Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/OXaM25AilOPaZ6FylobGv1RbWZY.roa
File: OXaM25AilOPaZ6FylobGv1RbWZY.roa (raw, json)
Hash identifier: GUzvFqzyqxeo4s3HjNKVJvkfcUgeMz8IFUPF2eR0Mxk=
Subject key identifier: 39:76:8C:DB:90:22:94:E3:DA:67:A1:72:96:86:C6:BF:54:5B:59:96
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F654A1E28C5E4CFD1B6C3311499237731
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/OXaM25AilOPaZ6FylobGv1RbWZY.roa
Signing time: Wed 15 Jul 2026 10:19:44 +0000
ROA not before: Wed 15 Jul 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 62.220.112.0/21 maxlen: 21
62.220.113.0/24 maxlen: 24
62.220.116.0/24 maxlen: 24
62.220.118.0/23 maxlen: 24
81.12.0.0/21 maxlen: 24
81.12.32.0/21 maxlen: 24
81.12.40.0/21 maxlen: 24
81.12.44.0/24 maxlen: 24
81.12.54.0/23 maxlen: 24
81.12.56.0/23 maxlen: 24
81.12.60.0/22 maxlen: 24
81.12.64.0/18 maxlen: 24
81.12.95.0/24 maxlen: 24
87.107.16.0/21 maxlen: 24
87.107.28.0/22 maxlen: 24
87.107.32.0/23 maxlen: 23
87.107.36.0/22 maxlen: 24
87.107.44.0/22 maxlen: 24
87.107.48.0/23 maxlen: 24
87.107.56.0/21 maxlen: 24
87.107.64.0/22 maxlen: 24
87.107.72.0/21 maxlen: 24
87.107.80.0/21 maxlen: 24
87.107.92.0/22 maxlen: 24
87.107.100.0/22 maxlen: 24
87.107.136.0/21 maxlen: 24
87.107.148.0/22 maxlen: 24
87.107.156.0/22 maxlen: 24
87.107.176.0/21 maxlen: 24
87.107.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:4a:1e:28:c5:e4:cf:d1:b6:c3:31:14:99:23:77:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 15 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39768cdb902294e3da67a1729686c6bf545b5996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:a5:4f:31:46:41:9e:99:0f:99:de:66:c7:
ff:02:78:f9:48:12:c1:1f:68:b3:f7:6a:29:8a:22:
e6:84:0b:1f:b8:3f:21:2b:e6:e8:f2:68:54:1d:db:
24:a3:bc:66:4a:9c:cf:6a:a8:52:3c:ba:c6:9a:62:
ff:59:97:d6:42:ed:5d:10:9f:9e:0a:28:21:52:1a:
79:9f:8f:41:64:a2:6f:d5:9a:64:8d:93:74:26:57:
7b:5f:94:9d:6d:9b:12:32:02:d2:67:f4:01:9f:d5:
97:43:a3:8b:c6:9e:d8:9e:cb:5a:67:a9:62:3e:e9:
c3:a2:74:a7:fb:1e:96:26:cd:bc:26:33:9b:6a:54:
4f:a0:1b:4a:e1:c4:da:89:45:53:19:f3:ac:b7:c2:
81:da:56:0a:c2:89:ac:41:3c:1a:86:55:25:0e:9c:
1a:33:f0:6c:95:36:20:0f:d6:2f:05:0c:5e:0c:03:
a5:a2:fe:8a:5c:3a:63:8b:5b:c5:1a:30:69:8f:45:
36:93:0f:fb:99:ee:14:3b:6e:d3:81:85:6d:a9:cb:
23:ec:a5:d0:61:a0:4b:94:b9:c3:7b:83:15:5d:41:
7c:70:3c:07:50:06:e4:18:49:5c:3e:d3:4b:2c:e0:
17:94:4c:d7:ec:2f:66:7f:38:d6:29:45:5a:45:cb:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:8C:DB:90:22:94:E3:DA:67:A1:72:96:86:C6:BF:54:5B:59:96
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/OXaM25AilOPaZ6FylobGv1RbWZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.112.0/21
81.12.0.0/21
81.12.32.0/20
81.12.54.0-81.12.57.255
81.12.60.0-81.12.127.255
87.107.16.0/21
87.107.28.0-87.107.33.255
87.107.36.0/22
87.107.44.0-87.107.49.255
87.107.56.0-87.107.67.255
87.107.72.0-87.107.87.255
87.107.92.0/22
87.107.100.0/22
87.107.136.0/21
87.107.148.0/22
87.107.156.0/22
87.107.176.0-87.107.187.255
Signature Algorithm: sha256WithRSAEncryption
c4:d4:cc:1a:8b:29:e5:6e:d1:8e:2d:7f:61:7f:67:78:3b:a0:
d7:32:cf:90:ac:ae:d4:59:2e:22:3c:cc:99:a8:ca:6c:ee:b4:
c1:d0:8d:35:58:a7:8f:8b:58:02:33:c7:cf:f6:b4:00:73:3f:
b8:85:be:19:53:6a:b2:60:72:d2:23:ee:ab:8b:04:e2:1a:c9:
68:32:13:3d:7a:01:f3:f8:47:6e:60:63:e0:77:63:12:96:f8:
02:ae:7d:34:93:c1:40:aa:75:fd:c5:c3:05:4a:85:67:9c:ce:
de:d6:cd:da:b4:72:2c:52:66:32:c2:c7:cd:2a:29:fb:92:05:
44:c6:f4:1d:87:ff:60:fc:43:c3:5a:65:62:4d:50:3e:e8:31:
2d:c8:65:2c:23:89:fd:0b:6c:f1:10:cc:b3:cb:9b:0a:c7:0a:
25:a5:d0:15:eb:23:82:01:64:10:ce:dc:b1:3b:d8:73:5b:c9:
44:8f:1f:0c:23:df:84:29:cc:2b:7d:00:a9:05:4e:86:f9:18:
77:e2:b1:64:09:69:69:8e:7f:dd:cf:4b:71:85:79:a4:02:7f:
b8:e8:5d:f2:05:f8:0c:e7:41:ec:e8:72:f7:0c:3e:da:c5:71:
86:d0:fd:8b:47:90:59:ed:db:61:65:56:f6:85:4b:21:e8:fe:
86:99:7e:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:16 2026 by rpki-client