Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/o_zx0aBaww2LUpdksVRWx0gWoiw.roa
File: o_zx0aBaww2LUpdksVRWx0gWoiw.roa (raw, json)
Hash identifier: 60Cu80yD09pu/uqfTNgxBgtaOvDzr5Db2kypQ9azolc=
Subject key identifier: A3:FC:F1:D1:A0:5A:C3:0D:8B:52:97:64:B1:54:56:C7:48:16:A2:2C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019C03C9A1B2FC727CB9A0517BF830C75061
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/o_zx0aBaww2LUpdksVRWx0gWoiw.roa
Signing time: Wed 28 Jan 2026 08:47:51 +0000
ROA not before: Wed 28 Jan 2026 08:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204544
IP address blocks: 62.220.124.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:03:c9:a1:b2:fc:72:7c:b9:a0:51:7b:f8:30:c7:50:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 28 08:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3fcf1d1a05ac30d8b529764b15456c74816a22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:77:a7:90:7b:e6:2a:35:ff:ba:ff:4c:f6:
b5:5d:a4:25:55:81:02:f6:52:5b:d5:4e:14:c9:de:
65:c3:6a:d0:a2:63:77:82:10:72:80:d3:f9:52:e6:
83:50:6e:e4:cc:2c:d7:0c:da:ec:2f:43:e1:0b:b1:
25:fe:63:39:c8:cf:78:80:56:a8:4b:bd:a9:78:49:
4b:85:09:e6:fc:9d:c5:ca:b2:a7:7f:71:32:cf:b2:
cd:de:11:95:19:70:02:8a:76:36:05:53:44:f7:ec:
92:af:39:8d:57:40:af:70:de:8c:1c:d4:cd:21:5e:
70:ad:d1:08:c8:f4:fe:9c:c5:ed:2b:20:09:21:16:
39:ac:58:3f:54:fa:61:af:5f:7e:7f:74:6d:de:7f:
93:a5:80:a7:8b:38:82:e9:7d:81:f8:0b:94:9a:1f:
9f:de:ea:95:27:3e:ac:b3:12:dc:fb:5e:b9:2f:b2:
50:ed:0b:1d:5f:e2:e4:e7:7d:62:dc:11:8a:ea:e2:
3e:8c:9b:c9:12:db:57:ff:f0:9d:a9:52:0e:0a:85:
60:de:0d:44:41:2c:c7:29:03:84:74:6e:9a:48:6b:
19:0a:65:cd:b2:36:32:ea:af:ef:71:e8:ec:cf:1a:
16:99:05:0a:dc:8b:80:44:8a:fc:09:1f:f0:f3:75:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:F1:D1:A0:5A:C3:0D:8B:52:97:64:B1:54:56:C7:48:16:A2:2C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/o_zx0aBaww2LUpdksVRWx0gWoiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.124.0/22
81.12.24.0/22
81.12.30.0/23
87.107.6.0-87.107.9.255
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
52:c3:03:0d:f9:f6:51:15:ef:b0:19:49:38:ad:80:29:af:44:
2e:9b:4f:5c:90:cd:40:fa:58:d2:86:4d:89:23:37:ba:30:be:
c6:9b:f4:ba:25:0a:f7:55:e9:69:89:41:bc:b1:91:8a:e0:42:
d8:5e:af:45:49:24:38:fd:e7:85:00:98:b4:d2:3c:be:fb:63:
e5:e2:20:83:d6:df:8c:cd:4c:fb:36:c2:63:00:d7:36:d2:41:
60:a9:c9:da:9c:36:ba:de:0c:44:d3:3c:45:97:d7:f9:35:9b:
4f:fe:90:d8:8c:66:00:9d:90:cc:70:53:87:d1:7a:8e:3f:d2:
62:5c:51:26:65:3a:37:01:cc:8b:fa:2f:f5:3b:82:0c:76:24:
dd:77:fb:46:2f:c7:8b:d3:19:1e:a4:8b:82:c9:67:87:02:23:
b8:70:6d:85:92:57:27:c6:37:66:fc:ad:0f:3a:43:69:52:10:
56:6a:c3:06:4a:cc:c6:f5:28:ee:e0:a0:90:e3:d3:08:61:fb:
4c:2f:f9:3c:5e:ed:50:fc:d6:a4:45:ea:6b:7d:7b:8f:a2:a2:
96:7c:5f:a7:7a:13:c3:74:3a:30:07:ed:47:7b:85:dc:b5:a6:
33:fc:2f:95:66:83:ab:1b:92:3b:7e:cd:f1:b8:cb:13:29:3a:
62:52:c5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:40 2026 by rpki-client