Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zD3Dk7tiwYbqOTEOMC4CUk5BqGk.roa
File: zD3Dk7tiwYbqOTEOMC4CUk5BqGk.roa (raw, json)
Hash identifier: MNFZRoQVdLQbhSeYkBTkYX1XesxsnfMivHmspFuqCg8=
Subject key identifier: CC:3D:C3:93:BB:62:C1:86:EA:39:31:0E:30:2E:02:52:4E:41:A8:69
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019EA1048B28EB28F8A1919DD8D161FAC07E
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zD3Dk7tiwYbqOTEOMC4CUk5BqGk.roa
Signing time: Sun 07 Jun 2026 07:38:09 +0000
ROA not before: Sun 07 Jun 2026 07:38:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/23 maxlen: 23
31.170.50.0/23 maxlen: 23
31.170.52.0/23 maxlen: 23
31.170.54.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
31.170.56.0/23 maxlen: 23
31.170.58.0/23 maxlen: 23
31.170.60.0/22 maxlen: 22
37.49.148.0/24 maxlen: 24
94.74.128.0/23 maxlen: 23
94.74.128.0/24 maxlen: 24
94.74.129.0/24 maxlen: 24
94.74.130.0/23 maxlen: 23
94.74.132.0/22 maxlen: 22
94.74.136.0/24 maxlen: 24
94.74.138.0/23 maxlen: 23
94.74.141.0/24 maxlen: 24
94.74.142.0/23 maxlen: 23
94.74.144.0/24 maxlen: 24
94.74.146.0/24 maxlen: 24
94.74.148.0/23 maxlen: 23
94.74.150.0/23 maxlen: 23
94.74.152.0/22 maxlen: 22
94.74.160.0/22 maxlen: 22
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.168.0/23 maxlen: 24
94.74.170.0/24 maxlen: 24
94.74.172.0/24 maxlen: 24
94.74.174.0/23 maxlen: 23
94.74.176.0/22 maxlen: 22
94.74.180.0/23 maxlen: 23
94.74.182.0/23 maxlen: 23
94.74.186.0/23 maxlen: 23
94.74.187.0/24 maxlen: 24
94.74.188.0/23 maxlen: 23
94.74.190.0/23 maxlen: 23
94.74.191.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.138.0/23 maxlen: 23
176.46.141.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/23 maxlen: 23
176.46.152.0/22 maxlen: 22
176.46.156.0/23 maxlen: 23
176.46.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:04:8b:28:eb:28:f8:a1:91:9d:d8:d1:61:fa:c0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jun 7 07:38:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc3dc393bb62c186ea39310e302e02524e41a869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:ad:49:34:a4:fd:d5:0b:fc:d8:22:79:86:
16:ca:35:5b:0e:8b:af:f3:a8:3a:66:61:3e:2b:4d:
f5:c3:91:6a:af:40:27:7a:44:e4:6a:7d:29:1f:c8:
ea:7e:bd:85:de:d4:f8:f3:d2:bd:c1:0f:dd:dc:3b:
b7:1e:3e:ac:cf:00:db:5a:d0:46:c8:f3:11:e8:f4:
1b:6a:44:4a:f6:96:7f:01:5b:0a:62:60:0d:0d:29:
c0:20:58:99:a1:d0:50:87:2a:ed:b0:8e:8f:37:6a:
20:e0:07:3a:50:47:e5:35:86:2e:bd:3d:83:d0:41:
7e:a7:9d:65:ca:a9:07:81:e5:4f:64:0b:29:82:f7:
48:96:02:a9:51:63:00:95:cf:66:8e:53:c2:d7:a1:
fa:76:9c:b3:e1:25:c7:87:b9:8c:94:3f:7b:2f:9a:
f4:63:15:03:80:25:f8:6f:d3:62:3a:47:09:54:fc:
bb:66:99:02:7a:c5:89:e0:88:79:7f:06:f3:8b:63:
2b:e2:5f:c3:61:f2:8e:2c:e6:81:aa:60:74:41:42:
d6:21:94:78:53:a3:10:e6:9c:f8:be:fb:ad:e1:a4:
c9:e7:12:35:29:51:eb:9c:a1:cc:53:b7:bf:5a:01:
38:b5:8b:6f:50:1f:e4:33:e8:ea:f6:a4:9e:bd:6a:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:C3:93:BB:62:C1:86:EA:39:31:0E:30:2E:02:52:4E:41:A8:69
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zD3Dk7tiwYbqOTEOMC4CUk5BqGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.148.0/24
94.74.128.0-94.74.136.255
94.74.138.0/23
94.74.141.0-94.74.144.255
94.74.146.0/24
94.74.148.0-94.74.155.255
94.74.160.0/22
94.74.165.0-94.74.170.255
94.74.172.0/24
94.74.174.0-94.74.183.255
94.74.186.0-94.74.191.255
176.46.134.0/24
176.46.138.0/23
176.46.141.0/24
176.46.144.0/24
176.46.147.0-176.46.149.255
176.46.152.0-176.46.158.255
Signature Algorithm: sha256WithRSAEncryption
a5:bb:15:10:96:c1:10:0f:74:a3:f5:b8:c1:bc:d8:97:dd:43:
09:ba:aa:75:9b:ae:48:85:e3:fa:a4:87:24:06:8a:f1:b1:0c:
5d:b6:8d:63:7d:8f:c4:82:2a:57:99:93:69:d7:1d:a9:84:87:
d6:d6:6f:45:d9:ab:31:42:58:cf:6a:2e:4d:0e:a9:92:de:b8:
de:dc:78:fd:62:fd:3f:e0:2d:27:b6:54:ea:9a:96:c5:bd:3d:
ff:0f:ae:8d:b0:da:7d:78:63:e4:6b:4d:26:9d:a0:80:1a:bc:
cb:9b:94:87:f8:40:6a:f1:2e:3d:2e:c0:c3:7c:ad:30:24:d5:
7f:dd:ca:63:50:e6:19:d8:2e:dc:6c:5d:c7:1b:d3:ac:31:67:
74:b4:4b:9c:6a:96:d1:70:2b:53:71:b1:30:59:35:a3:08:bd:
53:f0:43:e9:53:90:bd:05:29:93:f0:62:88:07:b3:a7:90:82:
35:c6:c1:4b:24:12:d4:8d:52:69:66:f5:ac:15:7f:4b:25:ea:
e4:42:d6:35:72:b8:fd:92:0a:e5:16:b2:a7:e7:46:a4:b4:33:
90:54:47:6a:4f:e7:f9:8e:a2:02:d9:9c:5e:8b:40:6f:76:5d:
81:bd:95:d5:e0:73:ff:a6:9c:07:04:08:42:75:0c:2e:2d:92:
0f:aa:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:23 2026 by rpki-client