Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/2p0kk7liJGJffvM0hoPAwcH8keU.roa
File: 2p0kk7liJGJffvM0hoPAwcH8keU.roa (raw, json)
Hash identifier: KbEEtzLuRUW1n8MfixbLKJxIBjvZllW+heoglJP4MvM=
Subject key identifier: DA:9D:24:93:B9:62:24:62:5F:7E:F3:34:86:83:C0:C1:C1:FC:91:E5
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F69E84ACDAEAFC62DD7C742E18CD748F
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/2p0kk7liJGJffvM0hoPAwcH8keU.roa
Signing time: Thu 01 Oct 2026 08:39:38 +0000
ROA not before: Thu 01 Oct 2026 08:39:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12301
IP address blocks: 62.77.192.0/22 maxlen: 24
62.77.200.0/21 maxlen: 24
62.77.208.0/20 maxlen: 24
62.77.224.0/20 maxlen: 24
62.77.242.0/23 maxlen: 24
62.77.244.0/22 maxlen: 24
79.120.128.0/19 maxlen: 24
79.120.168.0/23 maxlen: 24
79.120.176.0/20 maxlen: 24
79.120.179.0/24 maxlen: 24
79.120.192.0/19 maxlen: 24
79.120.198.0/24 maxlen: 24
79.120.200.0/24 maxlen: 24
79.120.224.0/20 maxlen: 24
79.120.240.0/21 maxlen: 24
79.120.250.0/23 maxlen: 24
81.0.64.0/20 maxlen: 24
81.0.80.0/23 maxlen: 24
81.0.88.0/23 maxlen: 24
81.0.96.0/23 maxlen: 24
81.0.100.0/22 maxlen: 24
81.0.104.0/22 maxlen: 24
81.0.110.0/23 maxlen: 24
81.0.112.0/21 maxlen: 24
81.0.120.0/23 maxlen: 24
81.0.120.0/24 maxlen: 24
81.0.121.0/24 maxlen: 24
81.0.124.0/23 maxlen: 24
81.94.176.0/20 maxlen: 24
82.131.160.0/20 maxlen: 24
82.131.176.0/22 maxlen: 24
82.131.180.0/23 maxlen: 24
82.131.192.0/22 maxlen: 24
82.131.199.0/24 maxlen: 24
82.131.208.0/21 maxlen: 24
82.141.128.0/18 maxlen: 24
82.144.160.0/22 maxlen: 24
82.144.168.0/22 maxlen: 24
82.144.178.0/23 maxlen: 24
82.144.180.0/22 maxlen: 24
82.144.184.0/22 maxlen: 24
82.144.190.0/23 maxlen: 24
87.97.64.0/20 maxlen: 24
89.186.98.0/23 maxlen: 24
89.186.100.0/23 maxlen: 24
89.186.104.0/23 maxlen: 24
89.186.116.0/23 maxlen: 24
91.82.8.0/21 maxlen: 24
91.82.16.0/21 maxlen: 24
91.82.40.0/21 maxlen: 24
91.82.48.0/21 maxlen: 24
91.82.58.0/23 maxlen: 24
91.82.62.0/23 maxlen: 24
91.82.72.0/21 maxlen: 24
91.82.80.0/23 maxlen: 24
91.82.84.0/22 maxlen: 24
91.82.88.0/21 maxlen: 24
91.82.96.0/19 maxlen: 24
91.82.128.0/23 maxlen: 24
91.82.148.0/22 maxlen: 24
91.82.152.0/21 maxlen: 24
91.82.174.0/23 maxlen: 24
91.82.184.0/22 maxlen: 24
91.82.192.0/20 maxlen: 24
91.82.208.0/23 maxlen: 24
91.82.216.0/21 maxlen: 24
91.82.224.0/22 maxlen: 24
91.82.236.0/22 maxlen: 24
91.82.244.0/22 maxlen: 24
91.82.248.0/23 maxlen: 24
91.82.252.0/22 maxlen: 24
91.83.40.0/21 maxlen: 24
91.83.48.0/22 maxlen: 24
