Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/_zgHSNgwAnxGvAKMk5omum7rI60.roa
File: _zgHSNgwAnxGvAKMk5omum7rI60.roa (raw, json)
Hash identifier: 1Jz0MZ9os9Ya4CaMGO/CHJzjBQRQzLAYl4B2MjOsxFw=
Subject key identifier: FF:38:07:48:D8:30:02:7C:46:BC:02:8C:93:9A:26:BA:6E:EB:23:AD
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 019D66979EBE0A329FA24B29BA3582FF7B18
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/_zgHSNgwAnxGvAKMk5omum7rI60.roa
Signing time: Tue 07 Apr 2026 06:18:25 +0000
ROA not before: Tue 07 Apr 2026 06:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 719
IP address blocks: 31.7.16.0/20 maxlen: 20
46.182.112.0/21 maxlen: 21
62.142.0.0/16 maxlen: 16
62.148.192.0/19 maxlen: 19
62.216.96.0/19 maxlen: 19
62.240.64.0/19 maxlen: 19
62.248.128.0/17 maxlen: 17
77.109.192.0/18 maxlen: 18
80.81.160.0/19 maxlen: 19
80.88.176.0/20 maxlen: 20
80.186.0.0/16 maxlen: 16
80.248.96.0/19 maxlen: 19
81.197.0.0/16 maxlen: 16
81.209.0.0/17 maxlen: 17
82.103.192.0/18 maxlen: 18
82.118.192.0/19 maxlen: 19
82.141.64.0/18 maxlen: 18
82.215.192.0/18 maxlen: 18
83.245.128.0/17 maxlen: 17
84.230.0.0/15 maxlen: 15
85.76.0.0/14 maxlen: 14
85.156.0.0/16 maxlen: 16
85.157.0.0/16 maxlen: 16
85.217.0.0/17 maxlen: 17
88.112.0.0/14 maxlen: 14
91.152.0.0/13 maxlen: 13
94.22.0.0/16 maxlen: 16
109.232.80.0/21 maxlen: 21
139.97.0.0/16 maxlen: 16
192.77.120.0/22 maxlen: 22
192.102.32.0/24 maxlen: 24
192.102.36.0/24 maxlen: 24
192.102.37.0/24 maxlen: 24
192.102.38.0/24 maxlen: 24
192.102.39.0/24 maxlen: 24
192.102.40.0/24 maxlen: 24
192.102.41.0/24 maxlen: 24
192.102.42.0/24 maxlen: 24
192.102.49.0/24 maxlen: 24
192.102.50.0/24 maxlen: 24
192.126.1.0/24 maxlen: 24
192.126.23.0/24 maxlen: 24
192.126.24.0/24 maxlen: 24
192.126.35.0/24 maxlen: 24
192.126.44.0/24 maxlen: 24
192.126.46.0/24 maxlen: 24
192.163.32.0/19 maxlen: 19
192.163.64.0/18 maxlen: 18
192.163.128.0/19 maxlen: 19
192.175.45.0/24 maxlen: 24
193.64.0.0/15 maxlen: 15
193.66.0.0/16 maxlen: 16
193.94.0.0/16 maxlen: 16
193.184.0.0/15 maxlen: 15
193.199.0.0/16 maxlen: 16
193.229.0.0/16 maxlen: 16
194.86.0.0/16 maxlen: 16
194.136.0.0/16 maxlen: 16
194.157.0.0/16 maxlen: 16
194.188.0.0/16 maxlen: 16
194.211.0.0/16 maxlen: 16
194.240.0.0/15 maxlen: 15
195.16.192.0/19 maxlen: 19
195.74.0.0/19 maxlen: 19
195.170.128.0/19 maxlen: 19
195.197.0.0/16 maxlen: 16
195.218.64.0/19 maxlen: 19
195.236.0.0/15 maxlen: 15
195.238.192.0/19 maxlen: 19
195.255.0.0/16 maxlen: 16
212.38.224.0/20 maxlen: 20
212.38.240.0/24 maxlen: 24
212.38.241.0/24 maxlen: 24
212.38.242.0/24 maxlen: 24
212.38.243.0/24 maxlen: 24
212.38.244.0/24 maxlen: 24
212.50.192.0/19 maxlen: 19
212.54.0.0/19 maxlen: 19
212.63.0.0/19 maxlen: 19
212.226.0.0/16 maxlen: 16
212.246.0.0/16 maxlen: 16
213.130.224.0/19 maxlen: 19
213.161.32.0/19 maxlen: 19
213.169.0.0/19 maxlen: 19
213.192.128.0/18 maxlen: 18
213.250.64.0/18 maxlen: 18
217.24.96.0/20 maxlen: 20
217.25.96.0/20 maxlen: 20
217.77.192.0/20 maxlen: 20
217.152.0.0/16 maxlen: 16
2001:671::/48 maxlen: 48
2001:671:1::/48 maxlen: 48
2001:671:fc00::/40 maxlen: 40
2001:671:fd00::/40 maxlen: 40
2001:671:fe00::/40 maxlen: 40
2001:671:ff00::/40 maxlen: 40
2001:998::/29 maxlen: 32
2001:9f0::/29 maxlen: 29
2001:1658::/29 maxlen: 29
