Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/agN3jv1P3LzpdGV0jRqd7Ahfz8s.roa
File: agN3jv1P3LzpdGV0jRqd7Ahfz8s.roa (raw, json)
Hash identifier: dhTJ/EVvIKtq5sCZXuYogiREjLuzh/in2888eKsf50M=
Subject key identifier: 6A:03:77:8E:FD:4F:DC:BC:E9:74:65:74:8D:1A:9D:EC:08:5F:CF:CB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A093A08BD1F40568E0D61351DC6047B67F
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/agN3jv1P3LzpdGV0jRqd7Ahfz8s.roa
Signing time: Sat 12 Sep 2026 03:19:27 +0000
ROA not before: Sat 12 Sep 2026 03:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/22 maxlen: 24
5.102.100.0/22 maxlen: 24
5.102.116.0/22 maxlen: 24
5.102.120.0/22 maxlen: 24
31.186.180.0/22 maxlen: 23
82.163.52.0/23 maxlen: 24
82.163.64.0/22 maxlen: 24
82.163.172.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:a0:8b:d1:f4:05:68:e0:d6:13:51:dc:60:47:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 12 03:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a03778efd4fdcbce97465748d1a9dec085fcfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:00:f7:17:cf:a8:32:02:5c:24:c9:0e:b8:
09:54:f9:dd:fd:80:02:37:17:89:94:b2:07:df:a0:
20:fd:a8:47:ca:82:37:98:50:27:26:95:82:ef:a5:
6d:fc:3c:a4:b3:37:d6:5d:d0:a5:dd:c4:2c:01:d9:
53:df:fd:a7:18:44:ff:d3:6a:cc:01:11:6e:a6:1c:
18:76:76:69:3b:a5:bf:af:a7:25:c2:53:cb:86:af:
d2:97:a2:d8:c8:fe:31:9c:ba:f6:79:64:1b:e9:2a:
bc:3d:de:9f:21:19:93:57:b6:ac:0e:85:1b:ea:ab:
75:cc:1c:35:9b:f3:05:75:26:89:89:59:c9:4c:91:
cd:d5:5d:5f:71:79:0d:2a:05:43:2d:c1:97:c1:ca:
97:df:a9:e5:79:55:c9:d7:4d:ae:2a:e3:da:68:bb:
40:59:6a:79:1d:9f:ba:17:c5:e0:2f:1f:ef:83:07:
1e:c0:b3:aa:f2:79:e0:dc:d0:a5:c2:18:72:49:64:
2d:1f:ce:1f:c9:4a:11:eb:83:5d:34:c8:d8:07:d1:
61:35:51:52:cc:2a:3a:9d:34:1c:ea:e2:23:b1:bf:
6a:e0:b4:5d:a1:f3:17:f5:82:a7:0e:70:77:0d:f9:
20:d1:e7:b5:49:4b:32:c3:11:a4:5a:4f:d4:6f:1d:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:77:8E:FD:4F:DC:BC:E9:74:65:74:8D:1A:9D:EC:08:5F:CF:CB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/agN3jv1P3LzpdGV0jRqd7Ahfz8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/21
5.102.116.0-5.102.123.255
31.186.180.0/22
82.163.52.0/23
82.163.64.0/22
82.163.172.0/22
82.163.224.0/22
Signature Algorithm: sha256WithRSAEncryption
15:81:1c:21:a0:07:af:62:19:a5:c7:28:d1:be:67:29:bf:4b:
6a:a5:19:1f:47:e1:6a:fb:29:20:f4:59:35:a6:3f:2f:92:03:
04:9e:80:5c:ce:f0:db:1a:c5:9e:db:5a:e4:15:9f:c0:c0:a1:
9e:50:f1:f0:14:5f:41:e8:f4:a3:7d:4e:fa:01:da:38:67:f1:
1f:78:b7:0b:ed:d2:3b:74:f0:0a:93:79:9f:5a:b2:7a:7a:43:
c5:76:a0:74:ac:cf:9f:9a:aa:dc:89:96:74:57:82:ba:77:41:
b1:a9:30:ff:4c:e6:08:90:42:88:54:79:9a:05:81:40:74:84:
73:74:28:40:bb:c6:69:02:69:b6:fa:1d:19:84:15:78:81:38:
03:54:ba:6d:c5:1e:a0:de:ec:00:9f:22:9e:c8:fc:83:fc:f1:
a6:8e:21:9e:46:f1:93:6a:47:f1:f6:7c:43:ca:b2:34:e6:e7:
7d:cc:03:94:9c:3c:ab:aa:3c:cb:fd:84:7d:de:cf:9f:88:29:
02:4e:84:01:69:03:2d:44:b8:79:46:e6:fe:a4:5c:4d:2a:c2:
5c:68:ed:f6:62:c1:a3:f9:74:7e:cf:63:6d:7c:a7:15:08:7e:
2e:15:7a:a3:70:46:c0:6d:69:10:58:ee:01:6d:42:ef:fe:f7:
4e:90:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:24:32 2026 by rpki-client