Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5Alcs3xLFbCLu8QOWuRxWO1jhGo.roa
File: 5Alcs3xLFbCLu8QOWuRxWO1jhGo.roa (raw, json)
Hash identifier: F5Lji6NO7cOp4l2GriBUTEATlk37S8t4egro8JnMOVI=
Subject key identifier: E4:09:5C:B3:7C:4B:15:B0:8B:BB:C4:0E:5A:E4:71:58:ED:63:84:6A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F2C8D469975F7D5FE6FF7251DF5DB8EB7
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5Alcs3xLFbCLu8QOWuRxWO1jhGo.roa
Signing time: Sat 04 Jul 2026 09:54:43 +0000
ROA not before: Sat 04 Jul 2026 09:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215708
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/22 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/22 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:8d:46:99:75:f7:d5:fe:6f:f7:25:1d:f5:db:8e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 4 09:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4095cb37c4b15b08bbbc40e5ae47158ed63846a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:22:38:40:ab:98:92:9f:3e:a1:4f:94:d2:
18:10:5f:c0:c2:98:6a:a5:e5:6e:64:3c:d8:5e:9d:
81:5e:b2:8c:90:df:d2:09:d9:82:48:a0:17:1d:7f:
f8:91:ec:5b:56:5d:eb:30:db:2a:b7:22:50:15:22:
42:1c:fd:68:2b:16:36:0f:c6:82:fb:8b:b6:83:0d:
2b:99:6c:87:81:a8:bd:2a:7a:54:cf:4f:0d:3e:58:
3c:aa:72:77:29:13:76:ba:66:68:40:6d:38:5f:e4:
fc:15:0e:b7:aa:73:0e:78:fe:d4:24:50:cc:d3:05:
6c:25:72:4e:b8:19:a3:2d:b9:ff:98:f6:8a:66:36:
0e:e3:46:80:38:fd:c3:29:59:34:2f:a0:51:b5:6d:
e8:59:c1:c5:cd:bb:6d:16:c5:eb:3e:af:a5:66:e1:
12:07:24:e0:02:42:fe:2d:52:e8:72:3d:6a:c4:1c:
c8:7c:f6:95:30:81:58:ee:58:54:df:d6:21:f9:f6:
5b:1e:d1:32:f0:68:4d:f2:17:04:cc:67:ea:7a:f3:
59:ae:0d:5e:7c:06:f3:da:eb:4d:18:9b:ea:44:8b:
a1:7f:e5:60:c0:07:db:84:31:28:dd:88:b9:22:87:
e2:14:8a:52:4d:28:ec:67:fc:2a:ae:fc:32:78:8b:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:09:5C:B3:7C:4B:15:B0:8B:BB:C4:0E:5A:E4:71:58:ED:63:84:6A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5Alcs3xLFbCLu8QOWuRxWO1jhGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
89:71:5b:d6:5b:70:e7:aa:25:d4:ed:ab:54:6e:d3:1a:cd:3c:
dc:a0:97:95:75:02:10:98:1c:40:63:f3:5c:89:09:7e:75:c4:
fd:4f:fd:2e:05:07:cc:7d:5b:5c:b8:fe:eb:38:82:05:89:96:
a6:6c:d3:c0:96:39:0b:36:96:65:9d:c4:3b:5c:4f:1b:7f:fe:
c3:82:c0:2b:b5:96:f7:e8:ec:ef:60:5a:a0:8e:02:4e:99:6a:
2a:48:71:70:69:af:fd:2d:20:20:47:c8:c0:e1:7d:b6:5b:6d:
a2:fe:e6:a3:8d:e3:a1:7d:ea:c7:92:87:3c:78:59:b5:92:bc:
c7:21:eb:52:ea:47:9f:08:e5:b6:7c:fd:77:15:cb:09:5b:bd:
4e:07:dc:7d:e5:91:1d:55:6d:4d:e8:45:a9:31:8b:66:55:cc:
d0:12:d7:04:bd:c0:91:6a:71:6a:c5:2a:fd:9a:41:ee:1c:45:
1e:dd:33:76:df:f7:b3:e1:09:d7:fe:63:39:48:74:92:c1:d3:
e6:5e:68:33:c0:6a:e8:8b:59:e4:fe:b0:9a:fc:58:d8:ff:0b:
0a:83:14:34:83:06:89:72:6f:2f:85:f5:32:23:2b:17:10:04:
1b:9f:e9:5a:b4:24:35:24:53:20:9b:01:da:67:90:5b:b1:c4:
5d:6c:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:40 2026 by rpki-client