2a00:1dd0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:97:9e:be:0a:32:9f:a2:4b:29:ba:35:82:ff:7b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Apr 7 06:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff380748d830027c46bc028c939a26ba6eeb23ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:23:b2:94:5a:11:cf:fa:95:d2:f5:36:2e:
1b:2b:08:bc:a0:6e:ec:4c:d0:92:b9:b8:bb:49:b7:
b1:83:c4:a3:8d:4a:02:84:bf:9e:d9:84:0d:ff:58:
f2:d7:a2:0f:b5:19:79:3a:ba:79:fb:23:14:89:32:
b3:6a:19:11:b6:0f:39:d8:e8:85:be:97:68:bd:e3:
e3:ee:56:dc:cf:4b:20:ed:56:c6:53:ec:b1:5f:b2:
a3:79:e1:3b:b5:35:31:e0:72:ac:95:b0:b8:7e:08:
a6:42:e6:22:4f:d2:46:3e:a7:cc:c5:c9:91:c5:86:
8e:2c:9b:6f:1a:c0:2e:c2:47:f5:e8:b7:55:ec:44:
af:ac:fc:3b:a2:3e:28:93:92:36:a6:18:3d:e9:93:
b3:f3:36:d7:32:08:92:7a:5e:cb:f6:20:4d:84:df:
9e:76:7b:35:46:34:ef:eb:ab:47:18:70:53:6a:5e:
38:5d:a4:60:69:5e:91:4b:d3:51:47:b9:b5:57:a2:
59:86:22:69:32:9a:86:c4:b1:88:15:d5:bb:df:1b:
cb:18:56:c0:8d:fb:5e:26:63:70:8c:27:ea:d3:86:
2d:16:a6:8e:cf:d4:53:55:a3:9f:f0:b9:b7:2b:b1:
f8:78:c4:c5:87:1a:f6:40:e3:66:8d:be:4a:ac:1d:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:07:48:D8:30:02:7C:46:BC:02:8C:93:9A:26:BA:6E:EB:23:AD
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/_zgHSNgwAnxGvAKMk5omum7rI60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.16.0/20
46.182.112.0/21
62.142.0.0/16
62.148.192.0/19
62.216.96.0/19
62.240.64.0/19
62.248.128.0/17
77.109.192.0/18
80.81.160.0/19
80.88.176.0/20
80.186.0.0/16
80.248.96.0/19
81.197.0.0/16
81.209.0.0/17
82.103.192.0/18
82.118.192.0/19
82.141.64.0/18
82.215.192.0/18
83.245.128.0/17
84.230.0.0/15
85.76.0.0/14
85.156.0.0/15
85.217.0.0/17
88.112.0.0/14
91.152.0.0/13
94.22.0.0/16
109.232.80.0/21
139.97.0.0/16
192.77.120.0/22
192.102.32.0/24
192.102.36.0-192.102.42.255
192.102.49.0-192.102.50.255
192.126.1.0/24
192.126.23.0-192.126.24.255
192.126.35.0/24
192.126.44.0/24
192.126.46.0/24
192.163.32.0-192.163.159.255
192.175.45.0/24
193.64.0.0-193.66.255.255
193.94.0.0/16
193.184.0.0/15
193.199.0.0/16
193.229.0.0/16
194.86.0.0/16
194.136.0.0/16
194.157.0.0/16
194.188.0.0/16
194.211.0.0/16
194.240.0.0/15
195.16.192.0/19
195.74.0.0/19
195.170.128.0/19
195.197.0.0/16
195.218.64.0/19
195.236.0.0/15
195.238.192.0/19
195.255.0.0/16
212.38.224.0-212.38.244.255
212.50.192.0/19
212.54.0.0/19
212.63.0.0/19
212.226.0.0/16
212.246.0.0/16
213.130.224.0/19
213.161.32.0/19
213.169.0.0/19
213.192.128.0/18
213.250.64.0/18
217.24.96.0/20
217.25.96.0/20
217.77.192.0/20
217.152.0.0/16
IPv6:
2001:671::/47
2001:671:fc00::/38
2001:998::/29
2001:9f0::/29
2001:1658::/29
2a00:1dd0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:01:9d:f9:88:bd:66:96:35:c0:17:f0:c6:34:48:0d:ed:37:
62:c6:b4:d4:e7:5c:25:70:63:ea:a8:fe:7e:b7:66:f5:dc:8c:
eb:1e:63:86:87:ee:dc:35:b9:0a:57:37:89:43:7d:a1:e6:53:
93:4c:06:a5:18:9f:48:f7:2b:b5:77:4d:a7:71:97:6a:bd:d7:
1b:ac:b2:5e:01:59:ee:cd:f5:f0:34:50:8c:71:98:71:ed:53:
cb:84:d4:b5:21:2b:43:0d:7b:43:43:f2:b2:94:32:aa:c4:98:
0e:07:73:c5:a9:18:fe:ab:3e:88:5b:1e:11:21:c8:89:77:d4:
2c:1c:b6:cb:0b:f9:2b:da:a7:ce:79:72:8f:71:49:fb:fd:39:
01:3f:74:5f:ba:ef:29:ab:a9:ff:ff:cd:19:01:66:09:a7:f1:
ea:e3:87:61:09:77:32:af:a0:ca:9d:66:96:0f:de:b6:de:53:
6c:53:77:b8:e2:81:c3:98:ed:c0:6e:46:b1:e1:d8:23:51:f6:
75:3a:ba:bf:a3:65:9a:d0:1b:ce:60:2e:9d:8f:1e:dc:89:1b:
63:8a:0d:32:ae:ea:4c:47:2d:ec:f6:62:79:47:da:a1:55:b1:
7e:6d:9f:d4:b3:82:56:5d:93:20:64:e5:b7:b7:bc:a9:c6:48:
4d:a5:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:34 2026 by rpki-client