Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2HQJqwp-76B50uxm76W3VPLKZh0.roa
File: 2HQJqwp-76B50uxm76W3VPLKZh0.roa (raw, json)
Hash identifier: qiH0EOEdIDzNe+wNuC7283bKa5hbn79arcojbW8y4hw=
Subject key identifier: D8:74:09:AB:0A:7E:EF:A0:79:D2:EC:66:EF:A5:B7:54:F2:CA:66:1D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019E8321BE3B53B5FD24C07EC178B0A72CF3
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2HQJqwp-76B50uxm76W3VPLKZh0.roa
Signing time: Mon 01 Jun 2026 12:21:27 +0000
ROA not before: Mon 01 Jun 2026 12:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 62.220.112.0/21 maxlen: 21
62.220.113.0/24 maxlen: 24
62.220.116.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
81.12.0.0/21 maxlen: 24
81.12.32.0/21 maxlen: 24
81.12.40.0/21 maxlen: 24
81.12.44.0/24 maxlen: 24
81.12.54.0/23 maxlen: 24
81.12.56.0/23 maxlen: 24
81.12.60.0/22 maxlen: 24
81.12.64.0/18 maxlen: 24
81.12.95.0/24 maxlen: 24
87.107.16.0/21 maxlen: 24
87.107.28.0/22 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 24
87.107.44.0/22 maxlen: 24
87.107.48.0/23 maxlen: 23
87.107.56.0/21 maxlen: 24
87.107.64.0/22 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.80.0/21 maxlen: 24
87.107.92.0/22 maxlen: 24
87.107.100.0/22 maxlen: 24
87.107.136.0/21 maxlen: 24
87.107.148.0/22 maxlen: 24
87.107.156.0/22 maxlen: 24
87.107.176.0/21 maxlen: 24
87.107.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:21:be:3b:53:b5:fd:24:c0:7e:c1:78:b0:a7:2c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 1 12:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d87409ab0a7eefa079d2ec66efa5b754f2ca661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:3d:2e:7d:02:11:0b:e2:07:2c:c3:b5:18:
d3:a3:ec:ec:d7:f8:45:8f:a4:15:ad:1c:77:d5:8f:
92:f3:e4:2e:6e:dc:24:02:16:f0:c6:6d:d7:ca:70:
78:cd:72:77:63:9a:ca:14:08:2a:bb:a3:17:de:ab:
8e:1c:7c:81:b0:bb:d6:56:d9:64:84:35:47:e6:94:
8b:1b:df:a8:69:10:66:9c:1c:cf:1c:f0:40:24:40:
c5:89:10:9f:ef:2b:4c:09:83:86:9e:12:d0:3f:c2:
dd:95:19:53:8e:7a:6b:6d:ee:7e:fd:de:be:2e:e8:
2f:79:72:c0:d2:31:ca:01:58:10:49:90:aa:39:ff:
44:e7:43:be:98:22:28:8b:78:23:7c:34:cb:a0:e5:
fd:cb:9a:76:00:99:0b:f5:1a:5f:b5:b1:c8:7b:5a:
26:d4:69:f0:f2:7d:43:97:01:85:e6:ea:6b:aa:82:
9c:12:14:b0:ae:1e:a8:37:4e:53:b9:f7:d8:57:31:
6a:bc:23:4c:e1:fd:0e:f0:51:3e:34:e0:8c:e6:dd:
bd:3b:45:71:eb:e6:ec:99:b7:21:36:db:05:3c:00:
ff:b6:d9:5d:f4:be:79:0b:42:2b:7f:e5:33:e4:2d:
8b:ef:f7:cf:d7:43:57:cb:8c:5d:4a:d3:fa:6c:0a:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:09:AB:0A:7E:EF:A0:79:D2:EC:66:EF:A5:B7:54:F2:CA:66:1D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/2HQJqwp-76B50uxm76W3VPLKZh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.56.0-87.107.67.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0/22
87.107.136.0/21
87.107.148.0/22
87.107.156.0/22
87.107.176.0-87.107.187.255
Signature Algorithm: sha256WithRSAEncryption
74:16:87:1a:dd:03:d3:61:27:ed:0b:e0:26:51:79:cf:40:20:
e6:c2:23:eb:6e:2a:ec:c3:87:6a:df:63:77:86:68:48:16:af:
ca:67:de:d9:f5:af:be:a0:52:f0:22:36:97:9c:2b:09:9d:c9:
c6:e2:b1:55:7c:1d:1b:cb:06:9e:d8:75:08:fb:d5:bc:6c:e1:
56:93:7a:e4:83:21:7a:85:4d:59:df:10:a2:c1:29:7d:c9:b9:
f3:a3:a2:8e:9f:6a:34:00:b9:98:d6:09:79:48:d0:57:d1:ca:
3d:f1:d0:c4:d1:cc:90:a5:e9:99:c1:40:b7:28:24:12:f9:7d:
2d:32:df:53:96:c3:20:01:77:90:37:3d:a5:f7:d5:8e:00:cb:
67:45:1f:67:c1:af:8d:34:1b:e2:ed:d4:bc:b4:89:81:b1:aa:
01:43:8f:3b:77:75:5a:50:82:d0:23:0a:95:c7:c2:8a:47:f0:
6f:70:af:d4:b5:c5:65:f4:bc:5f:2f:1b:25:74:80:d7:68:74:
0c:3a:87:9e:60:d8:a6:6d:80:60:9c:53:31:03:f7:59:aa:1a:
ff:76:8d:d3:d0:ca:48:c9:2d:6b:65:64:94:9b:5e:7d:a8:4f:
45:98:8f:b9:2c:45:1f:fb:1f:04:bc:83:f1:0a:26:94:e9:20:
6b:71:d0:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:09:16 2026 by rpki-client