Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/82eBAX_VUNcE4r66AbV-LOklSXw.roa
File: 82eBAX_VUNcE4r66AbV-LOklSXw.roa (raw, json)
Hash identifier: bD9kIy7TeYXfP2UP5lW7x+GauP5HJiaRZVEBsf9u5ic=
Subject key identifier: F3:67:81:01:7F:D5:50:D7:04:E2:BE:BA:01:B5:7E:2C:E9:25:49:7C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A029D48388D6371265B46474B275F6C7FB
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/82eBAX_VUNcE4r66AbV-LOklSXw.roa
Signing time: Sat 22 Aug 2026 14:16:28 +0000
ROA not before: Sat 22 Aug 2026 14:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215708
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/22 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/22 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/22 maxlen: 24
87.107.128.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:d4:83:88:d6:37:12:65:b4:64:74:b2:75:f6:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 22 14:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f36781017fd550d704e2beba01b57e2ce925497c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:13:90:6f:4d:28:59:40:fa:c4:71:4e:9b:
1b:3c:aa:36:d8:7d:05:4e:8f:21:96:1d:47:56:7a:
42:a4:dd:fb:61:19:51:11:73:58:3c:10:f8:da:91:
ec:a6:89:1f:cd:d2:1b:a2:c3:19:c4:66:33:74:4a:
4f:ed:9c:f4:c4:87:72:78:00:bc:c2:35:31:f2:a1:
47:d1:61:3e:f5:f4:5c:fc:2a:0c:51:89:09:40:96:
cf:c6:77:14:26:54:8e:13:ab:cd:62:51:65:f1:fd:
aa:0c:7d:10:97:e1:06:7d:35:65:c8:d1:ed:b9:44:
a6:9b:48:49:d2:53:f4:a4:c7:80:cc:45:18:03:6c:
4e:d3:c2:5b:5f:aa:c0:58:94:ad:68:de:0c:0c:bb:
0c:19:1f:cf:77:d3:89:84:87:39:5c:21:dc:2c:4f:
37:85:ba:a1:7d:60:c0:0e:43:42:a9:0f:19:66:73:
5c:e0:84:22:58:06:a7:4b:b5:c4:dc:c9:74:61:ca:
38:c4:a8:22:51:1b:25:cb:25:27:17:97:29:20:39:
fc:ab:4e:82:0a:c4:aa:86:ec:85:10:81:af:49:ae:
6d:a3:bd:29:63:bd:52:01:e7:7f:79:b2:ea:59:91:
26:3d:a8:d0:5e:70:ab:47:b1:a9:94:61:95:d1:16:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:81:01:7F:D5:50:D7:04:E2:BE:BA:01:B5:7E:2C:E9:25:49:7C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/82eBAX_VUNcE4r66AbV-LOklSXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.128.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:db:6a:0c:fc:9a:fa:87:97:93:af:e6:80:6c:ab:41:be:7e:
0d:0c:6b:6c:ee:21:72:27:2d:e8:ee:8c:11:d7:e6:64:bf:80:
3e:19:e0:cd:9e:7c:7e:23:bc:19:7a:07:43:25:e3:c8:35:b1:
08:32:42:68:ff:cd:e4:0c:ed:e8:14:42:3f:8f:7a:3a:dd:ef:
81:b9:b0:ac:94:7c:ad:9c:f8:d9:7b:df:78:49:6f:4b:3f:67:
33:36:ce:0e:50:5b:94:09:56:df:dc:a6:cc:31:92:d4:96:fb:
2e:bc:e7:5e:15:cd:59:b3:00:44:02:19:32:7c:af:d9:df:f1:
25:06:55:67:96:44:a1:05:d2:e8:de:d2:31:85:5c:41:2c:b6:
fd:ee:ff:cc:3f:43:79:26:72:49:e9:95:6a:c4:6e:e7:5a:0a:
12:c5:f7:91:e6:1b:1e:aa:94:65:7c:78:ec:36:ab:24:42:cc:
a1:77:3d:02:e0:57:7e:c4:d5:ab:21:75:ef:b1:54:67:bd:5b:
18:09:e5:76:0b:7b:ff:55:35:10:9f:4f:0b:52:f3:05:21:c1:
70:a1:a5:65:36:5c:5c:7b:72:3b:7a:15:15:69:7a:09:06:ff:
bd:39:fd:f8:1f:55:79:97:ee:e5:27:69:19:f0:bc:25:94:82:
59:07:9c:cc
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAaAp1IOI1jcSZbRkdLJ19sf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwODIyMTQxNjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzY3ODEwMTdmZDU1MGQ3MDRlMmJlYmEwMWI1N2UyY2U5MjU0OTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGcTkG9NKFlA+sRxTpsbPKo22H0F
To8hlh1HVnpCpN37YRlREXNYPBD42pHspokfzdIbosMZxGYzdEpP7Zz0xIdyeAC8
wjUx8qFH0WE+9fRc/CoMUYkJQJbPxncUJlSOE6vNYlFl8f2qDH0Ql+EGfTVlyNHt
uUSmm0hJ0lP0pMeAzEUYA2xO08JbX6rAWJStaN4MDLsMGR/Pd9OJhIc5XCHcLE83
hbqhfWDADkNCqQ8ZZnNc4IQiWAanS7XE3Ml0Yco4xKgiURslyyUnF5cpIDn8q06C
CsSqhuyFEIGvSa5to70pY71SAed/ebLqWZEmPajQXnCrR7GplGGV0RbeGQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFPNngQF/1VDXBOK+ugG1fizpJUl8MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvODJlQkFYX1ZVTmNFNHI2NkFiVi1MT2tsU1h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIAATBLMAwDBAE+3HoD
BAc+3AADBAJRDBgDBAFRDB4wCwMDAFdrAwQBV2sIAwQCV2tsAwQCV2uAAwQAV2uQ
AwQBV2uYAwQBV2umAwQBV2uuMA0GCSqGSIb3DQEBCwUAA4IBAQDQ22oM/Jr6h5eT
r+aAbKtBvn4NDGts7iFyJy3o7owR1+Zkv4A+GeDNnnx+I7wZegdDJePINbEIMkJo
/83kDO3oFEI/j3o63e+BubCslHytnPjZe994SW9LP2czNs4OUFuUCVbf3KbMMZLU
lvsuvOdeFc1ZswBEAhkyfK/Z3/ElBlVnlkShBdLo3tIxhVxBLLb97v/MP0N5JnJJ
6ZVqxG7nWgoSxfeR5hseqpRlfHjsNqskQsyhdz0C4Fd+xNWrIXXvsVRnvVsYCeV2
C3v/VTUQn08LUvMFIcFwoaVlNlxce3I7ehUVaXoJBv+9Of34H1V5l+7lJ2kZ8Lwl
lIJZB5zM
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:47 2026 by rpki-client