Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/z3J45FU5z2kE8MUDbbkop-vWlWI.roa
File: z3J45FU5z2kE8MUDbbkop-vWlWI.roa (raw, json)
Hash identifier: 6/cDq6oX2ffT+YGqQij+wRQme6CjAw/09jtjY5Fo2aM=
Subject key identifier: CF:72:78:E4:55:39:CF:69:04:F0:C5:03:6D:B9:28:A7:EB:D6:95:62
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0C448E7882CA462B588EB84C9BA0525B7
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/z3J45FU5z2kE8MUDbbkop-vWlWI.roa
Signing time: Mon 21 Sep 2026 14:05:07 +0000
ROA not before: Mon 21 Sep 2026 14:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215708
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/22 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/22 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/22 maxlen: 24
87.107.128.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:48:e7:88:2c:a4:62:b5:88:eb:84:c9:ba:05:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 21 14:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf7278e45539cf6904f0c5036db928a7ebd69562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:60:66:e0:e6:8f:1d:54:6a:9f:b7:39:10:
1f:70:fa:9b:28:b1:3a:07:17:af:b3:71:c1:87:c8:
16:25:58:bf:42:c3:25:62:7b:bf:70:bb:27:52:86:
3e:a5:c1:b7:b1:74:3b:55:31:d2:8c:09:cd:3f:04:
56:77:c1:b6:d1:b0:e2:fb:c4:74:cb:02:7a:0c:c4:
e1:b1:39:83:be:bc:d9:93:1a:a6:96:cc:68:51:09:
47:c5:ba:a9:70:93:77:c6:fe:8b:e0:ff:ae:6e:c1:
01:1d:17:de:99:9e:12:19:f5:6a:34:3f:60:3e:b8:
03:5e:b6:1c:d5:f0:0c:3a:b4:16:99:f8:c0:a4:95:
80:22:e6:d2:51:53:8c:e5:bc:f2:1e:56:1d:43:83:
3b:b1:ee:b3:42:f0:57:69:81:6a:32:04:93:a9:7a:
65:ab:08:30:e4:f5:4a:b2:fc:e6:4a:79:3d:5f:dc:
75:55:c5:61:6c:bc:bb:e3:a6:85:41:5e:5c:06:f4:
f6:65:11:ff:42:85:5f:7c:77:e0:29:b4:1c:12:0d:
5b:3b:37:0c:cc:54:9b:87:91:7c:62:53:dc:2a:55:
cc:2d:d1:1e:a5:82:37:e3:5e:ee:be:91:63:5e:a4:
0a:7d:11:d9:e1:9d:7a:2d:1c:14:bf:b1:6d:c3:8e:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:72:78:E4:55:39:CF:69:04:F0:C5:03:6D:B9:28:A7:EB:D6:95:62
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/z3J45FU5z2kE8MUDbbkop-vWlWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.128.0/22
87.107.144.0/24
87.107.152.0/23
87.107.160.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
41:47:42:e7:c7:e0:98:b9:f6:e1:f2:c3:a3:40:92:8d:03:5d:
b1:4f:36:51:bd:39:8c:c5:98:a6:88:f4:1e:28:f1:c1:79:0f:
0c:aa:90:94:a0:3c:63:cb:78:21:c4:aa:03:0d:6c:94:8b:e7:
eb:02:84:fb:a8:ab:7b:7c:0d:65:f4:db:65:ed:aa:23:66:24:
64:14:e1:2d:e6:ea:b7:e2:31:a4:a3:32:3b:d5:7d:06:20:29:
9b:8f:10:23:21:02:d0:90:5d:17:51:11:99:d8:a4:41:5f:5c:
58:6a:fd:6c:c9:c8:14:c0:ed:23:26:a0:8b:32:a0:c8:a5:8d:
8f:ec:57:43:12:f4:7d:80:91:4a:e9:87:98:73:e4:91:24:c2:
77:23:4d:a0:80:a7:c2:a7:0f:9c:c0:e5:98:d0:32:17:df:ee:
4a:12:3a:1e:df:40:de:5f:91:f3:52:df:18:fa:e6:89:d8:07:
bd:12:59:a3:4d:b0:60:18:88:dc:d7:38:cc:0a:5a:3a:26:b6:
e8:ea:93:81:41:53:da:04:39:6c:a1:70:96:ae:1a:bb:46:28:
65:57:22:e9:00:fa:e8:12:bb:3d:31:bc:5d:8d:52:36:ac:c7:
1f:d2:d3:80:c6:86:e3:45:4b:9e:95:03:52:0b:03:d5:da:84:
65:0f:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:04:37 2026 by rpki-client