Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3xM_u27JX2IMhqhYJsZDN5CXKDA.roa
File: 3xM_u27JX2IMhqhYJsZDN5CXKDA.roa (raw, json)
Hash identifier: uU8KCVOQ+eXY2tKGrbzW5Q0xH329hIKBhzSB/qQTAhY=
Subject key identifier: DF:13:3F:BB:6E:C9:5F:62:0C:86:A8:58:26:C6:43:37:90:97:28:30
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0C447FD8896AC1D5FCE59DC97377ECB37
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3xM_u27JX2IMhqhYJsZDN5CXKDA.roa
Signing time: Mon 21 Sep 2026 14:04:07 +0000
ROA not before: Mon 21 Sep 2026 14:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.128.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:fd:88:96:ac:1d:5f:ce:59:dc:97:37:7e:cb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 21 14:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df133fbb6ec95f620c86a85826c6433790972830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:8b:47:c5:31:f0:73:f5:86:57:29:ee:17:
c3:af:87:75:41:72:29:22:95:0a:98:c3:75:a5:5e:
c0:c0:d4:c8:82:27:b4:c9:8e:09:c3:3f:c5:2d:fc:
88:90:6e:f7:c9:84:46:f4:ec:02:3d:23:1a:a8:10:
ad:1b:62:80:87:f1:f2:18:4c:16:59:ba:4e:7f:d8:
34:f3:ef:e1:cd:d6:13:28:09:9f:78:31:59:d8:5f:
56:94:bf:bb:3a:ac:32:62:92:7d:88:4d:4f:81:41:
6c:69:f4:b2:2c:a8:95:73:00:f8:23:f7:1b:d9:65:
f1:62:97:db:ea:a6:9f:cc:3d:3c:8a:53:3f:14:f1:
6c:98:4d:fe:84:3c:56:de:e9:cf:4f:9b:d8:92:92:
49:92:7a:26:8f:13:77:bc:a9:68:7f:8e:ec:56:34:
ca:c7:17:dd:f8:0a:76:c7:75:16:9a:fa:83:02:67:
5e:f8:c3:43:66:cc:f8:98:a4:20:9e:3b:d9:ff:9d:
47:b5:5a:da:bd:10:db:fc:e9:3b:08:32:72:87:0c:
98:c5:a8:d9:91:3e:35:7f:87:a5:9b:66:51:e0:68:
0d:52:45:07:b7:f7:2a:cd:1a:43:0e:76:10:13:f2:
95:d5:c5:01:88:37:f1:81:dc:31:23:14:03:5b:b6:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:3F:BB:6E:C9:5F:62:0C:86:A8:58:26:C6:43:37:90:97:28:30
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/3xM_u27JX2IMhqhYJsZDN5CXKDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.128.0/22
87.107.144.0/24
87.107.152.0/23
87.107.160.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:e4:75:32:22:14:bb:e7:0d:52:f2:71:f6:88:eb:49:9e:d7:
b5:8b:6e:6d:08:36:4c:ab:16:0f:7b:33:ee:1f:8f:51:6a:b0:
f0:e2:21:3c:db:02:84:b4:45:b4:62:73:d1:ec:a1:14:dd:1d:
84:16:fc:30:dd:57:84:87:f3:9f:3b:40:4f:7f:60:e7:ab:d4:
78:21:00:de:ad:33:a5:50:ff:42:89:cf:5c:61:5e:c9:c1:8e:
c1:5b:25:56:00:3c:d8:8d:6c:08:75:3b:b2:6e:64:b7:5f:ed:
33:28:9a:8c:72:d5:29:18:d0:b2:00:57:d6:52:21:81:09:f0:
b9:23:80:9d:1e:7b:45:3d:be:5a:5f:d9:ea:a6:f1:56:bf:cc:
7b:a6:16:d7:ed:a0:4c:12:5d:d4:6e:b4:6c:db:aa:05:df:42:
77:f5:30:40:40:04:32:16:36:85:ee:d7:e8:b8:83:b4:f6:d2:
37:08:21:25:7d:12:8d:61:4b:0a:50:3e:36:9a:b0:38:76:db:
c1:be:d3:98:1b:ba:46:75:9d:99:95:81:42:7d:5a:6f:d0:a4:
65:0d:d5:29:42:ab:06:f8:31:d2:aa:b3:10:ce:12:00:96:ee:
f2:d0:50:32:fa:90:81:6e:9c:65:61:11:02:36:44:b2:42:28:
9e:b5:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:53:01 2026 by rpki-client