91.83.56.0/21 maxlen: 24
91.83.64.0/20 maxlen: 24
91.83.80.0/21 maxlen: 24
91.83.88.0/22 maxlen: 24
91.83.92.0/23 maxlen: 24
91.83.96.0/22 maxlen: 24
91.83.100.0/23 maxlen: 24
91.83.104.0/22 maxlen: 24
91.83.108.0/23 maxlen: 24
91.83.122.0/23 maxlen: 24
91.83.124.0/22 maxlen: 24
91.83.128.0/21 maxlen: 24
91.83.146.0/23 maxlen: 24
91.83.148.0/22 maxlen: 24
91.83.152.0/23 maxlen: 24
91.83.156.0/22 maxlen: 24
91.83.160.0/20 maxlen: 24
91.83.176.0/22 maxlen: 24
91.83.208.0/20 maxlen: 24
91.83.220.0/22 maxlen: 22
91.83.224.0/20 maxlen: 24
91.83.240.0/21 maxlen: 24
91.83.248.0/22 maxlen: 24
91.83.254.0/23 maxlen: 24
94.125.248.0/21 maxlen: 24
185.50.28.0/22 maxlen: 24
193.68.32.0/19 maxlen: 24
193.91.64.0/19 maxlen: 24
193.226.194.0/23 maxlen: 24
193.226.196.0/22 maxlen: 24
193.226.200.0/21 maxlen: 24
193.226.208.0/22 maxlen: 24
193.226.216.0/21 maxlen: 24
193.226.224.0/23 maxlen: 24
193.226.228.0/22 maxlen: 24
193.226.234.0/23 maxlen: 24
193.226.236.0/23 maxlen: 24
193.226.242.0/23 maxlen: 24
193.226.250.0/23 maxlen: 24
193.226.252.0/22 maxlen: 24
194.143.224.0/19 maxlen: 24
194.169.253.0/24 maxlen: 24
195.184.0.0/19 maxlen: 24
212.24.160.0/19 maxlen: 19
212.108.192.0/18 maxlen: 24
213.16.64.0/18 maxlen: 24
213.163.0.0/18 maxlen: 24
213.163.12.0/24 maxlen: 24
213.163.40.0/24 maxlen: 24
213.197.64.0/21 maxlen: 24
213.253.192.0/18 maxlen: 24
217.150.128.0/20 maxlen: 20
2001:1aa0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9e:84:ac:da:ea:fc:62:dd:7c:74:2e:18:cd:74:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:39:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da9d2493b96224625f7ef3348683c0c1c1fc91e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:65:d0:e0:6e:3b:aa:70:8e:95:39:d3:f8:
dd:e9:cc:16:00:3e:65:6f:44:7b:6f:9e:54:3d:56:
82:9d:d7:54:5b:d2:0e:fe:20:f5:9d:0e:36:9e:84:
a9:cf:11:e3:a5:2c:68:4e:8e:d7:31:1a:b3:47:b7:
7f:24:c1:00:eb:57:74:32:08:49:6c:1c:82:3a:59:
4d:8b:f9:fb:b8:4b:6b:41:fa:e2:2e:e0:09:22:f4:
29:bd:3a:8c:dd:6f:fa:cf:ba:4c:2a:ef:8a:33:eb:
0d:57:89:39:d7:83:03:bc:4c:21:81:8d:db:4a:dc:
1a:ab:0c:68:f9:69:4b:9c:ad:a7:14:42:89:02:05:
ca:66:32:6b:65:a5:8e:19:00:af:f5:ec:b2:db:04:
d1:ac:7c:43:0c:50:90:fd:20:4c:ad:8a:3d:d6:a3:
e7:fd:aa:88:3c:60:ce:2d:33:dd:7a:f3:f4:49:9d:
63:6d:8b:86:47:73:6a:a7:fd:e5:89:85:ae:95:44:
62:5a:25:d9:fa:c1:92:7f:8a:2c:72:ab:85:66:e3:
c3:dc:99:4d:06:75:52:52:5b:46:38:d8:02:76:8c:
d6:45:a5:48:97:09:d1:a7:42:b0:27:4e:13:01:23:
e4:d0:23:ec:9f:8b:c6:2f:dc:6c:d8:3b:22:f3:e9:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9D:24:93:B9:62:24:62:5F:7E:F3:34:86:83:C0:C1:C1:FC:91:E5
