Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/gU6mmkSkrPUiiQCuwfWMbXHe5Oc.roa
File: gU6mmkSkrPUiiQCuwfWMbXHe5Oc.roa (raw, json)
Hash identifier: 94RP8C8QKoAVV7QYWQTo3errbASYfN8d9vKwurs1/GA=
Subject key identifier: 81:4E:A6:9A:44:A4:AC:F5:22:89:00:AE:C1:F5:8C:6D:71:DE:E4:E7
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0FBCB7754F1A977E8960E72C50807A1CF
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/gU6mmkSkrPUiiQCuwfWMbXHe5Oc.roa
Signing time: Fri 02 Oct 2026 08:46:50 +0000
ROA not before: Fri 02 Oct 2026 08:46:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20845
IP address blocks: 62.77.196.0/22 maxlen: 24
62.77.240.0/23 maxlen: 24
62.77.248.0/21 maxlen: 24
62.165.192.0/18 maxlen: 24
77.234.64.0/19 maxlen: 24
78.131.0.0/17 maxlen: 24
79.120.160.0/21 maxlen: 24
79.120.170.0/23 maxlen: 24
79.120.172.0/22 maxlen: 24
79.120.248.0/23 maxlen: 24
79.120.252.0/22 maxlen: 24
80.95.64.0/19 maxlen: 24
81.0.82.0/23 maxlen: 24
81.0.84.0/22 maxlen: 24
81.0.90.0/23 maxlen: 24
81.0.92.0/22 maxlen: 24
81.0.98.0/23 maxlen: 24
81.0.108.0/23 maxlen: 24
81.0.122.0/23 maxlen: 24
81.0.126.0/23 maxlen: 24
81.17.176.0/20 maxlen: 24
82.131.128.0/19 maxlen: 24
82.131.182.0/23 maxlen: 24
82.131.184.0/21 maxlen: 24
82.131.196.0/23 maxlen: 24
82.131.198.0/24 maxlen: 24
82.131.200.0/21 maxlen: 24
82.131.216.0/21 maxlen: 24
82.131.224.0/19 maxlen: 24
82.144.164.0/22 maxlen: 24
82.144.172.0/22 maxlen: 24
82.144.176.0/23 maxlen: 24
82.144.188.0/23 maxlen: 24
84.236.0.0/17 maxlen: 24
85.66.0.0/15 maxlen: 24
85.238.64.0/19 maxlen: 24
87.97.0.0/18 maxlen: 24
87.97.80.0/20 maxlen: 24
87.97.96.0/19 maxlen: 24
89.147.64.0/20 maxlen: 24
89.147.96.0/22 maxlen: 24
89.147.112.0/21 maxlen: 24
89.148.64.0/18 maxlen: 24
89.186.96.0/23 maxlen: 24
89.186.102.0/23 maxlen: 24
89.186.106.0/23 maxlen: 24
89.186.108.0/22 maxlen: 24
89.186.112.0/22 maxlen: 24
89.186.118.0/23 maxlen: 24
89.186.120.0/21 maxlen: 24
91.82.0.0/21 maxlen: 24
91.82.24.0/21 maxlen: 24
91.82.32.0/21 maxlen: 24
91.82.56.0/23 maxlen: 24
91.82.60.0/23 maxlen: 24
91.82.64.0/21 maxlen: 24
91.82.82.0/23 maxlen: 24
91.82.130.0/23 maxlen: 24
91.82.132.0/22 maxlen: 24
91.82.136.0/21 maxlen: 24
91.82.144.0/22 maxlen: 24
91.82.160.0/21 maxlen: 24
91.82.168.0/22 maxlen: 24
91.82.172.0/23 maxlen: 24
91.82.176.0/21 maxlen: 24
91.82.188.0/22 maxlen: 24
91.82.210.0/23 maxlen: 24
91.82.212.0/22 maxlen: 24
91.82.228.0/22 maxlen: 24
91.82.232.0/22 maxlen: 24
91.82.240.0/22 maxlen: 24
