Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3NwXLAeAdSZZ_teO-TCpGJ1kLIY.roa
File: 3NwXLAeAdSZZ_teO-TCpGJ1kLIY.roa (raw, json)
Hash identifier: QEeCrNgqm1CcQFDcuhc3slj30+slxNsWINJXi0WUOqI=
Subject key identifier: DC:DC:17:2C:07:80:75:26:59:FE:D7:8E:F9:30:A9:18:9D:64:2C:86
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A033315C42D100A75ADF2FDA67C1D1E350
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3NwXLAeAdSZZ_teO-TCpGJ1kLIY.roa
Signing time: Mon 24 Aug 2026 09:54:27 +0000
ROA not before: Mon 24 Aug 2026 09:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 62.220.110.0/23 maxlen: 24
62.220.120.0/24 maxlen: 24
81.12.50.0/24 maxlen: 24
87.107.112.0/23 maxlen: 24
87.107.114.0/23 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.162.0/23 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/24 maxlen: 24
87.107.193.0/24 maxlen: 24
87.107.194.0/24 maxlen: 24
87.107.195.0/24 maxlen: 24
87.107.196.0/24 maxlen: 24
87.107.197.0/24 maxlen: 24
87.107.198.0/24 maxlen: 24
87.107.199.0/24 maxlen: 24
87.107.200.0/24 maxlen: 24
87.107.201.0/24 maxlen: 24
87.107.202.0/24 maxlen: 24
87.107.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:31:5c:42:d1:00:a7:5a:df:2f:da:67:c1:d1:e3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 24 09:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcdc172c0780752659fed78ef930a9189d642c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:2e:73:a1:04:ff:6e:0a:2b:90:f6:00:91:
44:04:c5:36:71:5f:7b:92:9b:8a:5a:90:c3:03:fc:
a0:7e:33:b2:b4:f2:dd:7c:f2:f7:ff:f5:62:a7:f9:
f8:83:71:20:ca:f4:cb:5f:87:23:7d:ad:d0:de:e0:
22:fa:99:75:9d:66:be:aa:85:b0:eb:06:a5:3b:9e:
ff:80:f6:c2:bf:e8:8c:fa:22:2d:39:da:fc:2f:9e:
97:6f:6f:01:dc:3d:ac:47:90:93:b9:bd:ea:10:6c:
8a:13:24:6a:7d:d9:77:0c:37:54:7c:96:1e:b4:c2:
7d:ef:0a:6d:e2:66:fc:0e:c2:f0:ba:6a:ff:09:45:
ce:3e:d4:d6:d0:01:e9:59:79:0f:b9:96:d9:60:77:
fd:84:b6:68:3b:86:39:13:72:46:c7:d3:5f:7c:9f:
5b:8d:e6:64:5c:c0:b0:3d:f6:64:2c:23:a9:bc:91:
6e:80:a6:11:5f:c6:28:41:75:50:99:46:d7:fc:4c:
c5:bc:a5:f4:38:09:b2:78:8a:c8:bc:57:92:49:71:
79:46:0a:d8:aa:90:52:43:83:cb:86:e9:77:a2:00:
37:6b:f2:94:42:d4:e4:0e:53:d6:f7:38:2b:f1:49:
e3:9b:c1:03:c3:0d:0f:16:b3:99:2b:a7:29:16:54:
f7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:17:2C:07:80:75:26:59:FE:D7:8E:F9:30:A9:18:9D:64:2C:86
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3NwXLAeAdSZZ_teO-TCpGJ1kLIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.110.0/23
62.220.120.0/24
81.12.50.0/24
87.107.112.0/22
87.107.160.0/22
87.107.168.0/22
87.107.192.0-87.107.202.255
87.107.206.0/23
Signature Algorithm: sha256WithRSAEncryption
90:e0:2c:41:16:0d:36:39:b5:dc:df:12:03:1c:6d:ad:68:54:
32:2b:7e:61:af:1f:49:2c:78:f0:eb:fe:41:81:e5:7b:96:a5:
10:0c:bb:54:77:70:fa:1e:5b:48:6b:b3:c0:4a:21:fa:f6:ff:
05:30:6d:62:41:c6:1c:30:53:9d:9c:1b:78:70:cf:de:a0:00:
c5:b7:8d:fc:07:88:6b:34:5e:4f:35:d7:86:01:19:fa:5c:1c:
9b:f5:5b:b9:9a:b5:5a:bf:62:f2:b7:03:28:df:92:10:17:3f:
56:2e:90:20:b9:db:78:f0:da:2a:4d:f0:d9:70:75:95:b5:b5:
ef:4c:aa:ed:22:4a:ba:34:bd:d6:aa:d2:5a:f1:88:dc:54:d2:
25:0c:6b:8a:b2:3b:ed:2a:b0:b8:aa:1f:54:31:4e:aa:03:c8:
38:2f:a5:78:a1:a9:f5:7e:4a:61:87:5c:fb:ad:f1:a0:b1:31:
45:b4:1f:23:6f:04:45:b4:46:12:b4:86:8e:19:a1:93:ab:c2:
68:6b:14:a7:25:df:67:0d:a7:d6:35:42:9e:da:b5:bb:97:b4:
82:b7:7c:54:2d:c1:25:12:cd:02:e2:f4:8a:b2:59:5e:fe:bc:
51:71:32:87:30:58:c1:73:6b:6d:61:f5:b5:cc:1f:d1:3e:99:
96:b7:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:46 2026 by rpki-client