Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-DL57ey4b5P-0ZRPdr0UVvnPk80.roa
File: 1-DL57ey4b5P-0ZRPdr0UVvnPk80.roa (raw, json)
Hash identifier: YrPhKSB5Jx1E5xVOobBVA1CnJgFROZxyTh0IfN5aYlY=
Subject key identifier: F8:32:F9:ED:EC:B8:6F:93:FE:D1:94:4F:76:BD:14:56:F9:CF:93:CD
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A029D56C764CBA393698C7192EC4BADF74
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-DL57ey4b5P-0ZRPdr0UVvnPk80.roa
Signing time: Sat 22 Aug 2026 14:17:27 +0000
ROA not before: Sat 22 Aug 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51026
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/23 maxlen: 24
62.220.126.0/24 maxlen: 24
62.220.127.0/24 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.24.0/24 maxlen: 24
81.12.25.0/24 maxlen: 24
81.12.26.0/24 maxlen: 24
81.12.27.0/24 maxlen: 24
81.12.30.0/24 maxlen: 24
81.12.31.0/24 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.128.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/24 maxlen: 24
87.107.153.0/24 maxlen: 24
87.107.166.0/24 maxlen: 24
87.107.167.0/24 maxlen: 24
87.107.174.0/24 maxlen: 24
87.107.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:d5:6c:76:4c:ba:39:36:98:c7:19:2e:c4:ba:df:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 22 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f832f9edecb86f93fed1944f76bd1456f9cf93cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:c2:c2:58:e8:8d:ea:1e:98:fb:05:cd:4e:
74:a8:e8:fd:e5:cb:b7:26:38:d8:5c:21:f9:9d:81:
b7:3c:ab:aa:c5:2b:36:e6:48:6b:58:7d:53:c7:0b:
8d:47:91:94:46:d2:33:9d:11:34:4e:92:8c:29:b6:
50:30:34:68:bc:0c:1d:db:3d:19:f3:84:e9:94:fa:
54:08:a9:4a:c4:0c:73:fe:2e:e8:22:1c:ec:ed:fc:
2f:7d:5e:c8:25:6d:10:f9:70:05:7a:f5:59:f2:9a:
86:f9:97:fa:d0:5f:e5:d1:07:5b:37:dd:dc:f7:b2:
0d:a6:0d:3a:ef:88:bf:db:1c:ac:61:0c:d6:60:5f:
70:6e:7b:23:bf:3d:26:11:29:87:3a:a0:06:98:02:
7d:aa:97:51:dc:f6:4c:97:f6:ec:79:2b:ab:c6:f6:
17:75:7a:38:c8:2c:02:92:26:25:6a:bf:5c:3a:a8:
8c:f1:2b:3a:af:80:33:a1:68:fe:c4:30:f8:40:86:
4b:c2:91:2b:fc:48:4a:f4:3e:b3:86:2d:4c:04:17:
bc:01:9a:53:1a:f5:47:6e:dd:8a:ce:ea:40:44:4a:
d7:de:ea:36:8d:d0:77:16:5d:67:5c:cb:86:2e:87:
60:06:ef:3b:2c:87:57:d4:9a:eb:1f:10:45:5d:5d:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:F9:ED:EC:B8:6F:93:FE:D1:94:4F:76:BD:14:56:F9:CF:93:CD
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-DL57ey4b5P-0ZRPdr0UVvnPk80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.128.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
73:bc:47:7a:78:c8:f4:cf:38:39:e9:39:4f:26:bd:c8:02:6c:
f7:27:47:3d:dd:27:74:2c:f0:37:50:1f:e4:5f:c9:1c:27:4f:
14:f8:ba:86:9c:c0:59:76:9a:99:07:20:cc:07:d1:da:c7:d6:
7a:eb:d3:b8:e1:7c:5e:2a:d7:54:70:60:a5:c2:a9:07:cb:f9:
3f:37:55:4b:02:ec:c5:b1:c7:d6:cf:8e:a0:96:47:85:e5:c4:
e5:bf:73:0c:9d:74:7e:7f:f4:54:cc:4d:ca:d9:0f:af:04:ed:
15:08:9d:3c:0a:b5:cd:cd:29:fd:8e:9d:40:3a:0e:c7:31:e5:
34:80:00:8b:81:92:b4:80:5c:c5:db:47:43:d8:ba:7d:62:0f:
a7:90:bf:fb:cb:3b:b0:30:0f:a8:ed:c9:f8:15:8f:c1:89:b1:
91:8b:92:c7:8b:4d:9b:45:2e:ad:87:1d:8a:c1:6c:ea:f3:52:
da:fe:20:49:1b:7e:bf:d3:c6:10:00:42:29:c7:51:57:b0:2a:
6e:5d:dc:ce:a1:04:60:3c:45:17:ea:1a:19:df:bb:8b:3b:f7:
68:4e:16:27:0d:f7:24:71:0d:12:2b:89:f4:d6:1e:da:dc:04:
ff:15:40:0e:ee:34:3c:0c:a1:e7:b0:a7:61:b0:f5:15:7a:c0:
77:f4:0d:00
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAaAp1Wx2TLo5NpjHGS7Eut90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwODIyMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODMyZjllZGVjYjg2ZjkzZmVkMTk0NGY3NmJkMTQ1NmY5Y2Y5M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGbCwljojeoemPsFzU50qOj95cu3
JjjYXCH5nYG3PKuqxSs25khrWH1TxwuNR5GURtIznRE0TpKMKbZQMDRovAwd2z0Z
84TplPpUCKlKxAxz/i7oIhzs7fwvfV7IJW0Q+XAFevVZ8pqG+Zf60F/l0QdbN93c
97INpg0674i/2xysYQzWYF9wbnsjvz0mESmHOqAGmAJ9qpdR3PZMl/bseSurxvYX
dXo4yCwCkiYlar9cOqiM8Ss6r4AzoWj+xDD4QIZLwpEr/EhK9D6zhi1MBBe8AZpT
GvVHbt2KzupARErX3uo2jdB3Fl1nXMuGLodgBu87LIdX1JrrHxBFXV2lnQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFPgy+e3suG+T/tGUT3a9FFb5z5PNMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMS1ETDU3ZXk0YjVQLTBaUlBkcjBVVnZuUGs4MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjYvNjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgy
MS8xL0FIZGRsSEc0WFpZXzcyMG9OWkRpMlVMZFhDRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBkBggrBgEFBQcBBwEB/wRVMFMwUQQCAAEwSzAMAwQBPtx6
AwQHPtwAAwQCUQwYAwQBUQweMAsDAwBXawMEAVdrCAMEAldrbAMEAldrgAMEAFdr
kAMEAVdrmAMEAVdrpgMEAVdrrjANBgkqhkiG9w0BAQsFAAOCAQEAc7xHenjI9M84
Oek5Tya9yAJs9ydHPd0ndCzwN1Af5F/JHCdPFPi6hpzAWXaamQcgzAfR2sfWeuvT
uOF8XirXVHBgpcKpB8v5PzdVSwLsxbHH1s+OoJZHheXE5b9zDJ10fn/0VMxNytkP
rwTtFQidPAq1zc0p/Y6dQDoOxzHlNIAAi4GStIBcxdtHQ9i6fWIPp5C/+8s7sDAP
qO3J+BWPwYmxkYuSx4tNm0UurYcdisFs6vNS2v4gSRt+v9PGEABCKcdRV7Aqbl3c
zqEEYDxFF+oaGd+7izv3aE4WJw33JHENEiuJ9NYe2twE/xVADu40PAyh57CnYbD1
FXrAd/QNAA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:48 2026 by rpki-client