91.82.250.0/23 maxlen: 24
91.83.0.0/19 maxlen: 24
91.83.32.0/21 maxlen: 24
91.83.52.0/22 maxlen: 24
91.83.94.0/23 maxlen: 24
91.83.102.0/23 maxlen: 24
91.83.110.0/23 maxlen: 24
91.83.120.0/23 maxlen: 24
91.83.136.0/21 maxlen: 24
91.83.144.0/23 maxlen: 24
91.83.154.0/23 maxlen: 24
91.83.180.0/22 maxlen: 24
91.83.184.0/21 maxlen: 24
91.83.192.0/20 maxlen: 24
91.83.252.0/23 maxlen: 24
92.52.224.0/19 maxlen: 24
92.245.64.0/19 maxlen: 24
92.249.128.0/17 maxlen: 24
94.21.0.0/16 maxlen: 24
94.247.88.0/21 maxlen: 24
176.241.0.0/18 maxlen: 24
178.164.128.0/17 maxlen: 24
185.29.80.0/22 maxlen: 24
185.62.128.0/22 maxlen: 24
188.142.128.0/19 maxlen: 24
188.143.0.0/17 maxlen: 24
193.110.56.0/21 maxlen: 24
193.226.192.0/23 maxlen: 24
193.226.212.0/22 maxlen: 24
193.226.226.0/23 maxlen: 24
193.226.232.0/23 maxlen: 24
193.226.238.0/23 maxlen: 24
193.226.240.0/23 maxlen: 24
193.226.244.0/22 maxlen: 24
193.226.248.0/23 maxlen: 24
195.38.96.0/19 maxlen: 24
212.40.72.0/21 maxlen: 24
212.40.80.0/20 maxlen: 24
213.197.72.0/21 maxlen: 24
213.197.80.0/20 maxlen: 24
217.197.176.0/20 maxlen: 24
2a01:368::/29 maxlen: 48
2a01:368::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:cb:77:54:f1:a9:77:e8:96:0e:72:c5:08:07:a1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 2 08:46:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=814ea69a44a4acf5228900aec1f58c6d71dee4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:7c:2e:d2:1e:24:58:c9:31:e6:77:42:9f:
07:54:49:f1:f4:fb:a3:37:09:f2:fb:cc:c7:3e:92:
ae:4a:4b:88:fd:a9:28:a1:ab:39:44:0e:ae:4a:39:
b8:80:61:9e:65:bf:cd:be:40:a6:f4:8b:ab:bd:a0:
24:52:f0:fe:dd:6f:87:eb:bb:02:ae:83:11:29:f1:
a7:74:4a:9b:4f:94:d9:15:bb:fe:f4:cc:8d:a8:71:
f1:84:39:55:b4:e1:cc:af:b3:7d:86:86:59:4c:05:
1d:30:20:ab:63:4c:97:fd:43:84:03:51:f5:77:ec:
bc:90:c1:57:41:45:8b:70:4c:da:43:ce:8d:76:be:
fb:8f:89:95:40:7f:55:81:33:15:fe:03:9d:15:24:
0a:23:d4:90:6d:72:06:3b:ee:a7:1f:7a:18:98:2f:
72:1d:4d:d9:a6:30:f5:d9:a9:36:2b:dd:3f:80:06:
2c:d0:75:0b:e2:ce:f7:12:5a:90:bb:9a:75:91:b2:
da:ed:1f:11:1c:1d:59:00:99:04:07:39:fb:aa:59:
7f:f6:09:b2:83:3f:9f:2d:da:f5:08:64:cb:4c:04:
c7:8b:71:99:f2:2c:bd:99:8b:a6:7f:50:fb:90:89:
7a:4c:a8:a3:7e:1c:3a:b1:f5:56:9a:e4:ba:32:a6:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:A6:9A:44:A4:AC:F5:22:89:00:AE:C1:F5:8C:6D:71:DE:E4:E7
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/gU6mmkSkrPUiiQCuwfWMbXHe5Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.196.0/22
