Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/dPPVwBsKIhOkpp4TukHNHQ9Z15Y.roa
File: dPPVwBsKIhOkpp4TukHNHQ9Z15Y.roa (raw, json)
Hash identifier: gJhcO57CQOvrPaaNyDWjaH1LsCPlc/3O6kJgDXqRAaA=
Subject key identifier: 74:F3:D5:C0:1B:0A:22:13:A4:A6:9E:13:BA:41:CD:1D:0F:59:D7:96
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 01A152E139BA2EA21A11B1E6442F05FD9E7F
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/dPPVwBsKIhOkpp4TukHNHQ9Z15Y.roa
Signing time: Mon 19 Oct 2026 06:37:34 +0000
ROA not before: Mon 19 Oct 2026 06:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3327
IP address blocks: 62.128.100.0/22 maxlen: 22
62.128.100.0/23 maxlen: 23
62.128.102.0/23 maxlen: 23
62.128.104.0/21 maxlen: 21
62.128.104.0/23 maxlen: 23
62.128.106.0/24 maxlen: 24
62.128.112.0/20 maxlen: 20
62.128.113.0/24 maxlen: 24
62.128.126.0/24 maxlen: 24
87.98.0.0/18 maxlen: 18
87.98.64.0/19 maxlen: 19
87.98.124.0/22 maxlen: 22
87.98.125.0/24 maxlen: 24
89.219.0.0/24 maxlen: 24
89.219.3.0/24 maxlen: 24
89.219.128.0/22 maxlen: 22
89.219.134.0/23 maxlen: 23
89.219.136.0/21 maxlen: 21
89.219.144.0/21 maxlen: 21
89.219.152.0/23 maxlen: 23
89.219.154.0/24 maxlen: 24
89.219.161.0/24 maxlen: 24
89.219.162.0/24 maxlen: 24
89.219.168.0/24 maxlen: 24
195.222.0.0/19 maxlen: 19
195.222.16.0/24 maxlen: 24
212.27.224.0/19 maxlen: 19
212.27.226.0/24 maxlen: 24
212.27.227.0/24 maxlen: 24
212.27.228.0/24 maxlen: 24
212.27.231.0/24 maxlen: 24
212.27.232.0/24 maxlen: 24
212.27.252.0/22 maxlen: 22
212.47.192.0/19 maxlen: 19
212.49.0.0/19 maxlen: 19
212.49.24.0/24 maxlen: 24
217.28.240.0/20 maxlen: 20
217.28.243.0/24 maxlen: 24
217.28.244.0/22 maxlen: 22
217.28.244.0/24 maxlen: 24
217.28.245.0/24 maxlen: 24
217.28.246.0/24 maxlen: 24
217.28.247.0/24 maxlen: 24
217.28.248.0/24 maxlen: 24
217.28.249.0/24 maxlen: 24
217.28.251.0/24 maxlen: 24
217.28.254.0/24 maxlen: 24
2001:ad0::/32 maxlen: 32
2001:ad0:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:e1:39:ba:2e:a2:1a:11:b1:e6:44:2f:05:fd:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Oct 19 06:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74f3d5c01b0a2213a4a69e13ba41cd1d0f59d796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:59:17:6e:e4:79:4b:40:ff:e7:4d:23:d1:
79:ca:e6:9a:95:80:46:a4:33:e0:5b:ff:85:c9:c3:
e7:f4:80:eb:03:0f:26:b4:4d:77:f1:fb:b0:40:52:
42:97:ec:e1:d1:49:33:4b:43:cd:c8:14:b5:92:f4:
5f:87:b4:83:ed:67:b4:15:9d:c3:5c:db:f5:5e:e8:
10:a6:85:af:78:28:54:f2:c8:f4:32:22:e7:10:8f:
02:d5:f4:a7:27:4c:11:0a:60:4e:09:09:f6:85:16:
9d:b7:b2:ee:14:30:88:03:dd:d7:42:f7:eb:60:ac:
8a:da:3a:e9:15:2c:3f:dd:15:3b:3f:05:05:35:67:
c4:d6:95:62:d9:d0:cf:5d:98:69:6b:17:12:93:96:
dc:d1:79:76:b9:e1:7e:ad:44:88:7d:bb:f2:b2:40:
b3:5c:09:45:4f:ea:3a:d7:35:b8:44:46:a3:45:67:
e4:e3:e9:cc:93:21:a7:0d:d1:d3:63:be:aa:9e:2f:
49:11:e9:f5:9f:7a:33:b4:f9:d3:c4:94:da:ee:35:
74:4b:fa:23:b3:41:f2:e6:0f:61:d9:36:3f:66:71:
3c:bb:2a:5e:0e:da:5c:13:79:1d:4d:0c:c3:c0:d1:
44:1b:c9:1c:21:ba:30:83:e1:bf:93:fd:95:aa:e5:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:D5:C0:1B:0A:22:13:A4:A6:9E:13:BA:41:CD:1D:0F:59:D7:96
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/dPPVwBsKIhOkpp4TukHNHQ9Z15Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.128.100.0-62.128.127.255
87.98.0.0-87.98.95.255
87.98.124.0/22
89.219.0.0/24
89.219.3.0/24
89.219.128.0/22
89.219.134.0-89.219.154.255
89.219.161.0-89.219.162.255
89.219.168.0/24
195.222.0.0/19
212.27.224.0/19
212.47.192.0/19
212.49.0.0/19
217.28.240.0/20
IPv6:
2001:ad0::/32
Signature Algorithm: sha256WithRSAEncryption
24:89:c3:a8:ab:c8:de:81:ec:0f:06:23:0a:5b:0f:81:9b:d2:
f1:45:41:4f:8f:b8:ae:c1:c1:9a:3d:d3:64:16:35:27:72:12:
67:01:c6:79:92:0e:84:4b:0a:8f:7b:98:e9:2a:bb:d2:13:e8:
df:18:83:6c:a1:5f:4f:fc:a4:a6:c9:ac:ed:22:e3:80:11:1f:
b3:c8:da:18:6a:55:a1:15:ce:fd:1b:a4:a5:e7:63:80:12:68:
3e:46:94:9e:7a:16:0f:01:24:e8:ae:1e:63:12:1e:b1:47:5d:
3d:1d:38:c3:83:a9:28:1f:ac:19:98:43:b8:80:71:a4:20:58:
c7:18:2e:5e:e9:2a:4c:55:c0:51:3d:90:b1:61:25:0d:24:ee:
67:32:bb:e5:3e:4a:53:f1:2b:ca:56:83:09:8b:ea:ae:2e:5a:
48:93:37:a8:e0:ee:9c:e8:81:44:54:16:ab:7c:12:88:0d:46:
b2:c5:40:9b:67:ec:e6:ee:ea:58:15:cd:cc:73:f2:fc:e0:38:
a4:4b:5c:7d:1d:4e:62:a1:70:9c:5d:40:23:f8:be:7a:9b:31:
e4:83:fa:73:40:9d:43:8e:ca:bc:7d:9b:85:3d:1d:91:34:22:
f6:32:9d:b2:76:98:2c:28:48:e3:d2:4c:1c:66:4e:b6:55:12:
dd:52:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:27:11 2026 by rpki-client