Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/RkXeViFUaKTJ7PonRrD-cEyeD_M.roa
File: RkXeViFUaKTJ7PonRrD-cEyeD_M.roa (raw, json)
Hash identifier: Vw+Zx3fteVZGkcI7Nw41ML0YB1LfUt0m/hr6mBYtEZs=
Subject key identifier: 46:45:DE:56:21:54:68:A4:C9:EC:FA:27:46:B0:FE:70:4C:9E:0F:F3
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A029D4833E9B1AD9F6F399631FF59AAD03
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/RkXeViFUaKTJ7PonRrD-cEyeD_M.roa
Signing time: Sat 22 Aug 2026 14:16:28 +0000
ROA not before: Sat 22 Aug 2026 14:16:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.128.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:d4:83:3e:9b:1a:d9:f6:f3:99:63:1f:f5:9a:ad:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 22 14:16:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4645de56215468a4c9ecfa2746b0fe704c9e0ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:58:45:db:e7:89:e3:6d:76:b6:f4:f0:01:
83:65:c1:e0:f8:45:e9:bb:8e:d5:9a:04:52:3d:36:
21:ca:0b:4e:66:0e:50:58:18:81:6f:77:f0:68:6b:
bc:66:c6:fb:13:79:05:9a:98:56:60:4c:2b:f3:6b:
96:b6:32:fa:2f:c7:04:42:c0:8e:c5:d5:60:c4:f7:
d6:33:18:10:73:b2:60:b8:d1:41:5d:36:87:fe:24:
9b:94:9b:20:67:68:ad:bb:7c:68:a6:5a:4b:ca:81:
69:da:f9:08:df:ad:bb:8b:3f:f7:07:dc:a9:6d:1a:
7a:63:85:23:bd:ca:94:cf:1d:f2:79:30:e1:87:1e:
da:88:a1:fd:3b:0a:57:ae:d6:9c:9a:22:96:47:eb:
3c:b5:8b:e6:4b:08:63:29:f8:8b:a5:0a:24:00:34:
91:c0:f4:3a:ce:16:53:c8:71:b2:7d:e5:1d:cb:1b:
ac:5a:f4:ec:5e:8a:cc:ce:e8:ef:20:85:01:78:1c:
d1:8b:13:00:b7:98:dd:1d:33:48:52:cb:f6:10:a2:
68:57:dd:c4:b1:ee:21:99:9a:8d:8d:d4:ae:b9:75:
66:35:7c:86:c8:22:69:8d:81:3c:b3:f9:19:fa:57:
89:b9:ff:f2:b5:dd:c4:1a:ce:85:86:49:cf:34:2d:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:DE:56:21:54:68:A4:C9:EC:FA:27:46:B0:FE:70:4C:9E:0F:F3
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/RkXeViFUaKTJ7PonRrD-cEyeD_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.128.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
10:aa:92:f9:50:de:d6:63:37:f6:38:d6:64:cd:db:3f:a2:ba:
97:88:05:40:8d:85:a8:d2:ed:59:53:83:89:cb:8f:c0:2f:e1:
f4:89:b1:56:77:c1:25:33:c4:3b:e6:3e:b3:2d:ed:df:d6:27:
b7:49:be:f4:e8:d8:e4:99:75:b4:b1:60:c8:a8:75:6c:b0:00:
af:5a:0e:99:e9:f0:89:ad:5f:70:32:a4:b9:eb:ef:b7:e7:a8:
39:d8:2f:a4:93:20:31:43:41:c4:6b:33:ef:3a:82:4a:5c:3c:
38:48:bf:e1:1a:2d:5f:1f:93:d1:b9:1f:7b:98:bd:c9:a0:3c:
8d:b0:ba:c7:83:fc:bf:c8:04:0d:a5:ae:3e:91:30:f7:13:29:
4d:5b:2b:23:d6:8e:2a:21:ac:f2:ff:5a:2d:1d:61:8b:45:0b:
04:a7:cf:f1:f5:9e:f4:24:11:2d:8c:3a:7e:a1:dc:9f:eb:6a:
eb:56:43:bb:07:53:8b:91:78:41:0c:72:aa:5d:99:99:a4:e3:
a9:e5:3e:c5:1a:e5:cd:29:5e:30:fd:c4:11:97:af:d0:ca:28:
d5:fd:b4:76:da:3c:08:b0:64:9c:68:7d:c0:41:03:46:88:75:
9a:77:3f:f9:cd:c6:19:92:0d:97:c3:23:cb:ff:c5:ab:7a:11:
ea:55:88:bd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAaAp1IM+mxrZ9vOZYx/1mq0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwODIyMTQxNjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjQ1ZGU1NjIxNTQ2OGE0YzllY2ZhMjc0NmIwZmU3MDRjOWUwZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFdYRdvnieNtdrb08AGDZcHg+EXp
u47VmgRSPTYhygtOZg5QWBiBb3fwaGu8Zsb7E3kFmphWYEwr82uWtjL6L8cEQsCO
xdVgxPfWMxgQc7JguNFBXTaH/iSblJsgZ2itu3xoplpLyoFp2vkI3627iz/3B9yp
bRp6Y4UjvcqUzx3yeTDhhx7aiKH9OwpXrtacmiKWR+s8tYvmSwhjKfiLpQokADSR
wPQ6zhZTyHGyfeUdyxusWvTsXorMzujvIIUBeBzRixMAt5jdHTNIUsv2EKJoV93E
se4hmZqNjdSuuXVmNXyGyCJpjYE8s/kZ+leJuf/ytd3EGs6FhknPNC3VEwIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFEZF3lYhVGikyez6J0aw/nBMng/zMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvUmtYZVZpRlVhS1RKN1BvblJyRC1jRXllRF9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIAATBLMAwDBAE+3HoD
BAc+3AADBAJRDBgDBAFRDB4wCwMDAFdrAwQBV2sIAwQCV2tsAwQCV2uAAwQAV2uQ
AwQBV2uYAwQBV2umAwQBV2uuMA0GCSqGSIb3DQEBCwUAA4IBAQAQqpL5UN7WYzf2
ONZkzds/orqXiAVAjYWo0u1ZU4OJy4/AL+H0ibFWd8ElM8Q75j6zLe3f1ie3Sb70
6NjkmXW0sWDIqHVssACvWg6Z6fCJrV9wMqS56++356g52C+kkyAxQ0HEazPvOoJK
XDw4SL/hGi1fH5PRuR97mL3JoDyNsLrHg/y/yAQNpa4+kTD3EylNWysj1o4qIazy
/1otHWGLRQsEp8/x9Z70JBEtjDp+odyf62rrVkO7B1OLkXhBDHKqXZmZpOOp5T7F
GuXNKV4w/cQRl6/QyijV/bR22jwIsGScaH3AQQNGiHWadz/5zcYZkg2XwyPL/8Wr
ehHqVYi9
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:53:08 2026 by rpki-client