Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/WQ9fC94F4Xi7_cpqFof2GYSyK7A.roa
File: WQ9fC94F4Xi7_cpqFof2GYSyK7A.roa (raw, json)
Hash identifier: lwu3tdPwdbDqvsR9bj5ErMD0srzPNo1973quxvFNa0U=
Subject key identifier: 59:0F:5F:0B:DE:05:E1:78:BB:FD:CA:6A:16:87:F6:19:84:B2:2B:B0
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0C42D70DF4945C3424757C5EC6D0881AE
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/WQ9fC94F4Xi7_cpqFof2GYSyK7A.roa
Signing time: Mon 21 Sep 2026 13:35:07 +0000
ROA not before: Mon 21 Sep 2026 13:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 62.220.110.0/23 maxlen: 24
62.220.120.0/24 maxlen: 24
81.12.50.0/24 maxlen: 24
87.107.112.0/23 maxlen: 24
87.107.114.0/23 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.162.0/23 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.192.0/24 maxlen: 24
87.107.193.0/24 maxlen: 24
87.107.194.0/24 maxlen: 24
87.107.195.0/24 maxlen: 24
87.107.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:2d:70:df:49:45:c3:42:47:57:c5:ec:6d:08:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 21 13:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=590f5f0bde05e178bbfdca6a1687f61984b22bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:f8:41:a3:26:82:cd:9f:26:df:4e:68:1a:
52:ec:fd:c7:4f:a1:fa:14:ff:3e:e1:5e:58:86:7e:
0a:dc:18:eb:9d:f9:eb:96:32:ae:12:fa:05:ba:a9:
43:89:46:ab:91:2c:57:11:0b:e1:30:81:a3:86:bf:
1c:a4:9a:1a:95:29:62:52:cf:e8:6a:c9:3a:e2:ac:
56:53:da:82:e3:95:4d:ae:0e:2d:1d:0d:52:5c:d6:
86:ae:99:d7:c4:74:e5:0d:13:50:d5:85:e9:e0:e6:
69:95:03:81:83:bd:27:23:32:b2:d8:b6:77:97:29:
74:e1:04:ed:42:5c:5a:e6:74:eb:33:ec:05:1f:9a:
59:16:6c:ab:37:02:3d:b4:06:60:ec:26:df:49:65:
27:46:e0:73:03:6f:0b:cb:93:50:3b:e6:98:e6:58:
74:80:56:53:74:62:7d:91:67:40:3c:f0:67:06:e5:
c6:23:b0:62:f2:52:83:cc:3c:08:b8:e2:60:c4:46:
8d:e3:5d:fb:27:1c:12:fd:ab:3f:32:cc:5f:7a:50:
7d:91:13:5e:2e:34:56:e1:16:2f:07:b3:2e:cf:1e:
c2:ed:88:a0:7a:72:84:9a:2b:8b:8c:91:19:b7:2a:
f1:48:3b:75:b0:b3:a7:59:a4:40:7a:73:65:58:4f:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:5F:0B:DE:05:E1:78:BB:FD:CA:6A:16:87:F6:19:84:B2:2B:B0
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/WQ9fC94F4Xi7_cpqFof2GYSyK7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.110.0/23
62.220.120.0/24
81.12.50.0/24
87.107.112.0/22
87.107.160.0/22
87.107.168.0/22
87.107.192.0/22
87.107.206.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:c9:70:20:23:50:67:44:ad:f3:4b:98:de:9e:d2:ea:06:af:
97:ec:c5:e8:43:e4:dd:5d:2f:5f:a5:32:ef:d8:25:a1:0a:f4:
61:e0:27:18:33:0b:d2:05:6f:bc:92:24:a9:01:6b:4b:94:1e:
70:56:d1:36:57:46:a0:2c:58:e0:bc:b1:94:e2:1c:a7:99:9a:
ef:1d:ee:45:c9:22:3f:34:f4:c9:ca:5c:24:3a:03:90:a0:25:
27:05:79:34:34:de:f0:f6:ae:21:27:18:cf:3c:bf:92:4f:0f:
94:74:e8:04:43:89:b0:8e:0b:3a:00:df:cb:53:4a:9b:d6:2a:
5d:dd:33:a0:f0:d2:e0:d2:d5:d7:d3:b0:5a:bf:37:85:3a:cc:
4d:ff:a4:97:11:bf:83:19:14:f1:81:48:22:91:40:33:a4:13:
71:8c:23:c3:53:9d:0a:97:40:c1:94:a9:33:7c:13:b9:42:74:
5f:d7:c3:9b:8f:f8:86:79:b0:2e:1d:f0:6d:02:b0:21:cc:6a:
a2:d8:ec:c4:25:64:41:e0:72:aa:c0:eb:de:57:bd:48:65:bb:
a2:d9:86:40:84:30:6b:42:7c:f2:4c:47:07:5c:ae:f9:ce:fb:
b0:73:95:9a:de:e1:ed:69:dc:06:99:45:74:78:a4:94:c1:b6:
a3:e3:49:36
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAaDELXDfSUXDQkdXxextCIGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwOTIxMTMzNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTBmNWYwYmRlMDVlMTc4YmJmZGNhNmExNjg3ZjYxOTg0YjIyYmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJz4QaMmgs2fJt9OaBpS7P3HT6H6
FP8+4V5Yhn4K3BjrnfnrljKuEvoFuqlDiUarkSxXEQvhMIGjhr8cpJoalSliUs/o
ask64qxWU9qC45VNrg4tHQ1SXNaGrpnXxHTlDRNQ1YXp4OZplQOBg70nIzKy2LZ3
lyl04QTtQlxa5nTrM+wFH5pZFmyrNwI9tAZg7CbfSWUnRuBzA28Ly5NQO+aY5lh0
gFZTdGJ9kWdAPPBnBuXGI7Bi8lKDzDwIuOJgxEaN4137JxwS/as/MsxfelB9kRNe
LjRW4RYvB7Muzx7C7YigenKEmiuLjJEZtyrxSDt1sLOnWaRAenNlWE/p6QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFFkPXwveBeF4u/3KahaH9hmEsiuwMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvV1E5ZkM5NEY0WGk3X2NwcUZvZjJHWVN5SzdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBPtxuAwQA
Ptx4AwQAUQwyAwQCV2twAwQCV2ugAwQCV2uoAwQCV2vAAwQBV2vOMA0GCSqGSIb3
DQEBCwUAA4IBAQAqyXAgI1BnRK3zS5jentLqBq+X7MXoQ+TdXS9fpTLv2CWhCvRh
4CcYMwvSBW+8kiSpAWtLlB5wVtE2V0agLFjgvLGU4hynmZrvHe5FySI/NPTJylwk
OgOQoCUnBXk0NN7w9q4hJxjPPL+STw+UdOgEQ4mwjgs6AN/LU0qb1ipd3TOg8NLg
0tXX07BavzeFOsxN/6SXEb+DGRTxgUgikUAzpBNxjCPDU50Kl0DBlKkzfBO5QnRf
18Obj/iGebAuHfBtArAhzGqi2OzEJWRB4HKqwOveV71IZbui2YZAhDBrQnzyTEcH
XK75zvuwc5Wa3uHtadwGmUV0eKSUwbaj40k2
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:09:42 2026 by rpki-client