Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_L59jecLjJ0uTotDkkIGCjIWXfU.roa
File: _L59jecLjJ0uTotDkkIGCjIWXfU.roa (raw, json)
Hash identifier: cnj6QRI6ukwyxIkdQke5AkCgqz3p5nGLK26hHcls8m8=
Subject key identifier: FC:BE:7D:8D:E7:0B:8C:9D:2E:4E:8B:43:92:42:06:0A:32:16:5D:F5
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F2C8C5B502875530BC025F3FCBB957755
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_L59jecLjJ0uTotDkkIGCjIWXfU.roa
Signing time: Sat 04 Jul 2026 09:53:43 +0000
ROA not before: Sat 04 Jul 2026 09:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204544
IP address blocks: 62.220.124.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:8c:5b:50:28:75:53:0b:c0:25:f3:fc:bb:95:77:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 4 09:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcbe7d8de70b8c9d2e4e8b439242060a32165df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:3e:51:22:6e:d3:42:fb:1a:4f:38:85:20:
12:84:93:6c:01:25:11:db:8e:72:67:21:70:71:8f:
29:ea:49:d9:a4:5a:8e:cc:f6:11:14:bb:4f:7a:b6:
18:4c:9c:4a:24:21:1e:73:f0:6d:40:bd:ae:33:c4:
7a:65:77:5d:76:1e:a8:74:5d:0b:34:04:00:a1:76:
3a:c9:0c:3e:e0:03:9e:6a:0d:c9:a9:73:38:3c:ed:
11:a1:e6:c0:72:70:26:20:c7:d9:38:75:8d:cf:40:
85:19:82:79:ea:06:24:86:02:ee:be:94:04:1b:67:
83:2e:5a:1f:e8:e7:b4:09:8d:06:56:92:83:e3:10:
6a:d7:6a:28:6e:4e:4e:e6:4f:a6:c6:6c:e5:7b:54:
f8:dc:76:23:95:94:d2:00:70:3f:a4:3d:ed:1c:b4:
7b:26:f0:6d:3c:f7:41:a3:1b:43:cd:79:16:dd:25:
4d:10:d9:16:ef:3e:18:15:4e:3d:15:11:59:63:6c:
1f:12:fd:f9:6c:cf:24:f7:98:ee:4f:ff:ee:80:42:
92:0d:57:bd:b2:90:88:3d:7b:40:b9:80:e6:33:dd:
d3:18:a1:31:37:1a:f3:d5:df:5b:11:a8:d5:87:fd:
14:77:e2:42:b9:64:c3:69:a1:3c:17:e7:4e:8f:98:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:7D:8D:E7:0B:8C:9D:2E:4E:8B:43:92:42:06:0A:32:16:5D:F5
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/_L59jecLjJ0uTotDkkIGCjIWXfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.124.0/22
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
95:91:82:80:81:d9:e7:b9:de:64:d6:cb:3e:6c:d6:cf:f6:74:
97:1c:93:6a:25:ca:b4:ca:a3:41:d0:63:68:3e:00:a6:0e:88:
d3:11:8c:ba:dc:66:84:54:8a:bf:d3:6e:2d:b6:07:94:b5:8e:
6e:b7:ea:53:b3:50:86:b4:70:bd:5a:7d:77:ec:c8:6f:64:19:
78:f7:ac:b9:41:37:27:47:3c:df:86:cf:1f:8a:87:05:5c:d1:
8f:b3:f6:67:47:34:b8:c8:9f:ee:89:f5:de:e7:19:45:b5:ec:
87:4d:66:24:16:6c:2a:bf:13:fb:64:75:a7:1b:94:72:6f:9e:
a6:2a:10:09:e2:d6:52:bf:a8:89:63:10:19:6c:f1:e0:b1:56:
40:11:2f:1b:6d:31:08:7f:fe:e0:36:f9:38:04:13:aa:10:ec:
68:cc:c9:3e:8b:8e:59:f3:0a:c6:64:8d:05:57:45:2a:ae:4a:
24:c5:6a:a2:0c:c0:6a:71:52:7b:d0:35:d0:68:9a:70:cb:9f:
b5:53:11:61:3b:e2:0c:f0:b0:42:8c:6f:13:ac:7a:a4:f6:9a:
e8:c9:74:19:5f:51:0c:55:40:19:d9:b8:73:4a:07:df:1d:00:
5e:8f:cb:9f:34:8a:07:6d:a8:0a:f3:29:35:ff:5c:2e:c4:5e:
9e:24:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:22 2026 by rpki-client