Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VdZIqtEMpyg1cSKb7-f0MyduyN8.roa
File: VdZIqtEMpyg1cSKb7-f0MyduyN8.roa (raw, json)
Hash identifier: 81WcPkDN+dVwqdA9uVGmRmMrgZYJc3GrEtu6Fc/49mM=
Subject key identifier: 55:D6:48:AA:D1:0C:A7:28:35:71:22:9B:EF:E7:F4:33:27:6E:C8:DF
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A12A62B8972DDBB1DF192C2220CF36A407
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VdZIqtEMpyg1cSKb7-f0MyduyN8.roa
Signing time: Sun 11 Oct 2026 09:54:35 +0000
ROA not before: Sun 11 Oct 2026 09:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 24
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.226.0/23 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
2a00:1198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:62:b8:97:2d:db:b1:df:19:2c:22:20:cf:36:a4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 11 09:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55d648aad10ca7283571229befe7f433276ec8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:72:03:61:f6:0e:72:ae:b5:17:6e:3d:92:
15:59:a8:ae:19:15:3f:56:d7:99:04:c2:f6:e9:eb:
99:d9:ae:12:82:64:7d:aa:69:f8:17:85:75:bd:80:
19:2a:ea:2f:cb:63:2e:e2:44:dd:7f:d9:ad:5c:9b:
1c:0a:a3:7c:af:e1:1a:c1:77:e6:64:59:a8:c0:68:
4c:f0:fd:9b:a4:47:e8:c1:cf:cf:8a:8a:f9:b3:17:
1f:0c:2a:c9:43:44:78:57:e2:a8:26:e0:2f:05:bd:
90:86:d1:2a:60:1e:46:2f:50:76:19:4d:d8:09:6e:
9a:11:28:e5:f0:91:00:bc:20:f3:0d:71:60:4d:99:
f6:fe:b9:e8:30:b4:f7:ca:e9:16:ec:f1:bd:ff:e8:
a5:1c:26:d0:b5:45:c0:59:86:87:c2:ba:21:e7:2b:
46:8d:2b:e0:8f:32:33:e8:90:4f:21:b3:7f:d5:7f:
5e:26:95:20:18:1c:c6:b0:36:7e:51:52:53:98:30:
1f:ce:c0:73:b4:a4:da:64:ce:31:29:15:26:c3:23:
20:9b:af:42:8e:cd:84:28:b4:9b:f5:9e:05:2b:df:
1e:1e:3f:11:3b:15:83:85:7c:f7:f5:5a:30:3c:ba:
cc:78:92:e2:14:6f:33:bf:67:f5:86:78:7e:1e:cf:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:48:AA:D1:0C:A7:28:35:71:22:9B:EF:E7:F4:33:27:6E:C8:DF
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VdZIqtEMpyg1cSKb7-f0MyduyN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0/22
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.192.0/19
87.107.226.0/23
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
45:10:ad:da:62:44:86:f6:56:02:a7:bb:a8:1d:16:11:34:f5:
c7:c3:2c:7b:ed:ab:0c:8c:3a:0c:95:5c:d9:1f:91:d4:b7:df:
e8:ce:57:3e:33:ef:53:1a:9e:58:0c:f0:ca:08:2f:2c:5a:72:
b4:4c:3f:bb:db:88:07:26:78:ba:d3:a1:ab:a9:e1:ee:b0:d2:
3d:bb:78:68:81:b7:f6:af:be:7c:f6:d5:13:e7:b0:52:23:3d:
34:92:5e:66:1d:b1:97:ac:3d:e3:76:f3:8c:c0:ce:48:a8:3e:
97:79:1e:e5:bd:e9:74:45:8a:1d:12:57:92:7e:04:02:c5:55:
b2:f3:f6:9e:8b:f5:5d:55:18:c7:04:54:b9:02:75:96:fe:84:
20:14:a4:e6:f2:99:86:12:4b:e0:03:82:26:b4:28:7e:ee:79:
27:13:81:c5:9e:a5:66:73:5a:eb:c0:43:4a:f1:49:41:c5:b3:
74:e9:6b:09:97:06:6f:9a:05:15:5f:53:22:a3:38:a1:cb:8d:
2f:fd:a6:ff:64:9d:eb:93:7d:0f:95:88:54:03:d7:1d:c6:b0:
a0:04:01:05:ae:2e:d3:de:17:70:01:fd:4b:3a:c4:b3:fa:01:
ff:cd:9a:bd:2f:12:54:f8:50:65:b2:96:cb:51:53:1f:71:38:
9b:e1:0a:0f
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAaEqYriXLdux3xksIiDPNqQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYxMDExMDk1NDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWQ2NDhhYWQxMGNhNzI4MzU3MTIyOWJlZmU3ZjQzMzI3NmVjOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhxyA2H2DnKutRduPZIVWaiuGRU/
VteZBML26euZ2a4SgmR9qmn4F4V1vYAZKuovy2Mu4kTdf9mtXJscCqN8r+EawXfm
ZFmowGhM8P2bpEfowc/Pior5sxcfDCrJQ0R4V+KoJuAvBb2QhtEqYB5GL1B2GU3Y
CW6aESjl8JEAvCDzDXFgTZn2/rnoMLT3yukW7PG9/+ilHCbQtUXAWYaHwroh5ytG
jSvgjzIz6JBPIbN/1X9eJpUgGBzGsDZ+UVJTmDAfzsBztKTaZM4xKRUmwyMgm69C
js2EKLSb9Z4FK98eHj8ROxWDhXz39VowPLrMeJLiFG8zv2f1hnh+Hs/86wIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFFXWSKrRDKcoNXEim+/n9DMnbsjfMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvVmRaSXF0RU1weWcxY1NLYjctZjBNeWR1eU44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHYBggrBgEFBQcBBwEB/wSByDCBxTCBswQCAAEwgawwDAME
BT7cYAMEAj7caAMEAj7ceDAMAwQDUQwIAwQDUQwQAwQCUQwwAwQBUQw6AwQBV2sO
AwQCV2sYAwQBV2siAwQCV2soMAwDBAFXazIDBAFXazQDBAJXa0QDBAJXa1gDBAJX
a2ADBAFXa2owDAMEBFdrcAMEAVdrdDAMAwQDV2t4AwQDV2uAAwQCV2ugAwQCV2uo
AwQFV2vAAwQBV2viAwQAV2voAwQCuTyIMA0EAgACMAcDBQAqABGYMA0GCSqGSIb3
DQEBCwUAA4IBAQBFEK3aYkSG9lYCp7uoHRYRNPXHwyx77asMjDoMlVzZH5HUt9/o
zlc+M+9TGp5YDPDKCC8sWnK0TD+724gHJni606GrqeHusNI9u3hogbf2r7589tUT
57BSIz00kl5mHbGXrD3jdvOMwM5IqD6XeR7lvel0RYodEleSfgQCxVWy8/aei/Vd
VRjHBFS5AnWW/oQgFKTm8pmGEkvgA4ImtCh+7nknE4HFnqVmc1rrwENK8UlBxbN0
6WsJlwZvmgUVX1Miozihy40v/ab/ZJ3rk30PlYhUA9cdxrCgBAEFri7T3hdwAf1L
OsSz+gH/zZq9LxJU+FBlspbLUVMfcTib4QoP
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:50:58 2026 by rpki-client