62.77.240.0/23
62.77.248.0/21
62.165.192.0/18
77.234.64.0/19
78.131.0.0/17
79.120.160.0/21
79.120.170.0-79.120.175.255
79.120.248.0/23
79.120.252.0/22
80.95.64.0/19
81.0.82.0-81.0.87.255
81.0.90.0-81.0.95.255
81.0.98.0/23
81.0.108.0/23
81.0.122.0/23
81.0.126.0/23
81.17.176.0/20
82.131.128.0/19
82.131.182.0-82.131.191.255
82.131.196.0-82.131.198.255
82.131.200.0/21
82.131.216.0-82.131.255.255
82.144.164.0/22
82.144.172.0-82.144.177.255
82.144.188.0/23
84.236.0.0/17
85.66.0.0/15
85.238.64.0/19
87.97.0.0/18
87.97.80.0-87.97.127.255
89.147.64.0/20
89.147.96.0/22
89.147.112.0/21
89.148.64.0/18
89.186.96.0/23
89.186.102.0/23
89.186.106.0-89.186.115.255
89.186.118.0-89.186.127.255
91.82.0.0/21
91.82.24.0-91.82.39.255
91.82.56.0/23
91.82.60.0/23
91.82.64.0/21
91.82.82.0/23
91.82.130.0-91.82.147.255
91.82.160.0-91.82.173.255
91.82.176.0/21
91.82.188.0/22
91.82.210.0-91.82.215.255
91.82.228.0-91.82.235.255
91.82.240.0/22
91.82.250.0/23
91.83.0.0-91.83.39.255
91.83.52.0/22
91.83.94.0/23
91.83.102.0/23
91.83.110.0/23
91.83.120.0/23
91.83.136.0-91.83.145.255
91.83.154.0/23
91.83.180.0-91.83.207.255
91.83.252.0/23
92.52.224.0/19
92.245.64.0/19
92.249.128.0/17
94.21.0.0/16
94.247.88.0/21
176.241.0.0/18
178.164.128.0/17
185.29.80.0/22
185.62.128.0/22
188.142.128.0/19
188.143.0.0/17
193.110.56.0/21
193.226.192.0/23
193.226.212.0/22
193.226.226.0/23
193.226.232.0/23
193.226.238.0-193.226.241.255
193.226.244.0-193.226.249.255
195.38.96.0/19
212.40.72.0-212.40.95.255
213.197.72.0-213.197.95.255
217.197.176.0/20
IPv6:
2a01:368::/29
Signature Algorithm: sha256WithRSAEncryption
72:a3:2a:ce:23:2f:1e:9b:cb:a7:93:16:9b:8d:62:a5:90:e0:
0a:9f:11:5b:04:55:70:d5:47:9f:56:45:03:87:bb:a7:29:c4:
11:4b:8f:35:9d:ad:a8:8d:bb:a0:70:e8:19:6b:51:26:7c:db:
c4:11:8d:9a:b6:c4:cd:3a:fc:13:a9:dc:07:dc:9f:1b:9b:04:
ee:98:14:39:2d:35:24:c9:74:4d:12:72:7b:4c:6a:3f:05:66:
fb:81:d8:47:d4:a7:fc:a7:c8:f6:c9:3e:d7:f6:1a:90:8d:b6:
b0:04:83:7c:27:e6:d6:e3:e4:54:9b:13:45:e7:02:00:7c:e8:
60:0e:2e:79:68:ae:b5:6c:51:f9:3c:de:01:fb:1a:a7:c7:c7:
31:43:a4:2a:44:65:f0:1e:6a:35:29:90:c3:0a:93:6b:f6:2f:
57:bc:31:29:c8:50:ff:56:a3:a3:a2:ec:21:4b:42:d8:82:d6:
0e:3c:01:84:01:54:a3:90:f8:de:a8:33:d7:a7:10:2a:06:07:
a2:b6:2e:d9:dd:d5:1c:13:55:6b:46:47:ad:96:fa:ca:d7:fa:
7f:e4:46:f9:54:68:d0:66:58:9e:9d:d0:9e:9e:f2:02:13:ef:
d2:74:70:bc:ca:51:d8:fe:e2:a0:5e:d8:ec:b5:d0:a8:b3:00:
57:36:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:13:14 2026 by rpki-client