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/2p0kk7liJGJffvM0hoPAwcH8keU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.192.0/22
62.77.200.0-62.77.239.255
62.77.242.0-62.77.247.255
79.120.128.0/19
79.120.168.0/23
79.120.176.0-79.120.247.255
79.120.250.0/23
81.0.64.0-81.0.81.255
81.0.88.0/23
81.0.96.0/23
81.0.100.0-81.0.107.255
81.0.110.0-81.0.121.255
81.0.124.0/23
81.94.176.0/20
82.131.160.0-82.131.181.255
82.131.192.0/22
82.131.199.0/24
82.131.208.0/21
82.141.128.0/18
82.144.160.0/22
82.144.168.0/22
82.144.178.0-82.144.187.255
82.144.190.0/23
87.97.64.0/20
89.186.98.0-89.186.101.255
89.186.104.0/23
89.186.116.0/23
91.82.8.0-91.82.23.255
91.82.40.0-91.82.55.255
91.82.58.0/23
91.82.62.0/23
91.82.72.0-91.82.81.255
91.82.84.0-91.82.129.255
91.82.148.0-91.82.159.255
91.82.174.0/23
91.82.184.0/22
91.82.192.0-91.82.209.255
91.82.216.0-91.82.227.255
91.82.236.0/22
91.82.244.0-91.82.249.255
91.82.252.0/22
91.83.40.0-91.83.51.255
91.83.56.0-91.83.93.255
91.83.96.0-91.83.101.255
91.83.104.0-91.83.109.255
91.83.122.0-91.83.135.255
91.83.146.0-91.83.153.255
91.83.156.0-91.83.179.255
91.83.208.0-91.83.251.255
91.83.254.0/23
94.125.248.0/21
185.50.28.0/22
193.68.32.0/19
193.91.64.0/19
193.226.194.0-193.226.211.255
193.226.216.0-193.226.225.255
193.226.228.0/22
193.226.234.0-193.226.237.255
193.226.242.0/23
193.226.250.0-193.226.255.255
194.143.224.0/19
194.169.253.0/24
195.184.0.0/19
212.24.160.0/19
212.108.192.0/18
213.16.64.0/18
213.163.0.0/18
213.197.64.0/21
213.253.192.0/18
217.150.128.0/20
IPv6:
2001:1aa0::/29
Signature Algorithm: sha256WithRSAEncryption
63:51:13:91:99:d8:6a:18:a3:9b:20:23:e9:44:c4:06:54:ef:
a7:29:11:12:11:f3:02:fe:14:f8:6a:aa:50:0b:ab:45:80:25:
a0:db:30:aa:82:6f:3a:3e:38:bf:e1:79:54:f7:09:0f:84:db:
1c:8c:5b:d3:f7:38:97:41:46:a5:e4:a4:60:0a:4d:9e:c4:7e:
c7:67:50:44:c8:7d:e5:38:f7:cf:16:e5:a2:ed:35:d3:f6:7c:
cb:6f:a8:67:ce:b2:a4:85:da:2f:15:46:ef:a7:ed:27:40:6b:
f5:da:09:97:98:82:12:a1:e9:a9:bc:a2:34:18:d0:5e:44:f5:
6f:3b:94:ed:3b:a7:94:eb:cd:f1:09:2e:ed:8e:65:e4:13:b6:
d3:59:4d:48:1e:27:61:ac:b8:0a:79:53:fc:93:0b:54:29:2e:
71:c0:ff:96:98:f2:21:86:88:d1:b4:45:bc:d5:e8:83:df:d6:
c8:33:23:47:fe:fa:cd:ad:7b:d4:8c:6f:19:6b:6b:f2:27:d7:
28:a7:11:7b:79:31:3a:d1:c7:48:c2:e3:45:d5:16:d5:1b:b8:
ca:55:55:d3:2d:4c:4f:80:6c:22:0a:fe:7f:7e:5a:af:94:4b:
99:c4:03:ea:7f:4d:2c:34:c0:c6:8b:98:08:f4:41:e3:02:8b:
c3:fd:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:24 2026 by rpki-client