Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5K1LIndqaP3Uk4dmkQpiRieWOXY.roa
File: 5K1LIndqaP3Uk4dmkQpiRieWOXY.roa (raw, json)
Hash identifier: a56wo9Ud2WTU9l+kft8E82jH0fMq1YT8fPyyZek5Trc=
Subject key identifier: E4:AD:4B:22:77:6A:68:FD:D4:93:87:66:91:0A:62:46:27:96:39:76
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F2C8C5BD81AA780A3A124CE9CA22440F9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5K1LIndqaP3Uk4dmkQpiRieWOXY.roa
Signing time: Sat 04 Jul 2026 09:53:43 +0000
ROA not before: Sat 04 Jul 2026 09:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208555
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:8c:5b:d8:1a:a7:80:a3:a1:24:ce:9c:a2:24:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 4 09:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4ad4b22776a68fdd4938766910a624627963976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:6d:53:31:11:d9:c1:de:6e:5c:60:02:bb:
0b:45:59:a8:7d:bd:df:e3:ba:78:c1:56:ab:d2:ea:
ab:df:23:c9:99:e5:dc:e7:80:e2:fc:99:22:b0:0d:
7a:ee:fb:4a:da:9e:1e:5e:46:28:65:bb:5a:ed:8e:
19:81:8d:f6:1f:47:05:e2:16:b4:e9:78:9e:04:b3:
76:91:77:e8:25:d3:5d:3c:6a:d1:14:d9:db:48:a4:
fd:07:8c:93:68:b6:9d:29:78:6b:1a:98:96:52:2f:
81:58:3f:13:d3:0a:2e:f4:f1:c5:f7:76:15:63:96:
e2:8f:b2:bc:4d:d8:bd:b4:67:36:1f:ad:fd:f0:22:
9f:9a:b7:3e:88:66:83:e5:c1:c7:54:07:a3:b8:20:
3e:19:46:ba:51:91:fc:12:9b:d5:3c:a2:b3:a8:7f:
97:f6:d3:4e:04:69:40:6f:4e:84:19:e5:09:40:b4:
de:dd:4c:56:1c:6a:b1:3f:73:e9:c2:c2:d5:e1:fd:
d6:2c:fb:09:88:48:a5:cd:89:89:88:eb:8a:aa:ad:
e3:33:9d:1b:1c:3f:ec:f3:b0:ac:88:8b:28:ef:af:
75:18:0f:15:0d:8f:de:86:3d:e3:f0:15:99:63:da:
ba:f5:f7:31:c8:6b:a7:3c:b9:80:c9:90:5a:64:bc:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AD:4B:22:77:6A:68:FD:D4:93:87:66:91:0A:62:46:27:96:39:76
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5K1LIndqaP3Uk4dmkQpiRieWOXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:1a:14:49:7f:cb:86:eb:ed:58:cb:ef:5e:fe:2a:41:fb:fb:
22:57:de:4b:a3:3b:65:7f:13:22:d8:93:a2:1d:ff:35:eb:b0:
7b:3c:73:f9:d1:7f:a5:c3:7b:b6:18:d5:b3:36:ad:15:87:14:
51:a0:09:b5:0e:ec:ec:2e:02:5f:60:6f:fe:e6:59:03:f6:6c:
97:8f:38:1a:86:e0:bc:ea:33:c0:94:11:de:e6:77:17:cb:b8:
95:1d:9c:b2:ba:a1:19:05:87:78:15:85:34:ab:5b:de:04:3b:
9c:a0:06:86:f9:07:e3:85:ec:42:6e:b0:2f:49:84:0a:fb:75:
d6:30:f9:f1:4b:39:b7:46:f1:91:77:26:72:a2:5a:37:db:67:
1a:88:bb:c1:99:64:e0:32:75:29:17:e4:21:31:f4:45:ee:5c:
77:3c:6c:35:14:c6:06:85:95:b8:22:91:6a:29:9a:c8:d4:8d:
f5:56:c9:be:5f:84:95:68:5f:0f:7f:81:41:4a:c7:be:88:03:
3e:48:84:be:3e:8d:6b:c5:b6:f9:1c:f3:fe:b4:79:50:8d:fe:
f3:14:df:fa:f8:3c:9f:32:f8:c1:f8:aa:a2:08:eb:f8:71:53:
cc:87:7e:2d:ed:05:09:23:f0:a3:43:30:17:36:12:19:a3:be:
51:51:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:28 2026 by rpki-client