Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/dyF34pZ8GCNuzl4YTk3EiPwDm3c.roa
File: dyF34pZ8GCNuzl4YTk3EiPwDm3c.roa (raw, json)
Hash identifier: m2G1ChPDfy1n+0PrTlF39X/Rm+KnLUW3QVpj1zhgqDI=
Subject key identifier: 77:21:77:E2:96:7C:18:23:6E:CE:5E:18:4E:4D:C4:88:FC:03:9B:77
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 019C90432AD85C24F309EB1C9EBAE1A58230
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/dyF34pZ8GCNuzl4YTk3EiPwDm3c.roa
Signing time: Tue 24 Feb 2026 15:27:26 +0000
ROA not before: Tue 24 Feb 2026 15:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3218
IP address blocks: 62.61.16.0/20 maxlen: 20
62.61.16.0/21 maxlen: 21
62.61.24.0/21 maxlen: 21
62.61.27.0/24 maxlen: 24
2a0c:6d00:61::/48 maxlen: 48
2a0c:6d00:85::/48 maxlen: 48
2a0c:6d00:232::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:43:2a:d8:5c:24:f3:09:eb:1c:9e:ba:e1:a5:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Feb 24 15:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=772177e2967c18236ece5e184e4dc488fc039b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:47:4f:65:f0:a7:8d:ff:9a:7b:ba:9e:72:
a5:ac:05:28:b0:1e:23:3b:93:68:c8:4c:58:f1:3e:
66:ea:e1:ae:30:e2:e1:2e:86:45:f9:66:f7:74:88:
f7:05:c6:3f:86:fd:11:f7:68:8f:9c:c2:f5:79:7d:
20:13:f9:17:70:1f:be:fc:38:b7:a6:b8:dc:1f:52:
81:7e:02:72:76:54:d4:ac:7d:0c:76:10:0c:50:a1:
79:ff:f3:f8:3c:2f:f7:5c:50:c8:ea:a7:78:0e:c7:
11:d7:df:7e:19:a7:0c:6e:c7:57:43:ee:4e:63:cc:
e8:82:a5:aa:da:f9:14:3c:80:d3:ac:a6:57:b6:b5:
be:25:19:d4:01:45:ff:ea:06:3a:f7:45:e4:72:09:
db:c3:6f:8e:a8:37:cc:f3:84:56:88:4b:b0:3d:b2:
9d:91:81:48:20:6a:07:e9:31:97:7e:17:93:71:77:
fe:6e:d3:ca:ea:e6:7d:39:fd:d7:cd:bd:71:39:a8:
f9:13:2c:56:44:2c:19:70:76:24:a3:c4:9b:39:8b:
36:f6:c2:16:54:56:4f:06:7b:1d:cd:de:3f:c3:95:
ab:67:94:2d:c1:7a:e2:e9:88:99:a9:6b:82:44:5d:
7d:c5:bd:e8:78:93:af:b3:d4:6f:9a:3e:38:11:17:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:77:E2:96:7C:18:23:6E:CE:5E:18:4E:4D:C4:88:FC:03:9B:77
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/dyF34pZ8GCNuzl4YTk3EiPwDm3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.61.16.0/20
IPv6:
2a0c:6d00:61::/48
2a0c:6d00:85::/48
2a0c:6d00:232::/48
Signature Algorithm: sha256WithRSAEncryption
31:24:0a:83:4e:b2:d3:6d:f7:b6:db:e3:e8:b6:63:d0:75:06:
3f:e1:10:d0:75:05:a9:e6:94:8e:bd:0b:33:06:5a:4f:20:bd:
13:bd:33:4e:20:8f:90:99:9c:75:3e:76:79:7c:24:24:99:0f:
d7:6e:64:cd:54:a6:cf:14:b1:9d:11:2a:36:e4:c5:9b:2c:8d:
cf:f8:eb:5c:92:d4:18:68:bb:72:74:71:23:da:d2:d0:34:0f:
fb:68:e0:53:af:e5:b9:b8:5e:b8:b3:11:d1:4f:85:ce:a2:ab:
50:17:14:e0:3e:1f:a1:cc:4a:25:1d:f9:a1:2b:fe:37:b9:c6:
d2:7c:fe:ec:42:20:41:71:1d:d3:2c:e9:d9:0f:15:1f:af:4c:
a9:46:a5:bb:c1:db:77:49:0e:8e:ef:5e:1a:5b:34:f4:bc:59:
9b:ac:eb:69:a3:10:e0:e1:ed:c9:87:29:73:03:86:56:ed:5c:
36:73:14:8b:af:0c:6f:e3:de:98:35:5e:2c:05:03:c9:c1:47:
d3:18:86:65:84:89:f2:18:5f:12:fe:9f:1d:2c:35:b2:2e:00:
c0:83:51:4c:c0:e0:b0:f9:97:4b:b0:cd:e6:fe:5b:a7:8a:8a:
b2:40:5f:5d:dc:30:90:68:99:d3:0e:ef:c7:c8:73:53:52:cc:
01:3e:26:e5
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZyQQyrYXCTzCescnrrhpYIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGU4ZGY1YzAzMTEwNzExOGRhNjFmMjlhYjRmNDE5ZDI5
ZDVhOGEwHhcNMjYwMjI0MTUyNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzIxNzdlMjk2N2MxODIzNmVjZTVlMTg0ZTRkYzQ4OGZjMDM5Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX5HT2Xwp43/mnu6nnKlrAUosB4j
O5NoyExY8T5m6uGuMOLhLoZF+Wb3dIj3BcY/hv0R92iPnML1eX0gE/kXcB++/Di3
prjcH1KBfgJydlTUrH0MdhAMUKF5//P4PC/3XFDI6qd4DscR199+GacMbsdXQ+5O
Y8zogqWq2vkUPIDTrKZXtrW+JRnUAUX/6gY690Xkcgnbw2+OqDfM84RWiEuwPbKd
kYFIIGoH6TGXfheTcXf+btPK6uZ9Of3Xzb1xOaj5EyxWRCwZcHYko8SbOYs29sIW
VFZPBnsdzd4/w5WrZ5QtwXri6YiZqWuCRF19xb3oeJOvs9Rvmj44ERewrwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFHchd+KWfBgjbs5eGE5NxIj8A5t3MB8GA1UdIwQY
MBaAFB2OjfXAMRBxGNph8pq09BnSnVqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUt
YjFkMzhiMTNmZGE5LzEvZHlGMzRwWjhHQ051emw0WVRrM0VpUHdEbTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUtYjFkMzhiMTNmZGE5
LzEvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQEPj0QMCEE
AgACMBsDBwAqDG0AAGEDBwAqDG0AAIUDBwAqDG0AAjIwDQYJKoZIhvcNAQELBQAD
ggEBADEkCoNOstNt97bb4+i2Y9B1Bj/hENB1BanmlI69CzMGWk8gvRO9M04gj5CZ
nHU+dnl8JCSZD9duZM1Ups8UsZ0RKjbkxZssjc/461yS1Bhou3J0cSPa0tA0D/to
4FOv5bm4XrizEdFPhc6iq1AXFOA+H6HMSiUd+aEr/je5xtJ8/uxCIEFxHdMs6dkP
FR+vTKlGpbvB23dJDo7vXhpbNPS8WZus62mjEODh7cmHKXMDhlbtXDZzFIuvDG/j
3pg1XiwFA8nBR9MYhmWEifIYXxL+nx0sNbIuAMCDUUzA4LD5l0uwzeb+W6eKirJA
X13cMJBomdMO78fIc1NSzAE+JuU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:30 2026 by rpki-client