Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/4x9ATVhlQy_d4vnJU8YLq5F2JLE.roa
File: 4x9ATVhlQy_d4vnJU8YLq5F2JLE.roa (raw, json)
Hash identifier: m6+hTnpwqmJd7U0/MrKt1IYcKX71P/JlVsJHynkyF5M=
Subject key identifier: E3:1F:40:4D:58:65:43:2F:DD:E2:F9:C9:53:C6:0B:AB:91:76:24:B1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A1119C1C560DCE6A7AFD4FC9F09285971B
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/4x9ATVhlQy_d4vnJU8YLq5F2JLE.roa
Signing time: Tue 06 Oct 2026 14:26:45 +0000
ROA not before: Tue 06 Oct 2026 14:26:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 62.220.110.0/23 maxlen: 24
62.220.120.0/24 maxlen: 24
62.220.121.0/24 maxlen: 24
81.12.50.0/24 maxlen: 24
87.107.112.0/23 maxlen: 24
87.107.114.0/23 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.162.0/23 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.169.0/24 maxlen: 24
87.107.192.0/24 maxlen: 24
87.107.193.0/24 maxlen: 24
87.107.194.0/24 maxlen: 24
87.107.195.0/24 maxlen: 24
87.107.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:9c:1c:56:0d:ce:6a:7a:fd:4f:c9:f0:92:85:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 6 14:26:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e31f404d5865432fdde2f9c953c60bab917624b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:df:a6:3f:cc:db:89:24:39:b7:a9:a7:b0:
7c:af:e2:56:98:55:ff:4a:24:5a:7f:68:7d:59:a8:
b0:a0:b2:a5:17:d0:2c:51:4e:6f:8c:ec:6b:f6:f9:
9f:63:87:79:d2:c6:48:05:2b:77:00:53:83:15:bd:
9a:b3:81:db:7a:93:d6:a6:3a:39:e0:38:36:0c:ee:
be:2a:da:a9:b6:98:e1:94:fa:e1:7d:44:a6:a4:f3:
1e:ae:f7:bc:45:64:6a:3c:31:0a:9d:57:be:1b:1c:
a0:7b:28:94:f0:e3:e1:60:9f:23:36:24:26:8d:bf:
76:5d:a0:c1:0f:dc:39:05:d7:5e:b0:f4:37:44:0b:
88:8e:d2:f1:87:79:dd:82:6f:5d:38:02:00:c6:a4:
f7:8c:d2:19:93:94:aa:de:46:a3:c3:a1:74:9a:88:
ad:a3:4c:55:3a:df:ec:c9:54:16:b8:95:0f:fd:20:
c6:6a:33:1e:bb:3e:6b:ab:9a:46:f6:85:24:b6:3c:
11:cc:10:1c:a9:35:2b:65:99:b0:24:8e:77:5f:21:
59:6d:b6:bf:ab:d2:1e:24:4c:83:9e:df:cc:73:6e:
94:fb:60:0c:11:af:e5:9c:69:74:9d:49:dc:41:af:
4a:18:da:4d:f2:b4:0d:e4:e4:1d:a9:fe:81:71:57:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:40:4D:58:65:43:2F:DD:E2:F9:C9:53:C6:0B:AB:91:76:24:B1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/4x9ATVhlQy_d4vnJU8YLq5F2JLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.110.0/23
62.220.120.0/23
81.12.50.0/24
87.107.112.0/22
87.107.160.0/22
87.107.168.0/22
87.107.192.0/22
87.107.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:7e:83:5b:4c:7e:62:d1:b8:c7:75:bb:da:6a:93:67:01:33:
fb:bd:06:10:35:05:82:e6:f7:ba:ab:b8:39:6f:d6:96:c4:1d:
a8:a9:a6:53:af:93:52:15:2e:dd:3e:92:81:ec:e4:58:45:6f:
8e:b0:c2:26:3e:85:d4:86:57:e5:4b:1e:0f:e8:71:13:d9:70:
b2:39:bb:3c:d1:ec:20:68:96:89:f8:9f:95:53:3d:60:6e:d2:
58:25:ba:8c:61:d9:45:a0:5a:44:ef:b0:3a:76:96:cc:4b:32:
87:0c:d7:a7:c4:23:8b:ee:f5:e0:bc:ee:09:6b:51:97:99:30:
e6:07:89:24:52:fb:f8:9c:bc:eb:03:28:29:15:4c:da:cc:8c:
73:6d:47:72:76:28:9e:c1:35:29:2e:98:e7:8a:fd:5c:95:a4:
09:94:8e:df:b3:6c:90:a4:71:e7:5f:f9:4e:7c:57:28:a0:1f:
39:97:99:ce:7f:c3:26:53:35:74:e7:85:ef:6a:0b:83:84:93:
71:54:a6:9a:7a:7b:8a:c6:4d:e1:3c:b1:e9:bc:22:4d:a6:b3:
43:6e:e5:d9:96:24:22:52:9c:8a:64:b9:22:41:fe:ae:b0:84:
ea:88:84:3c:25:db:a1:19:0a:ab:54:22:59:ef:58:b2:25:82:
26:b9:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:56 2026 by rpki-client