Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ncRVzKixlPH6uuUJoHSuV4BOXQ0.roa
File: ncRVzKixlPH6uuUJoHSuV4BOXQ0.roa (raw, json)
Hash identifier: qApAkv/WLxV+mMnJaMlqlnCPoxXQ7yF0T6oapNschAg=
Subject key identifier: 9D:C4:55:CC:A8:B1:94:F1:FA:BA:E5:09:A0:74:AE:57:80:4E:5D:0D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A1D1AF3FB36BA24FA3B4236AFD39153444
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ncRVzKixlPH6uuUJoHSuV4BOXQ0.roa
Signing time: Thu 12 Nov 2026 21:34:45 +0000
ROA not before: Thu 12 Nov 2026 21:34:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/22 maxlen: 24
62.220.120.0/22 maxlen: 22
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.14.0/23 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 24
87.107.96.0/22 maxlen: 24
87.107.98.0/23 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
2a00:1198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d1:af:3f:b3:6b:a2:4f:a3:b4:23:6a:fd:39:15:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Nov 12 21:34:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dc455cca8b194f1fabae509a074ae57804e5d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:2d:94:63:fe:39:16:c4:9e:a7:67:e5:de:
cf:03:ad:ae:1b:e4:a9:59:fe:ca:51:65:93:1b:d9:
7c:99:9e:25:d2:bf:5e:19:6c:79:5f:8f:9b:54:e1:
7f:e0:d9:68:94:2c:58:de:07:96:dd:7b:72:c5:8b:
32:88:a7:07:61:34:19:41:b9:5d:f5:dc:2d:5d:6e:
c4:aa:27:d6:03:df:45:b8:34:7f:1d:54:b8:09:4c:
05:d8:c4:53:cd:78:36:20:55:a6:26:52:5b:c9:9b:
01:c4:53:67:3e:c3:7e:72:30:a0:90:0f:4f:61:6f:
60:f7:8e:8f:64:5c:37:af:a2:d3:88:10:03:10:65:
0f:c7:df:ed:6b:c3:ec:b4:7c:3c:c4:c1:42:97:e0:
8a:92:84:cf:e5:05:ad:df:29:e6:ab:e3:ea:10:1a:
4d:20:52:8f:c5:83:f2:e3:5f:21:e4:32:b9:86:eb:
5c:76:c0:f0:70:cb:05:ba:a6:77:54:b1:33:d3:29:
e8:f0:e0:b2:1f:9b:9a:69:6e:b3:9c:0d:8d:60:3b:
df:ff:e3:f6:37:bb:56:bc:89:f6:0f:61:e6:74:90:
24:58:3d:81:d3:a4:57:4a:89:e8:79:e4:4d:bc:67:
90:5e:3a:28:aa:84:86:2a:ca:c9:16:0c:64:4c:8e:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:55:CC:A8:B1:94:F1:FA:BA:E5:09:A0:74:AE:57:80:4E:5D:0D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ncRVzKixlPH6uuUJoHSuV4BOXQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0-62.220.107.255
62.220.120.0/22
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.14.0/23
87.107.24.0/22
87.107.34.0/23
87.107.42.0/23
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.192.0/19
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
57:59:01:77:78:d3:7f:40:e0:e6:77:a7:24:89:f1:a6:f9:cc:
b2:1a:0e:66:e0:42:b9:f1:d9:56:79:50:d6:21:2b:bf:26:82:
71:2f:04:10:20:65:45:3f:96:d5:62:52:c5:48:ee:ea:44:bb:
25:3a:5a:4d:94:eb:02:34:22:d4:31:1d:48:32:56:0b:98:87:
6a:8e:69:71:18:41:bd:67:a9:9d:db:3c:c5:d7:9f:cc:36:1f:
a7:ed:be:0f:d9:0e:24:cf:70:17:60:4b:61:2b:c7:a0:28:d0:
48:d2:fd:3b:6f:7a:f7:4e:bb:62:40:33:ab:f3:e1:12:2b:81:
1c:13:72:4c:94:4e:73:5d:0a:02:30:4b:64:90:1b:0e:3e:ae:
b6:38:ac:71:c0:c4:52:91:1d:71:c5:2b:05:f1:b8:33:68:c6:
a8:0a:1b:4e:a6:df:d1:7a:ae:d0:6f:1d:f0:4e:22:1a:46:20:
fd:5c:82:04:57:87:cc:f1:4d:07:94:ca:55:9f:b4:3d:b9:ed:
18:3b:c1:70:a5:29:a9:af:12:97:57:f0:b3:7f:c6:7d:60:b5:
de:fc:f6:23:dc:7d:d3:e6:ac:76:4d:dd:4d:9c:37:3d:aa:cd:
6b:0e:af:e2:71:8f:2f:ec:22:15:1f:0c:63:91:c8:68:d8:a8:
cb:60:af:15
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAaHRrz+za6JPo7Qjav05FTREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYxMTEyMjEzNDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGM0NTVjY2E4YjE5NGYxZmFiYWU1MDlhMDc0YWU1NzgwNGU1ZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx8tlGP+ORbEnqdn5d7PA62uG+Sp
Wf7KUWWTG9l8mZ4l0r9eGWx5X4+bVOF/4NlolCxY3geW3XtyxYsyiKcHYTQZQbld
9dwtXW7EqifWA99FuDR/HVS4CUwF2MRTzXg2IFWmJlJbyZsBxFNnPsN+cjCgkA9P
YW9g946PZFw3r6LTiBADEGUPx9/ta8PstHw8xMFCl+CKkoTP5QWt3ynmq+PqEBpN
IFKPxYPy418h5DK5hutcdsDwcMsFuqZ3VLEz0yno8OCyH5uaaW6znA2NYDvf/+P2
N7tWvIn2D2HmdJAkWD2B06RXSonoeeRNvGeQXjooqoSGKsrJFgxkTI7BmQIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFJ3EVcyosZTx+rrlCaB0rleATl0NMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvbmNSVnpLaXhsUEg2dXVVSm9IU3VWNEJPWFEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHSBggrBgEFBQcBBwEB/wSBwjCBvzCBrQQCAAEwgaYwDAME
BT7cYAMEAj7caAMEAj7ceDAMAwQDUQwIAwQDUQwQAwQCUQwwAwQBUQw6AwQBV2sO
AwQCV2sYAwQBV2siAwQBV2sqMAwDBAFXazIDBAFXazQDBAJXa0QDBAJXa1gDBAJX
a2ADBAFXa2owDAMEBFdrcAMEAVdrdDAMAwQDV2t4AwQDV2uAAwQCV2ugAwQCV2uo
AwQFV2vAAwQAV2voAwQCuTyIMA0EAgACMAcDBQAqABGYMA0GCSqGSIb3DQEBCwUA
A4IBAQBXWQF3eNN/QODmd6ckifGm+cyyGg5m4EK58dlWeVDWISu/JoJxLwQQIGVF
P5bVYlLFSO7qRLslOlpNlOsCNCLUMR1IMlYLmIdqjmlxGEG9Z6md2zzF15/MNh+n
7b4P2Q4kz3AXYEthK8egKNBI0v07b3r3TrtiQDOr8+ESK4EcE3JMlE5zXQoCMEtk
kBsOPq62OKxxwMRSkR1xxSsF8bgzaMaoChtOpt/Req7Qbx3wTiIaRiD9XIIEV4fM
8U0HlMpVn7Q9ue0YO8FwpSmprxKXV/Czf8Z9YLXe/PYj3H3T5qx2Td1NnDc9qs1r
Dq/icY8v7CIVHwxjkcho2KjLYK8V
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:07 2026 by rpki-client