Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TvtRkYD-HvMr1YeB6o8gVHpsPrs.roa
File: TvtRkYD-HvMr1YeB6o8gVHpsPrs.roa (raw, json)
Hash identifier: aS37IUPacL36R0Wxfu897lNJCzY8b/DXAVcsKXIGXSM=
Subject key identifier: 4E:FB:51:91:80:FE:1E:F3:2B:D5:87:81:EA:8F:20:54:7A:6C:3E:BB
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019C03C77A5D2128E0CCD954D02168EF732E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TvtRkYD-HvMr1YeB6o8gVHpsPrs.roa
Signing time: Wed 28 Jan 2026 08:45:30 +0000
ROA not before: Wed 28 Jan 2026 08:45:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.0.0/21 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
87.107.188.0/23 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.206.0/24 maxlen: 24
87.107.226.0/23 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
2a00:1198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:03:c7:7a:5d:21:28:e0:cc:d9:54:d0:21:68:ef:73:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 28 08:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4efb519180fe1ef32bd58781ea8f20547a6c3ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:1d:40:ec:8d:20:84:aa:69:07:4f:ce:48:
66:e6:f7:63:04:bf:69:c0:da:eb:d2:d0:38:03:2b:
7d:6f:89:50:75:73:c3:87:e7:e8:54:ef:76:58:6c:
0b:dc:ab:d4:f0:97:07:34:88:4f:1b:83:81:12:83:
e4:20:04:2c:86:9d:b6:54:88:5f:a2:df:0d:ff:2a:
86:1a:3d:a4:9c:34:aa:d3:b1:f3:f3:6e:71:2e:b0:
72:37:2b:19:59:4e:d5:1e:bc:65:fd:fe:66:6e:cb:
77:68:88:13:3e:0b:c8:00:3c:15:0d:ed:fd:bc:e1:
48:73:ba:24:1e:88:b6:15:a5:40:2e:09:d6:c6:f5:
45:c3:0e:77:1c:0e:e9:f8:53:96:45:37:48:c2:53:
c2:fa:97:f2:04:49:f8:37:f6:b9:4c:95:43:b2:c7:
74:43:83:ba:8e:40:cc:86:cb:59:1e:54:dc:af:5f:
1a:e7:3a:bd:8c:73:6c:29:d7:cf:9e:cf:a1:90:1b:
93:6b:29:7c:5f:4c:a8:b2:b2:fb:f9:d8:d9:07:5f:
18:9b:3b:e4:05:28:f2:5d:0f:c9:b0:f2:fd:1b:f3:
d2:e4:3b:25:88:31:90:05:a0:1c:c7:c5:12:59:b9:
a9:82:d2:8b:63:5e:da:07:e3:9f:03:86:39:6b:0c:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:51:91:80:FE:1E:F3:2B:D5:87:81:EA:8F:20:54:7A:6C:3E:BB
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/TvtRkYD-HvMr1YeB6o8gVHpsPrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0/22
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.0.0/21
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.173.0/24
87.107.188.0/23
87.107.192.0/19
87.107.226.0/23
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
41:e9:50:8e:4a:dd:81:79:2e:ca:3c:02:7e:56:53:9f:1a:ef:
0b:09:85:11:58:19:3c:25:4e:5e:41:94:79:f5:ee:23:2a:3f:
e0:71:f1:d5:51:9d:be:60:50:68:d3:6d:b3:ad:39:a8:e7:8a:
54:20:bd:76:22:7f:b6:49:dd:d4:c6:b1:d3:29:81:ed:25:e7:
07:77:59:e7:91:7f:1e:7d:df:c7:ea:eb:20:8f:00:0a:40:cb:
a9:02:9f:57:6b:78:6e:ed:34:1c:02:a4:2a:e9:53:1f:67:67:
96:64:47:35:0e:5c:7d:9c:90:34:71:d1:55:dc:eb:16:f1:ca:
31:e5:87:35:b8:79:5c:66:c8:07:18:05:9e:7d:5e:1e:20:d9:
ad:de:30:9b:ac:b0:0b:5a:6f:55:04:94:94:3e:98:08:a8:2b:
ee:45:27:fb:a8:f6:c7:13:41:ca:47:4d:aa:bb:bd:f0:20:49:
dd:f6:82:41:bb:68:4a:e7:1d:2a:9e:e6:d4:8e:29:f0:05:fd:
f5:6c:77:0c:ea:e0:82:58:7e:d9:5c:c2:c1:46:f0:72:f1:53:
29:96:87:90:62:19:ea:ff:31:e3:88:6e:b5:18:70:51:d9:a5:
91:8f:c8:de:d7:04:d4:3e:c0:d9:ed:7f:c6:63:8e:d7:64:18:
bf:59:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:51 2026 by rpki-client