Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uiCqR1DJaWijzdciFRFsaC3-m08.roa
File: uiCqR1DJaWijzdciFRFsaC3-m08.roa (raw, json)
Hash identifier: K/t9JyPo0H4cmtBoZ59wvhq6dFsSYu4p57Ko9X9g4Ck=
Subject key identifier: BA:20:AA:47:50:C9:69:68:A3:CD:D7:22:15:11:6C:68:2D:FE:9B:4F
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F2C8D45C5521A7D7D3D6855A9BC451178
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uiCqR1DJaWijzdciFRFsaC3-m08.roa
Signing time: Sat 04 Jul 2026 09:54:43 +0000
ROA not before: Sat 04 Jul 2026 09:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51026
IP address blocks: 62.220.122.0/23 maxlen: 24
62.220.124.0/23 maxlen: 24
62.220.126.0/24 maxlen: 24
62.220.127.0/24 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.24.0/24 maxlen: 24
81.12.25.0/24 maxlen: 24
81.12.26.0/24 maxlen: 24
81.12.27.0/24 maxlen: 24
81.12.30.0/24 maxlen: 24
81.12.31.0/24 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.108.0/23 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/24 maxlen: 24
87.107.153.0/24 maxlen: 24
87.107.166.0/24 maxlen: 24
87.107.167.0/24 maxlen: 24
87.107.174.0/24 maxlen: 24
87.107.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:8d:45:c5:52:1a:7d:7d:3d:68:55:a9:bc:45:11:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jul 4 09:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba20aa4750c96968a3cdd72215116c682dfe9b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:b7:98:b5:3f:4a:10:0f:a9:a5:e5:0c:25:
20:9a:fa:70:96:be:b0:f9:95:ba:0e:54:cc:bc:5c:
06:f4:a3:71:8e:2d:4d:0d:c3:87:a4:ce:eb:ac:df:
a0:cd:70:4b:d4:45:d0:91:f6:3e:38:ba:2d:46:2d:
b7:97:bc:d3:14:aa:1d:62:ba:82:3b:ee:89:26:ef:
9a:b9:f6:0c:b5:4c:7f:08:79:09:5e:0d:8f:9e:11:
57:9c:b1:2a:92:6d:ba:f9:96:9a:fd:57:65:4b:31:
cf:15:30:a0:9e:4f:57:d2:86:1f:b4:3c:a0:cb:70:
d7:c6:bd:26:cd:15:b3:fd:02:9d:72:23:6d:b4:9a:
03:5a:91:48:c3:20:6b:3d:1f:00:bd:8d:ab:dc:ed:
0d:f0:a2:80:9b:17:d3:2d:6f:bf:4e:49:d1:83:74:
ed:5c:21:21:01:65:d2:2c:e4:ec:91:55:a7:81:56:
a9:6b:18:f7:94:6b:01:39:84:82:aa:88:5f:95:cd:
c8:57:83:ee:f7:9d:87:76:b3:8b:bf:f8:aa:a1:2c:
c6:3b:29:2a:c4:0e:7a:2b:a4:90:51:cc:58:59:3f:
0e:c2:99:25:6d:e1:e7:9d:f3:8f:73:8b:00:d0:cf:
04:7c:0f:89:41:c3:53:79:ba:9d:e7:04:4a:c2:40:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:AA:47:50:C9:69:68:A3:CD:D7:22:15:11:6C:68:2D:FE:9B:4F
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uiCqR1DJaWijzdciFRFsaC3-m08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.122.0-62.220.127.255
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.108.0/22
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
89:ec:68:36:46:9a:99:db:09:f4:81:d4:78:64:40:47:1d:87:
4b:25:d0:d0:62:31:46:03:ac:31:54:a4:ab:d4:ea:63:99:72:
39:46:0e:3b:38:f1:1e:13:47:a4:36:88:1f:6e:9d:06:c1:2b:
13:c3:a0:84:48:df:30:d4:81:19:ff:a7:d4:55:23:9c:4d:1d:
f2:d6:45:6e:7d:c8:67:20:39:6e:0a:98:e3:d9:a8:80:3a:f3:
db:3c:f5:60:08:81:b7:43:03:ec:8b:d2:46:14:63:9f:4e:f6:
f7:59:3b:b5:bf:ce:f9:6f:2a:d6:eb:d9:30:39:03:4d:35:78:
8d:a4:1c:7e:a9:c8:61:cb:bd:21:0f:dd:65:07:7b:71:de:85:
d8:68:dd:b8:56:c3:50:79:b9:90:0f:9a:b1:cd:01:1e:2e:3d:
cf:93:67:39:fa:28:31:15:fe:2a:8f:85:ae:39:82:23:c3:c3:
29:06:00:76:9a:c1:07:b0:84:89:ed:1d:a8:74:82:8a:08:9a:
18:ad:a1:0e:4e:03:75:93:99:43:55:70:ce:55:50:c5:b4:58:
c7:70:1d:7d:02:85:64:8a:50:6d:9a:10:a1:92:81:5f:dc:a6:
7b:fe:40:9d:bd:1a:f3:59:18:f3:37:34:c8:9f:86:b8:f6:42:
81:ef:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:26 2026 by rpki-client