Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/e_gdLnIrVxga7u6AVMY_Y0L5gWc.roa
File: e_gdLnIrVxga7u6AVMY_Y0L5gWc.roa (raw, json)
Hash identifier: HTCer+mT8/0AF5vwAMvPNJYURMAVKyIw5zpkx7XduEw=
Subject key identifier: 7B:F8:1D:2E:72:2B:57:18:1A:EE:EE:80:54:C6:3F:63:42:F9:81:67
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A17751171AA6F6F3924E9D0B1D987D18EC
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/e_gdLnIrVxga7u6AVMY_Y0L5gWc.roa
Signing time: Mon 26 Oct 2026 08:26:05 +0000
ROA not before: Mon 26 Oct 2026 08:26:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 24
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.226.0/23 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
2a00:1198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:51:17:1a:a6:f6:f3:92:4e:9d:0b:1d:98:7d:18:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 26 08:26:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bf81d2e722b57181aeeee8054c63f6342f98167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:60:cf:a3:10:ee:86:8b:c1:28:59:6c:ad:
58:8c:38:8b:7f:b5:0b:72:1c:dc:39:9a:f2:b8:a4:
08:21:9c:3b:c8:12:ed:40:2a:59:d1:13:7c:ca:6e:
89:cc:0f:28:f3:c4:a9:6b:13:5c:9c:7c:9e:11:87:
3b:a6:58:0d:bc:10:af:83:aa:1a:23:c0:5f:2c:e8:
7c:be:03:aa:cf:e6:a1:fd:c2:f9:63:40:94:0f:78:
09:6b:94:2d:95:d1:2c:e4:cc:2f:ee:29:2b:1b:ed:
e1:64:6f:94:37:3f:06:00:ab:ac:c5:1e:85:6a:e3:
e6:76:1e:25:ea:bc:cb:d4:1e:18:e2:d5:d9:05:29:
3d:ca:94:17:66:02:6d:1a:87:38:90:0d:49:56:b8:
6d:e1:9b:12:cc:b5:dd:62:e0:d3:6c:03:1e:be:dc:
25:de:f2:5a:03:7d:31:e3:15:f5:a9:7c:5e:5a:c2:
18:1d:1f:c8:a8:ca:a1:6a:de:dd:00:ad:15:d1:d1:
f8:c5:79:21:53:62:2b:77:92:bb:ae:76:24:58:67:
6f:ba:4c:93:4e:62:27:5e:af:a4:05:83:c5:21:ea:
bf:e7:3d:f8:f7:0b:a1:2f:c3:29:cb:30:1a:9c:a7:
1d:84:a1:06:6b:73:60:30:45:9a:43:04:b7:12:90:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:1D:2E:72:2B:57:18:1A:EE:EE:80:54:C6:3F:63:42:F9:81:67
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/e_gdLnIrVxga7u6AVMY_Y0L5gWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0/22
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.41.0-87.107.43.255
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.192.0/19
87.107.226.0/23
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
31:2a:8c:4e:ea:ca:6a:df:fd:57:40:6c:b2:9f:41:03:b3:89:
4a:0c:2e:71:c6:e5:58:e1:42:e7:2a:3f:3c:2c:dd:30:d0:e8:
1f:23:23:e0:51:1a:5c:f6:50:ad:e2:28:a8:78:83:34:91:47:
5e:ca:48:05:54:f6:b3:94:3a:eb:4d:76:e7:77:bc:2a:53:2b:
46:06:95:e7:f6:c3:a3:3a:11:c6:30:cf:59:f2:d8:27:8d:c3:
21:0b:aa:9e:81:7a:c9:27:44:27:f9:fa:3b:fe:cb:69:ac:94:
fd:55:4e:68:bd:1d:42:db:e3:6b:b0:f9:5a:12:d4:d8:b1:90:
46:ee:1f:d6:d5:c0:de:59:4e:17:8d:f7:a8:76:10:f7:cf:c8:
7f:50:3e:59:70:9b:7c:69:e3:3c:26:78:6c:05:0b:b8:82:46:
83:1f:f1:cc:fe:65:a0:56:b9:cd:73:9a:0e:aa:bc:ff:61:5d:
31:7d:38:4f:ec:6a:14:57:5d:23:c0:13:55:88:77:bb:8b:c0:
5e:9a:23:0c:ff:1f:39:7e:8b:22:cc:66:ce:6a:87:7d:86:52:
ee:67:24:f5:7a:a8:6f:43:8e:0a:a0:17:07:3f:d0:b5:09:0a:
2c:c4:a7:70:01:f8:85:16:a2:2c:7f:f3:6e:04:b3:4c:d6:c1:
18:7c:73:08
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgISAaF3URcapvbzkk6dCx2YfRjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYxMDI2MDgyNjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmY4MWQyZTcyMmI1NzE4MWFlZWVlODA1NGM2M2Y2MzQyZjk4MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs71gz6MQ7oaLwShZbK1YjDiLf7UL
chzcOZryuKQIIZw7yBLtQCpZ0RN8ym6JzA8o88SpaxNcnHyeEYc7plgNvBCvg6oa
I8BfLOh8vgOqz+ah/cL5Y0CUD3gJa5QtldEs5Mwv7ikrG+3hZG+UNz8GAKusxR6F
auPmdh4l6rzL1B4Y4tXZBSk9ypQXZgJtGoc4kA1JVrht4ZsSzLXdYuDTbAMevtwl
3vJaA30x4xX1qXxeWsIYHR/IqMqhat7dAK0V0dH4xXkhU2Ird5K7rnYkWGdvukyT
TmInXq+kBYPFIeq/5z349wuhL8MpyzAanKcdhKEGa3NgMEWaQwS3EpCNMQIDAQAB
o4ICyzCCAscwHQYDVR0OBBYEFHv4HS5yK1cYGu7ugFTGP2NC+YFnMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvZV9nZExuSXJWeGdhN3U2QVZNWV9ZMEw1Z1djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHgBggrBgEFBQcBBwEB/wSB0DCBzTCBuwQCAAEwgbQwDAME
BT7cYAMEAj7caAMEAj7ceDAMAwQDUQwIAwQDUQwQAwQCUQwwAwQBUQw6AwQBV2sO
AwQCV2sYAwQBV2siMAwDBABXaykDBAJXaygwDAMEAVdrMgMEAVdrNAMEAldrRAME
AldrWAMEAldrYAMEAVdrajAMAwQEV2twAwQBV2t0MAwDBANXa3gDBANXa4ADBAJX
a6ADBAJXa6gDBAVXa8ADBAFXa+IDBABXa+gDBAK5PIgwDQQCAAIwBwMFACoAEZgw
DQYJKoZIhvcNAQELBQADggEBADEqjE7qymrf/VdAbLKfQQOziUoMLnHG5VjhQucq
Pzws3TDQ6B8jI+BRGlz2UK3iKKh4gzSRR17KSAVU9rOUOutNdud3vCpTK0YGlef2
w6M6EcYwz1ny2CeNwyELqp6BesknRCf5+jv+y2mslP1VTmi9HULb42uw+VoS1Nix
kEbuH9bVwN5ZTheN96h2EPfPyH9QPllwm3xp4zwmeGwFC7iCRoMf8cz+ZaBWuc1z
mg6qvP9hXTF9OE/sahRXXSPAE1WId7uLwF6aIwz/Hzl+iyLMZs5qh32GUu5nJPV6
qG9DjgqgFwc/0LUJCizEp3AB+IUWoix/824Es0zWwRh8cwg=
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:39 2026 by rpki-client