Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/KUGSN3K9Pu8OlrIRTLJilzgNTso.roa
File: KUGSN3K9Pu8OlrIRTLJilzgNTso.roa (raw, json)
Hash identifier: mv+R2g3Am0PEBIhWS4UBG/TKt/hAzlIIgkvjBLV3iCI=
Subject key identifier: 29:41:92:37:72:BD:3E:EF:0E:96:B2:11:4C:B2:62:97:38:0D:4E:CA
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0C4471271B3A2BF00033B1AE864C152EC
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/KUGSN3K9Pu8OlrIRTLJilzgNTso.roa
Signing time: Mon 21 Sep 2026 14:03:07 +0000
ROA not before: Mon 21 Sep 2026 14:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51026
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/23 maxlen: 24
62.220.126.0/24 maxlen: 24
62.220.127.0/24 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.24.0/24 maxlen: 24
81.12.25.0/24 maxlen: 24
81.12.26.0/24 maxlen: 24
81.12.27.0/24 maxlen: 24
81.12.30.0/24 maxlen: 24
81.12.31.0/24 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.128.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/24 maxlen: 24
87.107.153.0/24 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.166.0/24 maxlen: 24
87.107.167.0/24 maxlen: 24
87.107.174.0/24 maxlen: 24
87.107.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:12:71:b3:a2:bf:00:03:3b:1a:e8:64:c1:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 21 14:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2941923772bd3eef0e96b2114cb26297380d4eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:0c:2b:bd:63:87:c4:c8:7b:93:cf:6a:6e:
e4:3b:1d:28:9e:af:c3:51:09:96:08:9c:00:2f:8d:
52:c6:b3:13:ac:9e:c5:10:66:28:3c:83:54:fa:ab:
4e:70:01:d4:54:be:d0:8e:d5:ed:09:ad:6e:47:d5:
41:4f:04:e1:c7:19:91:43:c5:8d:c7:e9:40:9c:59:
4e:ac:57:1c:a1:55:2f:05:60:4b:ac:0a:75:cb:88:
c0:0e:c4:5a:f9:86:3b:47:e0:91:e9:1b:db:b3:32:
b7:f5:55:ec:7d:4e:58:ed:a0:8d:d2:db:91:74:23:
d2:1c:67:13:e7:9a:ff:6d:20:47:5f:be:88:49:eb:
bc:fe:94:ec:0a:8b:8c:81:3b:a7:b7:14:c3:db:83:
c8:b9:4e:a9:a5:0e:8b:c8:09:ce:e3:6d:c4:6c:5f:
53:07:64:b9:84:99:66:32:50:ac:f7:2e:a2:bb:61:
25:ac:d9:bc:93:75:e6:1e:37:dc:c4:88:b2:e3:8d:
17:92:de:88:a0:63:3f:5e:46:78:aa:db:1c:1d:b6:
08:30:2e:98:0e:2c:b6:5c:c1:40:8e:0e:63:a7:48:
f6:8a:ef:af:b2:de:b2:d0:7a:c9:59:a9:95:4a:dc:
62:f7:bb:cf:20:c8:17:4c:5a:c0:17:21:94:04:08:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:92:37:72:BD:3E:EF:0E:96:B2:11:4C:B2:62:97:38:0D:4E:CA
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/KUGSN3K9Pu8OlrIRTLJilzgNTso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.128.0/22
87.107.144.0/24
87.107.152.0/23
87.107.160.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
86:52:5b:75:6a:10:da:12:b9:85:d5:ba:fe:58:ed:b3:4b:8a:
78:07:ee:71:64:f6:4a:83:66:ac:bf:37:f2:5e:eb:d7:12:65:
ea:d3:39:d4:99:5e:ec:fe:fd:3c:d8:5a:38:65:72:7d:96:e5:
92:90:aa:44:43:40:88:f1:a8:1f:1c:fa:23:6f:ab:45:5f:22:
44:59:e5:d2:ed:1b:26:b1:c4:f4:ed:c2:20:76:de:ee:43:d4:
8e:7c:d6:e9:41:6e:72:49:94:a0:0c:88:70:3f:4c:71:3c:ef:
f7:2d:b2:d9:b7:39:01:ed:0f:16:26:d3:2c:b0:1c:ac:b3:05:
17:97:89:bf:77:a8:d5:0c:b7:fa:80:f8:ef:96:79:d7:e5:f8:
19:0b:3f:5a:8b:d3:1b:76:1c:e3:b2:f1:90:6b:89:37:a9:2e:
24:ec:3d:34:c9:04:52:05:bc:c2:cf:74:65:42:84:d7:63:89:
1d:cf:c2:e4:e2:1b:18:a5:05:59:f8:75:64:0d:61:a3:dc:48:
d1:0d:6d:26:90:4d:1c:a1:1f:e1:b2:93:36:e6:5a:2d:9b:1c:
37:bc:eb:cc:61:9b:61:6d:ab:b2:e1:e5:f9:e9:57:65:09:07:
bb:78:12:91:7a:dc:8b:81:2d:ee:b9:9d:9f:e1:0e:33:b4:6e:
bd:9f:7f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:46:11 2026 by rpki-client