Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V7gikikDOwiL4xkF83MLtxn5IgY.roa
File: V7gikikDOwiL4xkF83MLtxn5IgY.roa (raw, json)
Hash identifier: 5JhEa4SyaX4DYyytu+IlxyVe2wMpCm7OZq1OaEKjsuA=
Subject key identifier: 57:B8:22:92:29:03:3B:08:8B:E3:19:05:F3:73:0B:B7:19:F9:22:06
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F21DBD9FC767A22165A43A149F5283889
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V7gikikDOwiL4xkF83MLtxn5IgY.roa
Signing time: Thu 02 Jul 2026 08:04:44 +0000
ROA not before: Thu 02 Jul 2026 08:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 62.220.110.0/23 maxlen: 24
62.220.120.0/24 maxlen: 24
81.12.50.0/24 maxlen: 24
87.107.112.0/23 maxlen: 24
87.107.114.0/23 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.162.0/23 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.188.0/23 maxlen: 24
87.107.192.0/24 maxlen: 24
87.107.193.0/24 maxlen: 24
87.107.194.0/24 maxlen: 24
87.107.195.0/24 maxlen: 24
87.107.196.0/24 maxlen: 24
87.107.197.0/24 maxlen: 24
87.107.198.0/24 maxlen: 24
87.107.199.0/24 maxlen: 24
87.107.200.0/24 maxlen: 24
87.107.201.0/24 maxlen: 24
87.107.202.0/24 maxlen: 24
87.107.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:db:d9:fc:76:7a:22:16:5a:43:a1:49:f5:28:38:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 2 08:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57b8229229033b088be31905f3730bb719f92206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:cb:a9:d0:b6:0f:d5:f3:8a:fe:f5:4e:e2:
70:ad:52:74:a8:4d:db:0f:b6:bf:5a:a1:05:47:b4:
44:08:9a:1c:85:07:e6:7e:1c:ff:98:94:ce:32:70:
c3:47:03:91:71:6d:50:6c:df:f9:14:de:2c:c4:dc:
40:c9:51:6f:8c:71:68:78:20:de:f1:83:7c:04:38:
94:60:a5:e5:80:6e:c3:ec:f0:95:f2:62:ff:66:af:
be:b3:92:3f:b7:a9:20:8a:29:6c:90:90:b2:15:be:
d6:e6:1e:31:aa:26:6e:83:24:bb:f2:7d:fd:30:0c:
7d:e9:44:bb:3c:f4:7b:43:e1:f1:48:83:38:92:e8:
26:2f:eb:aa:e3:7f:cc:f9:d3:ac:71:17:53:2f:82:
ae:a6:1d:ee:79:e6:be:7b:1f:94:93:47:41:5d:60:
52:6c:db:3d:ac:87:46:e2:b9:9d:f5:09:b3:a1:fa:
3a:10:ef:42:47:96:15:c6:51:e2:62:49:97:1e:ed:
10:4a:6c:5b:3d:a2:d9:17:33:e2:66:86:f1:bc:93:
d5:f3:72:65:d8:8b:30:a5:2d:2d:b6:11:58:a6:e4:
3a:cc:aa:24:a0:ee:80:4b:22:31:5f:bf:02:a0:b6:
1e:a6:2a:7a:14:07:1b:a4:d6:c7:a1:12:c1:de:91:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B8:22:92:29:03:3B:08:8B:E3:19:05:F3:73:0B:B7:19:F9:22:06
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V7gikikDOwiL4xkF83MLtxn5IgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.110.0/23
62.220.120.0/24
81.12.50.0/24
87.107.112.0/22
87.107.160.0/22
87.107.168.0/22
87.107.188.0/23
87.107.192.0-87.107.202.255
87.107.206.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:ff:44:b1:df:b0:ef:ba:36:e0:1d:d2:aa:0d:90:1b:8e:59:
3d:da:1f:35:eb:9f:b5:cc:52:7f:c4:49:99:25:0a:c1:53:f0:
ff:e0:6d:2c:53:2b:f1:38:9c:96:14:d1:dd:81:3e:7a:9d:ba:
01:d3:fb:1b:2b:df:eb:3d:9d:f2:92:79:1f:8a:f7:57:79:ce:
ab:68:ac:40:c1:52:16:e7:1d:ad:37:3a:11:4f:8e:67:df:8a:
61:4f:19:3a:23:6e:30:46:4d:4f:7a:f2:ce:32:03:7e:04:f4:
e2:65:14:8f:b9:66:f8:b7:0b:e8:4e:cb:b4:9d:45:78:18:1a:
21:55:fe:4e:ee:1e:1e:62:7e:15:9b:b9:6e:9b:50:df:a0:e0:
4e:ab:ce:16:cd:17:d1:8a:ae:45:b1:42:53:c8:14:b9:3f:52:
23:63:ff:92:1e:d1:7e:cf:bc:a7:35:db:cb:ba:a7:51:4f:7f:
1a:ee:49:ee:e6:6f:83:ad:fa:73:7b:8f:85:50:7a:a7:21:10:
99:1a:db:45:df:21:48:94:57:98:77:51:1b:43:dc:01:e4:47:
ef:d5:39:bc:4d:ff:b9:0f:9b:87:ed:b1:49:a1:d5:8a:49:4b:
51:c7:8f:90:4d:7e:3c:81:bf:28:f8:3a:50:bc:32:9d:2a:40:
c5:04:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:14 2026 by rpki-client