Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zzYsNhwUVRCH3WqHSpEvx7862jI.roa
File: zzYsNhwUVRCH3WqHSpEvx7862jI.roa (raw, json)
Hash identifier: 5Y/slA+Kgkn5GxTXwt9B5uNKXgQtXRD2g4gn23Etcpc=
Subject key identifier: CF:36:2C:36:1C:14:55:10:87:DD:6A:87:4A:91:2F:C7:BF:3A:DA:32
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A0C447FD031582A89AF4651DE64DAB1D6F
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zzYsNhwUVRCH3WqHSpEvx7862jI.roa
Signing time: Mon 21 Sep 2026 14:04:07 +0000
ROA not before: Mon 21 Sep 2026 14:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204544
IP address blocks: 62.220.124.0/23 maxlen: 24
62.220.126.0/23 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.30.0/23 maxlen: 24
87.107.0.0/23 maxlen: 24
87.107.2.0/23 maxlen: 24
87.107.4.0/23 maxlen: 24
87.107.6.0/23 maxlen: 24
87.107.8.0/23 maxlen: 24
87.107.128.0/22 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/23 maxlen: 24
87.107.160.0/23 maxlen: 24
87.107.166.0/23 maxlen: 24
87.107.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:fd:03:15:82:a8:9a:f4:65:1d:e6:4d:ab:1d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Sep 21 14:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf362c361c14551087dd6a874a912fc7bf3ada32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:9e:b0:39:b1:be:ef:61:1d:a1:f5:3a:e4:
2a:6f:26:40:c8:46:eb:bd:1a:f0:38:7c:3c:27:bd:
0b:a8:43:81:07:f6:fb:07:6a:5a:c5:b1:83:5c:47:
32:ad:dc:90:02:e6:15:c7:ec:70:d0:dd:fa:0f:b6:
cc:f7:6d:21:4b:44:61:9b:ce:14:63:80:10:cd:83:
13:0a:6f:5f:72:52:f3:d8:c2:31:0e:7c:08:da:e3:
32:b1:0d:38:08:00:1e:4d:2e:c1:50:c3:4c:00:50:
97:1e:71:f6:f3:f2:31:40:e5:ea:e9:75:93:74:f1:
30:09:0d:01:f9:df:04:8c:72:1f:4a:01:16:8e:ae:
fe:3c:c7:a0:b2:d5:74:b1:fb:a6:ba:58:e3:4a:e3:
46:a8:f4:32:ee:63:b4:65:cb:03:bd:00:47:9e:80:
5d:bc:de:ab:c2:ca:80:75:9b:4e:29:56:68:83:e4:
84:ba:c7:ac:55:09:72:12:62:e4:de:00:51:02:cd:
c8:92:93:3d:31:d2:56:d0:b5:3d:49:03:b3:af:61:
00:46:2c:d7:2b:68:2e:15:9b:42:92:ae:5f:a1:33:
9a:ab:d1:01:c9:ed:17:96:77:50:a2:eb:34:5a:ee:
70:ed:23:9d:55:cf:3a:45:57:23:8a:57:f1:64:f4:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:36:2C:36:1C:14:55:10:87:DD:6A:87:4A:91:2F:C7:BF:3A:DA:32
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zzYsNhwUVRCH3WqHSpEvx7862jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.124.0/22
81.12.24.0/22
81.12.30.0/23
87.107.0.0-87.107.9.255
87.107.128.0/22
87.107.144.0/24
87.107.152.0/23
87.107.160.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
62:f6:f2:31:45:1d:12:43:3c:d8:aa:8a:0f:68:fe:b6:a4:e2:
99:bc:0d:28:21:cd:d6:17:f6:9e:fb:3a:fd:74:36:d6:85:a6:
32:90:93:e2:2a:00:83:ba:0f:7d:a0:36:96:1b:21:cf:9b:a2:
e2:6c:6d:82:34:d7:ba:be:ca:e3:c4:f1:61:7d:3f:be:5b:36:
73:80:d8:e7:73:2d:e5:81:df:48:81:76:a6:a1:48:f4:8c:c3:
43:d4:f4:7d:61:ee:62:ca:37:7b:f9:1d:8d:32:60:c4:95:f6:
8f:d2:72:ff:d2:ff:c8:9c:7e:7b:a8:f3:36:ae:82:3c:65:dd:
49:6a:37:94:ba:52:64:7d:8d:91:19:91:f1:3c:24:61:5f:f6:
fc:70:41:5c:da:07:93:c2:e1:83:4e:d9:54:7f:7b:a0:33:31:
03:97:86:74:88:01:18:d2:d2:6e:f0:3e:be:17:88:1c:3f:d8:
14:1c:0a:72:d3:05:42:4f:39:a6:7e:29:6e:a6:97:d6:d1:22:
21:be:3d:79:78:79:d0:60:30:58:c7:26:62:a9:4c:84:0d:05:
bd:87:a9:aa:8f:e9:d2:7c:5b:3b:69:f2:23:79:69:94:c1:92:
90:e2:68:6a:13:30:36:90:c5:a5:81:63:c7:19:e7:7d:d6:a9:
15:16:35:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:09:01 2026 by rpki-client