Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/20LVHdAcHcjvBEB418-WxYCHUEE.roa
File: 20LVHdAcHcjvBEB418-WxYCHUEE.roa (raw, json)
Hash identifier: r7EyPE3p3Dgog2VXOm1mcU5lN1IZV26YJQuVQ+nMTU4=
Subject key identifier: DB:42:D5:1D:D0:1C:1D:C8:EF:04:40:78:D7:CF:96:C5:80:87:50:41
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019E1B5CF35F231BD13BF8288653AE88A089
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/20LVHdAcHcjvBEB418-WxYCHUEE.roa
Signing time: Tue 12 May 2026 08:45:36 +0000
ROA not before: Tue 12 May 2026 08:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 62.220.120.0/24 maxlen: 24
87.107.192.0/24 maxlen: 24
87.107.193.0/24 maxlen: 24
87.107.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:5c:f3:5f:23:1b:d1:3b:f8:28:86:53:ae:88:a0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 12 08:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db42d51dd01c1dc8ef044078d7cf96c580875041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:5d:b8:ae:e7:a2:ee:dd:42:6b:15:a3:d7:
d9:7f:b7:7f:79:85:0e:b0:a8:71:79:77:70:f2:c4:
b7:6c:41:0a:9b:18:2f:b0:78:b8:aa:69:24:d9:71:
82:f3:6b:90:37:10:7c:ff:15:6a:7a:97:63:5c:06:
01:cd:5d:2b:01:99:80:0f:27:8d:9e:15:7f:0d:63:
68:f0:c7:ae:9b:cc:dd:52:b8:24:15:d4:55:13:bf:
63:4a:c2:63:c4:4b:c3:54:af:39:66:d1:ad:2e:9f:
75:24:24:4f:02:64:76:70:46:e2:6f:ca:b2:e6:4e:
51:e7:df:e9:b5:10:6b:de:f1:b1:31:2c:dc:aa:6b:
bd:12:df:ed:da:1d:34:84:fd:22:88:ef:f7:a8:9c:
c8:5d:f3:2f:a7:19:22:4b:33:80:37:60:2e:6a:56:
bd:70:19:85:71:ef:76:d4:69:25:b2:ec:8f:3b:b0:
a3:e1:9b:34:69:32:4d:59:87:c3:21:3b:6a:76:21:
ef:9f:39:b5:79:19:26:e8:f8:e4:3f:56:90:7a:fa:
60:f2:1e:1a:05:df:d9:5f:c2:ee:95:a6:4f:1b:8c:
92:27:03:fd:e1:d2:3c:55:47:1d:4d:9a:7d:54:97:
1d:36:1e:9c:33:b1:45:c7:fc:16:9d:7c:10:df:60:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:D5:1D:D0:1C:1D:C8:EF:04:40:78:D7:CF:96:C5:80:87:50:41
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/20LVHdAcHcjvBEB418-WxYCHUEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.120.0/24
87.107.192.0-87.107.194.255
Signature Algorithm: sha256WithRSAEncryption
6d:7d:31:19:6b:bf:29:4e:4b:5b:0d:e7:e9:32:33:a1:9f:b6:
3e:63:72:bd:a3:1b:0f:39:5b:45:43:33:90:1d:c0:d5:ad:4e:
81:c9:2c:3c:19:db:58:94:4d:38:1b:2d:25:71:ea:92:0a:6c:
25:0e:b3:80:7f:e5:99:b6:79:a6:49:0c:64:bb:11:bb:c4:9c:
6c:46:17:40:c4:c9:63:de:e9:62:e3:b3:b0:6c:8c:99:e4:e5:
5e:85:9c:6c:f4:d8:ab:e1:34:24:56:db:cd:cf:a5:91:63:3c:
58:70:86:47:d7:40:e0:b5:0a:62:05:f6:8a:89:ef:d1:16:1d:
5a:e3:7b:9d:7d:73:2c:bf:9f:cb:50:27:92:b2:16:06:b0:f6:
b7:8e:db:8d:6b:a3:91:35:5d:4b:6a:e1:63:87:0a:42:f6:92:
0e:18:54:b0:48:a5:a9:bd:1e:29:34:36:ca:5c:af:63:86:1b:
96:73:92:bd:a7:a4:52:d6:0b:66:ca:9d:18:bf:22:30:c5:2e:
35:83:81:38:2c:19:74:b5:e1:e7:33:28:27:d1:ae:28:00:8c:
f4:f3:7c:ae:1b:0f:f9:ee:08:4c:8d:d5:28:93:cd:46:6f:aa:
30:05:d3:8c:f8:80:d9:71:2d:0c:82:68:fe:1a:fa:ef:01:47:
53:ca:c9:2f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ4bXPNfIxvRO/gohlOuiKCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwNTEyMDg0NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjQyZDUxZGQwMWMxZGM4ZWYwNDQwNzhkN2NmOTZjNTgwODc1MDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQBduK7nou7dQmsVo9fZf7d/eYUO
sKhxeXdw8sS3bEEKmxgvsHi4qmkk2XGC82uQNxB8/xVqepdjXAYBzV0rAZmADyeN
nhV/DWNo8Meum8zdUrgkFdRVE79jSsJjxEvDVK85ZtGtLp91JCRPAmR2cEbib8qy
5k5R59/ptRBr3vGxMSzcqmu9Et/t2h00hP0iiO/3qJzIXfMvpxkiSzOAN2Auala9
cBmFce921GklsuyPO7Cj4Zs0aTJNWYfDITtqdiHvnzm1eRkm6PjkP1aQevpg8h4a
Bd/ZX8LulaZPG4ySJwP94dI8VUcdTZp9VJcdNh6cM7FFx/wWnXwQ32DkLwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNtC1R3QHB3I7wRAeNfPlsWAh1BBMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMjBMVkhkQWNIY2p2QkVCNDE4LVd4WUNIVUVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAPtx4MAwD
BAZXa8ADBABXa8IwDQYJKoZIhvcNAQELBQADggEBAG19MRlrvylOS1sN5+kyM6Gf
tj5jcr2jGw85W0VDM5AdwNWtToHJLDwZ21iUTTgbLSVx6pIKbCUOs4B/5Zm2eaZJ
DGS7EbvEnGxGF0DEyWPe6WLjs7BsjJnk5V6FnGz02KvhNCRW283PpZFjPFhwhkfX
QOC1CmIF9oqJ79EWHVrje519cyy/n8tQJ5KyFgaw9reO241ro5E1XUtq4WOHCkL2
kg4YVLBIpam9Hik0Nspcr2OGG5Zzkr2npFLWC2bKnRi/IjDFLjWDgTgsGXS14ecz
KCfRrigAjPTzfK4bD/nuCEyN1SiTzUZvqjAF04z4gNlxLQyCaP4a+u8BR1PKyS8=
-----END CERTIFICATE-----
Generated at Tue May 12 22:02:33 2026 by rpki-client