Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/0-zqWRDfovt3b4p9y8JgIjv0YBU.roa
File: 0-zqWRDfovt3b4p9y8JgIjv0YBU.roa (raw, json)
Hash identifier: YD1IWCqMeXO/wXuliv1MIN2Qt6x10gvHhFw3D+WLG3Y=
Subject key identifier: D3:EC:EA:59:10:DF:A2:FB:77:6F:8A:7D:CB:C2:60:22:3B:F4:60:15
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01A17DE471BD6968FEABEA01ED2F123A979A
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/0-zqWRDfovt3b4p9y8JgIjv0YBU.roa
Signing time: Tue 27 Oct 2026 15:04:45 +0000
ROA not before: Tue 27 Oct 2026 15:04:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39719
IP address blocks: 62.177.16.0/21 maxlen: 24
62.177.16.0/22 maxlen: 22
62.177.20.0/22 maxlen: 22
62.177.24.0/21 maxlen: 21
62.177.24.0/24 maxlen: 24
62.177.25.0/24 maxlen: 24
62.177.26.0/24 maxlen: 24
62.177.27.0/24 maxlen: 24
62.177.28.0/24 maxlen: 24
62.177.29.0/24 maxlen: 24
62.177.30.0/24 maxlen: 24
62.177.31.0/24 maxlen: 24
81.23.80.0/20 maxlen: 22
81.23.80.0/21 maxlen: 21
81.23.80.0/22 maxlen: 22
81.23.84.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.84.0/24 maxlen: 24
81.23.85.0/24 maxlen: 24
81.23.88.0/21 maxlen: 21
81.23.88.0/22 maxlen: 22
81.23.92.0/22 maxlen: 22
2a12:1d40::/29 maxlen: 29
2a12:1d40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e4:71:bd:69:68:fe:ab:ea:01:ed:2f:12:3a:97:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Oct 27 15:04:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3ecea5910dfa2fb776f8a7dcbc260223bf46015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:b4:f4:1a:2e:46:8d:65:23:0c:f9:19:8f:
d6:0e:d6:45:24:44:30:0c:89:8d:a2:ff:68:64:58:
67:5c:3a:b6:fa:9f:e5:4d:34:44:b9:e8:24:14:57:
f1:01:d8:77:ce:13:e5:b5:6e:74:0e:13:38:ea:e9:
34:48:99:6e:03:6a:f9:d3:ed:7c:aa:62:b0:42:1d:
ff:b5:3f:3c:1e:82:0b:30:d4:b7:f5:e0:34:df:4f:
45:88:53:cb:d9:e2:61:c0:65:b2:60:6d:66:f0:5c:
93:26:7a:05:4f:e0:8e:53:7a:ca:13:f5:43:c5:ad:
0c:30:4a:7d:ee:f2:5d:47:7c:3c:b3:7c:c0:47:00:
f9:24:ce:dc:48:41:51:e4:0e:f4:59:c0:cb:5b:19:
4c:35:1d:0e:d7:93:cf:38:12:d0:e3:b1:9d:e7:0a:
61:26:1b:9e:cd:48:57:41:b2:13:d2:45:5d:b2:32:
2f:bb:7e:72:7a:3c:a8:09:ae:75:b2:89:18:03:89:
cd:5d:98:8a:a4:2a:2e:78:b2:ee:83:33:e5:a8:6a:
b3:97:d6:0f:6b:16:58:78:3a:63:79:e0:25:96:09:
30:42:da:6a:34:35:ba:f9:70:64:6f:b0:81:78:e9:
40:da:15:4d:b9:a4:43:1c:74:6f:e1:26:17:b8:c6:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:EA:59:10:DF:A2:FB:77:6F:8A:7D:CB:C2:60:22:3B:F4:60:15
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/0-zqWRDfovt3b4p9y8JgIjv0YBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.177.16.0/20
81.23.80.0/20
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
a1:2f:fa:57:b7:20:6c:61:8b:bc:14:36:ab:60:d1:62:ad:9d:
45:e1:82:72:87:be:bf:fe:45:ee:c2:11:4d:bf:fd:c1:c8:f6:
71:bb:10:ee:bf:12:42:c7:c8:39:80:f6:0e:f6:f7:ec:d5:15:
d6:12:9f:1b:ef:f7:8d:9f:cd:4f:54:7b:f0:bb:b7:65:c1:db:
a8:24:95:2b:44:bc:6e:88:f5:89:0c:37:55:ae:8d:b1:55:a4:
13:31:98:e7:78:3b:bc:a7:e8:9d:8d:f5:b8:04:93:73:c2:ca:
f9:b5:5b:cf:7f:78:78:46:63:cc:54:5d:35:44:40:c2:28:0d:
67:a7:fe:7e:51:0b:8d:16:4a:99:7c:62:65:7d:53:60:bf:93:
3d:9a:07:bb:ad:25:ff:0f:ef:a0:6f:bf:e1:2e:0f:75:21:3d:
a0:66:d9:8b:21:43:b6:41:e7:69:ed:31:4b:a2:3e:95:12:7e:
aa:37:fc:13:bb:30:51:4d:c2:35:ab:c6:06:e2:31:cd:a2:22:
e2:4e:ec:ba:8d:c0:f7:09:fd:21:89:e4:a5:00:f9:cf:77:37:
02:cf:26:b0:fc:9e:5c:52:07:1d:b5:53:f2:f9:8a:98:25:bb:
77:e0:ee:f5:e3:b4:27:b5:bf:49:0f:7a:4a:c1:e6:bc:0f:c8:
ab:b1:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:50:15 2026 by rpki-client