Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6ZRO34B4tfkjc97Jv9yZZxGj4uE.roa
File: 6ZRO34B4tfkjc97Jv9yZZxGj4uE.roa (raw, json)
Hash identifier: cKd+zJ3ecHSHhGES/1T+0qOGBdTvRTHYKdoLReHaph8=
Subject key identifier: E9:94:4E:DF:80:78:B5:F9:23:73:DE:C9:BF:DC:99:67:11:A3:E2:E1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0C42D707FA21A716E2987D7F1D2AE7997
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6ZRO34B4tfkjc97Jv9yZZxGj4uE.roa
Signing time: Mon 21 Sep 2026 13:35:07 +0000
ROA not before: Mon 21 Sep 2026 13:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.226.0/23 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
2a00:1198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:2d:70:7f:a2:1a:71:6e:29:87:d7:f1:d2:ae:79:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 21 13:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9944edf8078b5f92373dec9bfdc996711a3e2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:68:73:80:53:71:22:ae:31:d3:a7:89:f8:
db:29:3c:8f:f3:15:45:8f:8d:9c:2d:87:02:77:84:
94:66:7a:91:d8:8a:df:50:8a:cd:f9:59:82:f6:d0:
8f:f3:f7:4c:bc:f9:de:2e:84:76:1b:a1:c5:dd:3b:
58:f8:79:15:3a:96:60:62:5f:67:16:2b:cc:84:13:
cb:27:b9:cd:56:9d:50:3f:51:00:41:71:3a:58:84:
7a:f8:66:25:95:a9:0f:26:f0:ea:a6:17:af:8d:f6:
ba:3e:29:f2:14:5a:40:8e:e6:b3:f7:bf:3c:ff:b4:
f5:54:b3:25:fb:3c:ae:70:00:5c:5f:60:ee:1b:f8:
b0:1d:17:f1:4b:31:2a:d7:65:62:7b:fc:c3:cc:8e:
47:47:5b:04:bb:ac:08:49:24:14:5a:46:9f:6d:34:
1e:bf:28:38:09:92:e2:c1:3d:d7:66:0b:f2:df:a6:
94:f5:da:34:7a:96:ab:6c:cb:5b:79:aa:e7:5e:c2:
83:d7:41:6b:ff:f6:7c:f3:a7:a0:6c:4a:9e:31:c9:
e2:83:6f:0f:5e:62:bf:3c:ba:d7:bc:30:e6:77:7b:
88:6f:b6:a3:1d:24:8f:4a:98:38:bb:43:e4:1e:f6:
c7:69:20:9c:2d:dd:9e:ca:da:76:4c:2c:00:2f:e3:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:4E:DF:80:78:B5:F9:23:73:DE:C9:BF:DC:99:67:11:A3:E2:E1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6ZRO34B4tfkjc97Jv9yZZxGj4uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0/22
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.192.0/19
87.107.226.0/23
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
7a:ea:a0:86:13:10:08:14:c9:e6:39:23:ce:76:e1:12:d5:81:
72:c8:b1:db:fb:8e:c6:a6:12:76:fd:da:da:f9:07:30:9f:80:
e8:ac:c3:18:d8:e8:f0:18:a9:ff:b9:ce:8a:ca:8b:f4:7e:e7:
0a:d4:4a:22:61:37:70:d9:32:06:7f:0d:03:e6:45:ef:22:7a:
b3:3c:ee:87:06:9c:f7:46:cd:87:45:63:b0:1d:4c:52:07:dd:
98:33:2e:b2:46:5c:f3:00:02:9a:a1:6d:2a:bf:eb:dd:25:3f:
7e:4c:db:45:78:96:e2:31:d6:27:41:03:6d:4c:f8:14:73:b6:
57:e4:ea:a3:13:d9:65:bf:3d:e1:2c:85:3e:bf:7a:56:ff:55:
0b:47:d1:4a:e8:59:15:e6:ec:5f:08:75:2f:43:91:66:9e:21:
f1:f1:99:5b:94:27:55:d7:06:eb:86:77:7f:86:70:ec:e7:df:
fa:8f:be:e6:6f:d2:fc:ff:0b:83:2f:6d:7b:d5:61:aa:7c:40:
e6:fd:37:75:1b:7b:ab:cc:80:f4:5f:86:e2:23:38:8a:34:4b:
7f:a4:b7:24:39:fb:cf:16:2c:c1:38:6d:af:cf:90:82:4f:60:
6b:14:ac:f6:b2:3b:b4:c7:cd:3d:ab:14:ef:44:20:94:35:bf:
4e:a0:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:50 2026 by rpki-client