Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zrzevlWk8nYV2cUksY99V_qlScY.roa
File: zrzevlWk8nYV2cUksY99V_qlScY.roa (raw, json)
Hash identifier: AheS3Jn9vrwMVAXUOcAlokukhhQZQDpg2R6hmrLu6ow=
Subject key identifier: CE:BC:DE:BE:55:A4:F2:76:15:D9:C5:24:B1:8F:7D:57:FA:A5:49:C6
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 019FA3F0CA93E5F3948F51CA72A0AAC88503
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zrzevlWk8nYV2cUksY99V_qlScY.roa
Signing time: Mon 27 Jul 2026 14:18:14 +0000
ROA not before: Mon 27 Jul 2026 14:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
76.164.200.0/24 maxlen: 24
76.164.201.0/24 maxlen: 24
76.164.202.0/24 maxlen: 24
76.164.203.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
95.133.245.0/24 maxlen: 24
95.133.247.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.121.48.0/24 maxlen: 24
103.121.49.0/24 maxlen: 24
103.126.50.0/24 maxlen: 24
103.126.51.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
162.249.124.0/24 maxlen: 24
162.249.125.0/24 maxlen: 24
162.249.126.0/24 maxlen: 24
162.249.127.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
203.14.32.0/24 maxlen: 24
203.25.108.0/24 maxlen: 24
205.237.109.0/24 maxlen: 24
205.237.110.0/24 maxlen: 24
205.237.111.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
2a12:3200:5000::/36 maxlen: 36
2a12:3200:6000::/36 maxlen: 36
2a12:3200:7000::/36 maxlen: 36
2a12:3200:8000::/36 maxlen: 36
2a12:3200:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:f0:ca:93:e5:f3:94:8f:51:ca:72:a0:aa:c8:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jul 27 14:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cebcdebe55a4f27615d9c524b18f7d57faa549c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:38:40:79:ae:5d:1e:38:8a:1d:dd:76:e0:
5d:6d:0b:77:2c:64:6d:16:64:2e:b2:22:bf:18:0a:
81:ac:b3:af:21:96:d7:d5:bf:e7:9c:7a:1f:4c:e3:
65:38:0b:15:37:df:34:d0:6e:ad:3d:a3:4d:d7:76:
33:69:b6:65:66:1c:bd:1c:dc:37:c0:bc:8d:26:77:
9f:7f:f4:0e:f0:75:b0:5d:9a:d7:dd:9c:cd:14:d5:
a7:95:f8:25:78:3c:44:bf:f8:49:d3:44:13:e5:9d:
05:30:f4:82:5d:21:91:50:20:70:7e:28:33:8e:6e:
4d:3a:c1:f3:99:ed:b0:48:94:d2:6f:4c:25:24:58:
29:eb:df:f1:f2:c5:71:ca:5f:0a:91:63:bf:4c:ff:
53:0a:58:ac:26:8c:70:ff:d5:70:f5:64:de:e6:aa:
34:cc:d4:ec:aa:fc:e4:d2:6b:d4:d7:0a:7e:b4:e6:
ac:92:c4:6a:1b:10:eb:7e:6e:6e:43:fd:26:a7:62:
fb:e1:3b:95:eb:59:5c:97:50:35:ac:0b:7c:bd:05:
2a:7a:32:e8:ff:52:75:e1:96:cf:74:ed:2c:0f:3b:
6b:50:93:f8:d3:e3:87:f8:c8:c6:40:21:0f:53:ed:
45:ec:24:76:92:e0:97:4b:50:05:32:d5:ef:ae:d0:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BC:DE:BE:55:A4:F2:76:15:D9:C5:24:B1:8F:7D:57:FA:A5:49:C6
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/zrzevlWk8nYV2cUksY99V_qlScY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
76.164.200.0/22
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
95.133.245.0/24
95.133.247.0/24
103.112.171.0/24
103.121.48.0/23
103.126.50.0/23
103.244.144.0/23
103.246.248.0/24
162.249.124.0/22
185.104.63.0/24
195.74.93.0/24
203.14.32.0/24
203.25.108.0/24
205.237.109.0-205.237.111.255
IPv6:
2a12:3200::-2a12:3200:9000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
63:4b:41:b8:42:5a:46:16:51:8d:20:07:dc:15:45:a5:dc:e9:
fa:03:ca:e8:b0:99:60:02:f8:b0:1f:3d:ab:38:c3:eb:85:9e:
4e:a1:7c:7f:dc:e7:41:9f:ba:de:aa:3d:8d:c5:37:9e:64:c4:
e7:dd:bb:04:94:27:e1:0a:cc:e7:18:66:95:cd:6c:6b:70:3b:
07:44:f7:1d:a0:e0:08:d3:3d:3c:31:e5:b4:c4:4d:58:c9:2c:
e5:76:e2:25:c2:91:24:20:21:27:19:2a:a0:5f:cc:28:f2:fa:
32:fc:70:8c:1e:5b:bc:41:14:1d:b4:1b:aa:d7:69:b4:14:27:
43:ae:4c:50:cf:45:1a:f8:06:71:05:c9:24:d1:25:29:75:24:
7a:f4:8a:43:1d:94:00:66:62:e6:f7:41:79:c6:17:4c:4d:63:
70:79:a9:0d:eb:2c:c6:13:4f:40:ce:fa:89:6f:bc:4e:b0:9f:
8f:0b:4f:7f:d4:d7:b3:6e:ea:97:09:f3:52:58:34:3a:03:c3:
f4:bc:2b:2f:34:3c:34:03:9c:26:09:5b:6d:64:d8:d1:c3:1d:
9c:d2:77:f4:08:55:b8:3d:db:0e:a0:45:8a:5b:eb:b4:43:8b:
b0:33:2e:7a:18:e7:d8:26:ac:e9:0d:e7:b0:c8:4f:45:b4:69:
c7:0e:aa:28
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:15 2026 by rpki-client