Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bClycj24ebnHfZHbBxxa0rmGQMU.roa
File: bClycj24ebnHfZHbBxxa0rmGQMU.roa (raw, json)
Hash identifier: qNeGiEeZDyo9T4nYsXS23nJ2FciLqHm7aGO2sDhrhNs=
Subject key identifier: 6C:29:72:72:3D:B8:79:B9:C7:7D:91:DB:07:1C:5A:D2:B9:86:40:C5
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A01055B65FC33DCBCFA0DE58BFF092C609
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bClycj24ebnHfZHbBxxa0rmGQMU.roa
Signing time: Mon 17 Aug 2026 15:27:27 +0000
ROA not before: Mon 17 Aug 2026 15:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 81.12.54.0/24 maxlen: 24
81.12.56.0/24 maxlen: 24
87.107.81.0/24 maxlen: 24
87.107.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:55:b6:5f:c3:3d:cb:cf:a0:de:58:bf:f0:92:c6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 17 15:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2972723db879b9c77d91db071c5ad2b98640c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:ef:09:44:e1:3a:43:77:9b:98:3c:37:51:
9a:39:2a:b4:3d:7b:89:c7:65:86:ff:00:28:4a:be:
10:3a:4f:d1:b9:3c:85:3f:45:0a:b7:67:e6:ac:79:
43:9b:6d:8f:67:cf:00:93:bc:96:cf:75:04:cb:61:
f3:de:e1:d8:88:cf:8f:ac:51:98:eb:58:12:4e:08:
a0:ad:ee:6c:6a:90:7e:50:23:c2:6a:e4:47:68:ee:
48:18:30:c2:c6:a0:35:f5:d9:5a:34:82:21:63:24:
09:ca:4f:9c:59:bf:28:e4:6e:a2:5c:d0:b5:29:e6:
e2:4d:93:b5:51:5a:29:70:a3:ca:a5:23:d4:dd:38:
88:7a:74:d1:ab:90:6e:0f:96:37:1e:28:48:8b:30:
b4:42:4e:f6:8b:58:02:e3:e7:5d:1d:99:ed:98:91:
fa:1e:f1:7b:c1:d0:5a:1b:89:06:e7:8b:41:13:f2:
f3:7d:9e:68:4a:75:84:da:7f:36:0b:a3:cd:59:4f:
76:a5:39:ce:ce:49:a4:6a:21:18:a0:9f:36:f4:a1:
b6:3f:65:b3:c1:01:ab:a0:b4:28:98:b9:33:fc:31:
7e:7a:94:4d:76:26:a7:e9:92:4a:7e:61:de:05:ca:
be:bf:1a:60:52:45:22:96:df:fe:da:5c:4c:80:65:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:29:72:72:3D:B8:79:B9:C7:7D:91:DB:07:1C:5A:D2:B9:86:40:C5
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/bClycj24ebnHfZHbBxxa0rmGQMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.54.0/24
81.12.56.0/24
87.107.81.0-87.107.83.255
Signature Algorithm: sha256WithRSAEncryption
5e:56:08:67:cd:bc:ad:f8:2c:14:de:bc:40:83:9f:19:b3:25:
26:ae:3d:e9:96:78:e9:f5:f7:d5:3e:19:75:b8:38:1e:4e:2a:
66:a3:d6:be:b2:9e:38:c7:4c:0a:33:62:d2:77:9e:2a:1f:ef:
e8:7d:de:78:eb:11:77:68:cb:d8:d7:96:78:71:04:44:67:fa:
90:f5:a2:3b:3c:bd:63:eb:9e:2e:f8:e6:2b:88:a6:95:26:96:
6b:2e:81:51:a4:a8:ec:2e:53:5c:26:34:78:25:52:ce:9a:ff:
e6:16:0e:57:64:91:e8:c0:5b:3b:11:1f:43:49:9f:08:d0:a6:
e0:d3:9b:ce:a6:ac:1e:61:b0:1c:7e:76:51:a1:f0:de:c6:e2:
7d:b5:c9:8d:6f:fd:1b:0e:cc:99:82:28:78:54:5b:32:b6:dc:
bb:2e:36:97:27:7a:81:88:63:25:de:6d:da:75:cc:aa:0d:a7:
7d:c8:65:22:a2:9d:59:88:14:70:65:f4:76:56:fa:f9:38:b8:
35:c9:aa:01:bb:ac:f4:e3:e0:51:50:3b:35:ef:3c:dc:cd:34:
56:95:33:0c:ff:7b:18:a0:78:44:53:1c:69:82:51:9c:a5:36:
dc:9a:d2:42:07:83:96:22:f0:0b:bc:e6:f3:e6:94:fa:67:06:
50:25:bd:99
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaAQVbZfwz3Lz6DeWL/wksYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwODE3MTUyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzI5NzI3MjNkYjg3OWI5Yzc3ZDkxZGIwNzFjNWFkMmI5ODY0MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAPvCUThOkN3m5g8N1GaOSq0PXuJ
x2WG/wAoSr4QOk/RuTyFP0UKt2fmrHlDm22PZ88Ak7yWz3UEy2Hz3uHYiM+PrFGY
61gSTgigre5sapB+UCPCauRHaO5IGDDCxqA19dlaNIIhYyQJyk+cWb8o5G6iXNC1
KebiTZO1UVopcKPKpSPU3TiIenTRq5BuD5Y3HihIizC0Qk72i1gC4+ddHZntmJH6
HvF7wdBaG4kG54tBE/LzfZ5oSnWE2n82C6PNWU92pTnOzkmkaiEYoJ829KG2P2Wz
wQGroLQomLkz/DF+epRNdian6ZJKfmHeBcq+vxpgUkUilt/+2lxMgGVmxQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFGwpcnI9uHm5x32R2wccWtK5hkDFMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvYkNseWNqMjRlYm5IZlpIYkJ4eGEwcm1HUU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAUQw2AwQA
UQw4MAwDBABXa1EDBAJXa1AwDQYJKoZIhvcNAQELBQADggEBAF5WCGfNvK34LBTe
vECDnxmzJSauPemWeOn199U+GXW4OB5OKmaj1r6ynjjHTAozYtJ3niof7+h93njr
EXdoy9jXlnhxBERn+pD1ojs8vWPrni745iuIppUmlmsugVGkqOwuU1wmNHglUs6a
/+YWDldkkejAWzsRH0NJnwjQpuDTm86mrB5hsBx+dlGh8N7G4n21yY1v/RsOzJmC
KHhUWzK23LsuNpcneoGIYyXebdp1zKoNp33IZSKinVmIFHBl9HZW+vk4uDXJqgG7
rPTj4FFQOzXvPNzNNFaVMwz/exigeERTHGmCUZylNtya0kIHg5Yi8Au85vPmlPpn
BlAlvZk=
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:47 2026 by rpki-client