Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/28gB34aTrv6mDek7Dm0lUmimarw.roa
File: 28gB34aTrv6mDek7Dm0lUmimarw.roa (raw, json)
Hash identifier: YeAmZFCcZRtDJFj0Ao0aGhYC1JfE2gPrnwL80e4Ubi0=
Subject key identifier: DB:C8:01:DF:86:93:AE:FE:A6:0D:E9:3B:0E:6D:25:52:68:A6:6A:BC
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0333245F4B0A2AC83EB071DFC702452D7
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/28gB34aTrv6mDek7Dm0lUmimarw.roa
Signing time: Mon 24 Aug 2026 09:55:27 +0000
ROA not before: Mon 24 Aug 2026 09:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24631
IP address blocks: 62.220.97.0/24 maxlen: 24
62.220.102.0/24 maxlen: 24
87.107.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:32:45:f4:b0:a2:ac:83:eb:07:1d:fc:70:24:52:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 24 09:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbc801df8693aefea60de93b0e6d255268a66abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:c5:f8:a5:5c:cf:0f:92:50:5a:47:7b:2b:
12:a2:58:77:c5:23:8e:63:fa:43:7a:12:b1:00:37:
d1:e2:95:57:7d:7d:51:7d:6b:62:70:ab:dc:0c:ab:
bc:04:7a:dd:0d:95:70:9d:11:e8:ab:b4:52:2d:4d:
51:85:e0:35:be:90:81:7d:16:f6:08:05:f9:e7:3f:
29:2e:87:41:8c:23:59:34:b1:70:a3:0a:45:0c:e8:
f5:c3:b2:7c:bd:18:89:f6:95:8e:f5:9f:7d:53:78:
63:0a:7a:7c:cd:44:66:8a:d9:99:a5:b8:89:55:b9:
95:0f:37:9c:e7:95:45:00:5b:e4:19:4a:52:72:65:
17:11:9a:fb:85:8c:a4:c2:ab:a6:65:37:fa:4d:6b:
47:65:ac:9a:71:d9:91:61:f3:30:02:d3:db:5a:05:
b0:9c:67:f0:a2:80:63:cf:4d:f2:e8:49:c6:4b:1a:
b7:bd:03:f2:12:72:26:34:c2:75:2f:b3:d6:5f:31:
61:00:63:a9:90:b8:d4:8c:1b:15:a0:dd:5e:28:3d:
a3:82:f4:0b:90:b7:b9:c3:14:c2:40:03:ed:2f:c3:
12:43:90:3d:09:56:12:d0:6d:fb:c9:bd:41:13:fb:
aa:27:17:7a:e3:27:fb:95:d5:42:47:f3:9d:38:2b:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C8:01:DF:86:93:AE:FE:A6:0D:E9:3B:0E:6D:25:52:68:A6:6A:BC
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/28gB34aTrv6mDek7Dm0lUmimarw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.97.0/24
62.220.102.0/24
87.107.102.0/24
Signature Algorithm: sha256WithRSAEncryption
04:90:22:96:d1:84:2a:a6:d8:7f:fa:c2:86:7f:4d:bb:11:4c:
47:a4:3b:8c:06:36:0e:f9:1f:5d:81:36:5d:2e:8d:74:ff:62:
83:cc:57:cb:a9:3d:57:5c:8f:cd:8c:05:b7:8e:04:bd:4d:27:
af:86:c8:4b:79:12:b4:08:9c:1f:51:47:79:1e:8d:48:30:57:
38:33:07:01:fb:1f:da:09:0f:05:e2:ba:5c:79:e6:c0:97:39:
b5:68:fc:73:d4:5b:46:b7:aa:44:ad:ad:d6:e1:48:a2:7c:a7:
49:d4:11:1a:23:b3:a1:0b:5d:a1:75:71:2d:35:76:0b:23:93:
ac:ee:fb:a1:f0:3d:e6:70:bd:0c:7d:0f:20:6d:f3:c7:df:cf:
cf:ca:e9:7a:da:89:46:c6:e8:bf:b8:02:7b:0c:05:c0:57:5b:
14:28:e5:89:23:5d:3e:f4:6b:ee:10:e0:07:f2:77:e6:95:23:
a0:fa:f4:a7:86:d0:67:ee:b7:4c:dc:8a:25:30:50:c6:3d:c7:
77:fc:02:74:77:08:47:2a:2e:24:13:da:ad:36:dc:6a:47:ee:
77:c2:87:03:bf:a5:75:22:b0:2f:75:3a:3c:d7:61:f4:f8:a3:
60:4f:b3:54:e5:02:13:0d:32:96:47:cc:db:3b:e4:a3:d1:4e:
66:f5:4f:f0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAzMkX0sKKsg+sHHfxwJFLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwODI0MDk1NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmM4MDFkZjg2OTNhZWZlYTYwZGU5M2IwZTZkMjU1MjY4YTY2YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+/F+KVczw+SUFpHeysSolh3xSOO
Y/pDehKxADfR4pVXfX1RfWticKvcDKu8BHrdDZVwnRHoq7RSLU1RheA1vpCBfRb2
CAX55z8pLodBjCNZNLFwowpFDOj1w7J8vRiJ9pWO9Z99U3hjCnp8zURmitmZpbiJ
VbmVDzec55VFAFvkGUpScmUXEZr7hYykwqumZTf6TWtHZayacdmRYfMwAtPbWgWw
nGfwooBjz03y6EnGSxq3vQPyEnImNMJ1L7PWXzFhAGOpkLjUjBsVoN1eKD2jgvQL
kLe5wxTCQAPtL8MSQ5A9CVYS0G37yb1BE/uqJxd64yf7ldVCR/OdOCujGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNvIAd+Gk67+pg3pOw5tJVJopmq8MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMjhnQjM0YVRydjZtRGVrN0RtMGxVbWltYXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPtxhAwQA
PtxmAwQAV2tmMA0GCSqGSIb3DQEBCwUAA4IBAQAEkCKW0YQqpth/+sKGf027EUxH
pDuMBjYO+R9dgTZdLo10/2KDzFfLqT1XXI/NjAW3jgS9TSevhshLeRK0CJwfUUd5
Ho1IMFc4MwcB+x/aCQ8F4rpceebAlzm1aPxz1FtGt6pEra3W4UiifKdJ1BEaI7Oh
C12hdXEtNXYLI5Os7vuh8D3mcL0MfQ8gbfPH38/Pyul62olGxui/uAJ7DAXAV1sU
KOWJI10+9GvuEOAH8nfmlSOg+vSnhtBn7rdM3IolMFDGPcd3/AJ0dwhHKi4kE9qt
NtxqR+53wocDv6V1IrAvdTo812H0+KNgT7NU5QITDTKWR8zbO+Sj0U5m9U/w
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:46 2026 by rpki-client