vV81oDttGvIP6qYxXv8CyEHC10LfZDVbJO23v+YrA0667IoDeAeGV8okkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCnKl1dN0m0zdt1vJO2b3rpfJu93MB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvS2NxWFYwM1NiVE4yM1c4azdadmV1bDhtNzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUqOoMA0G
CSqGSIb3DQEBCwUAA4IBAQCNxHF5Q5eMdF6DjCWboAEVBHp04BofqMJ8QDuRa7Ho
fSaOGIFSs18VPz9Ad5Xm6eGqtZbjhh8H1eewy5Ufj6pMvRHEXuNh5UgBf3rxLZUx
D/07Vjz/OcElDVDRJ+h3SrBSz7ph0fKFfeB/7wJaBe8pNiSVMScW4ixnx+YqxPnn
BiEdYezWohLnVDct0lxBkMbA0zL/ZOOhhkJuCJRSfG7HCMdTA7FX8HZBd5qxWWfg
m7AhYipbY+Ld/y6qY38nrUsw6QpNWL+3q2ncuBZsZGaiYxNupguzf0PIkpVN6HdT
1j7ygLWgOGoiilpkTcB++fsX7NDBwz8b/DiXIYLbpt8U
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:06 2026 by rpki-client