Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-0p2jR0jr5cQgzE-epB10bk2bSg.roa
File: 1-0p2jR0jr5cQgzE-epB10bk2bSg.roa (raw, json)
Hash identifier: otzneWm3pF5ijRseC1P1gOcmh+9KwAfkLUfH4a+aFf4=
Subject key identifier: FB:4A:76:8D:1D:23:AF:97:10:83:31:3E:7A:90:75:D1:B9:36:6D:28
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A033333066E1A52BC19F22CD2999E8356F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-0p2jR0jr5cQgzE-epB10bk2bSg.roa
Signing time: Mon 24 Aug 2026 09:56:27 +0000
ROA not before: Mon 24 Aug 2026 09:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.206.0/24 maxlen: 24
87.107.226.0/23 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
2a00:1198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:33:30:66:e1:a5:2b:c1:9f:22:cd:29:99:e8:35:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 24 09:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb4a768d1d23af971083313e7a9075d1b9366d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:90:31:b0:d1:eb:39:4b:af:25:e6:ec:8b:
3c:de:8f:ea:1d:08:33:36:bf:5a:4d:3b:0a:08:89:
33:fd:90:cd:0e:4f:45:03:54:9f:f7:84:a0:2a:01:
88:55:d4:cd:c4:f4:66:96:23:78:63:29:0b:1c:7b:
db:19:bf:5c:da:72:a3:bc:86:e2:92:48:08:57:31:
82:bc:3f:9a:fe:f2:de:17:89:af:9c:8a:33:3c:f6:
da:74:fa:9b:67:ef:b2:09:f9:6d:9a:4d:36:4c:f3:
37:46:0b:b1:a7:fd:d8:2e:09:ac:0b:18:8c:a4:3e:
f0:76:31:a6:38:46:9b:b3:75:84:c2:19:68:ca:7b:
fb:d5:5e:ef:a2:67:16:86:69:ab:df:ad:c2:4a:73:
65:04:af:7a:8d:c9:df:60:bf:c4:87:90:70:09:73:
9e:bd:81:da:68:ec:ac:7b:3f:4d:bc:78:19:a1:a4:
fb:53:22:28:92:7b:18:84:04:06:a4:c3:c4:7f:4c:
d7:8a:7d:24:e1:14:ab:8f:6f:4b:6a:bb:1c:ad:a3:
df:1f:e5:5e:e6:f8:21:55:f6:14:9f:d9:52:99:90:
b2:d6:0a:2d:bb:e5:79:1f:15:d5:97:f1:bd:49:93:
ce:4c:7e:f2:0b:83:a2:e6:65:5b:db:13:37:59:1f:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4A:76:8D:1D:23:AF:97:10:83:31:3E:7A:90:75:D1:B9:36:6D:28
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-0p2jR0jr5cQgzE-epB10bk2bSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0/22
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.192.0/19
87.107.226.0/23
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
19:31:df:4b:f3:eb:23:8e:50:1a:44:9e:4a:e9:89:3f:68:39:
d5:27:d5:d6:cf:9e:c9:85:26:3a:18:2a:af:20:75:59:1e:06:
ad:28:e5:ed:bd:c0:66:90:5e:44:5d:17:2b:41:66:df:8f:98:
3f:c3:2a:da:f6:77:34:f4:5e:05:7a:de:3a:93:90:8d:28:94:
3e:0c:aa:1a:0b:3e:0c:d3:3f:de:30:64:3c:b9:c2:37:47:da:
9e:82:e3:5a:25:be:cf:e4:74:68:5a:1b:32:ee:23:96:6d:ae:
22:15:d6:0c:30:cf:d1:56:6a:31:ec:77:26:d2:cd:1e:83:eb:
ab:bc:db:4f:f3:e2:31:20:e3:09:d0:09:81:9c:15:61:d9:65:
86:9c:ec:fc:c7:26:29:91:74:eb:ef:a1:d2:7e:b1:19:b3:6f:
ba:d5:ac:97:66:77:da:98:ca:d7:72:57:dc:87:87:28:0e:e3:
90:aa:bd:c7:16:14:29:6c:95:23:54:ac:88:fe:ab:18:a7:d5:
1e:ac:ed:9e:26:9f:ff:78:b4:6d:05:f7:3d:1a:de:30:c6:11:
3b:82:86:0f:ff:27:44:c5:01:13:ff:c9:44:ae:b3:35:e2:5b:
95:fc:2e:a1:da:5c:27:b1:6b:a7:72:2f:6c:9f:db:f1:5f:80:
d9:6f:05:0e
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAaAzMzBm4aUrwZ8izSmZ6DVvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwODI0MDk1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjRhNzY4ZDFkMjNhZjk3MTA4MzMxM2U3YTkwNzVkMWI5MzY2ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb6QMbDR6zlLryXm7Is83o/qHQgz
Nr9aTTsKCIkz/ZDNDk9FA1Sf94SgKgGIVdTNxPRmliN4YykLHHvbGb9c2nKjvIbi
kkgIVzGCvD+a/vLeF4mvnIozPPbadPqbZ++yCfltmk02TPM3Rguxp/3YLgmsCxiM
pD7wdjGmOEabs3WEwhloynv71V7vomcWhmmr363CSnNlBK96jcnfYL/Eh5BwCXOe
vYHaaOysez9NvHgZoaT7UyIoknsYhAQGpMPEf0zXin0k4RSrj29LarscraPfH+Ve
5vghVfYUn9lSmZCy1gotu+V5HxXVl/G9SZPOTH7yC4Oi5mVb2xM3WR9JiwIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFPtKdo0dI6+XEIMxPnqQddG5Nm0oMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMS0wcDJqUjBqcjVjUWd6RS1lcEIxMGJrMmJTZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjYvNjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgy
MS8xL0FIZGRsSEc0WFpZXzcyMG9OWkRpMlVMZFhDRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB2AYIKwYBBQUHAQcBAf8EgcgwgcUwgbMEAgABMIGsMAwD
BAU+3GADBAI+3GgDBAI+3HgwDAMEA1EMCAMEA1EMEAMEAlEMMAMEAVEMOgMEAVdr
DgMEAldrGAMEAVdrIgMEAldrKDAMAwQBV2syAwQBV2s0AwQCV2tEAwQCV2tYAwQC
V2tgAwQBV2tqMAwDBARXa3ADBAFXa3QwDAMEA1dreAMEA1drgAMEAldroAMEAldr
qAMEBVdrwAMEAVdr4gMEAFdr6AMEArk8iDANBAIAAjAHAwUAKgARmDANBgkqhkiG
9w0BAQsFAAOCAQEAGTHfS/PrI45QGkSeSumJP2g51SfV1s+eyYUmOhgqryB1WR4G
rSjl7b3AZpBeRF0XK0Fm34+YP8Mq2vZ3NPReBXreOpOQjSiUPgyqGgs+DNM/3jBk
PLnCN0fanoLjWiW+z+R0aFobMu4jlm2uIhXWDDDP0VZqMex3JtLNHoPrq7zbT/Pi
MSDjCdAJgZwVYdllhpzs/McmKZF06++h0n6xGbNvutWsl2Z32pjK13JX3IeHKA7j
kKq9xxYUKWyVI1SsiP6rGKfVHqztniaf/3i0bQX3PRreMMYRO4KGD/8nRMUBE//J
RK6zNeJblfwuodpcJ7Frp3IvbJ/b8V+A2W8FDg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:53 2026 by rpki-client