Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/_Zw3DdPbpFhEYashCBfgGjdy5Ks.roa
File: _Zw3DdPbpFhEYashCBfgGjdy5Ks.roa (raw, json)
Hash identifier: +lhpFvFOqbdZln0ZbOMSKO9Dy5jTnI3At67OTUK1JlI=
Subject key identifier: FD:9C:37:0D:D3:DB:A4:58:44:61:AB:21:08:17:E0:1A:37:72:E4:AB
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019D880322CFC27C479D3D83213908D2DF4C
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/_Zw3DdPbpFhEYashCBfgGjdy5Ks.roa
Signing time: Mon 13 Apr 2026 18:03:20 +0000
ROA not before: Mon 13 Apr 2026 18:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132839
IP address blocks: 2.59.100.0/22 maxlen: 24
2.59.100.0/24 maxlen: 24
2.59.101.0/24 maxlen: 24
2.59.102.0/24 maxlen: 24
2.59.103.0/24 maxlen: 24
45.8.29.0/24 maxlen: 24
45.8.30.0/24 maxlen: 24
45.9.108.0/22 maxlen: 24
45.9.108.0/24 maxlen: 24
45.9.109.0/24 maxlen: 24
45.9.110.0/24 maxlen: 24
45.9.111.0/24 maxlen: 24
45.10.208.0/23 maxlen: 23
45.10.208.0/24 maxlen: 24
45.10.209.0/24 maxlen: 24
45.10.210.0/24 maxlen: 24
45.13.160.0/22 maxlen: 24
45.13.160.0/24 maxlen: 24
45.66.188.0/22 maxlen: 24
45.66.188.0/24 maxlen: 24
45.66.189.0/24 maxlen: 24
45.66.190.0/24 maxlen: 24
45.66.191.0/24 maxlen: 24
45.80.112.0/22 maxlen: 24
45.80.113.0/24 maxlen: 24
45.80.114.0/23 maxlen: 24
45.80.114.0/24 maxlen: 24
45.87.228.0/22 maxlen: 24
45.87.228.0/24 maxlen: 24
45.87.231.0/24 maxlen: 24
45.93.64.0/22 maxlen: 24
45.93.64.0/24 maxlen: 24
45.93.65.0/24 maxlen: 24
45.93.66.0/24 maxlen: 24
45.93.67.0/24 maxlen: 24
45.131.156.0/22 maxlen: 24
45.131.156.0/24 maxlen: 24
45.131.157.0/24 maxlen: 24
45.131.158.0/24 maxlen: 24
45.131.159.0/24 maxlen: 24
45.142.76.0/22 maxlen: 24
45.142.77.0/24 maxlen: 24
45.142.78.0/24 maxlen: 24
45.142.79.0/24 maxlen: 24
45.147.212.0/22 maxlen: 24
45.147.213.0/24 maxlen: 24
45.147.214.0/24 maxlen: 24
45.147.215.0/24 maxlen: 24
45.149.68.0/22 maxlen: 24
45.149.68.0/24 maxlen: 24
45.149.69.0/24 maxlen: 24
45.156.168.0/22 maxlen: 24
45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
45.156.216.0/22 maxlen: 24
45.158.220.0/22 maxlen: 24
45.158.221.0/24 maxlen: 24
45.158.223.0/24 maxlen: 24
62.192.188.0/22 maxlen: 24
62.192.188.0/24 maxlen: 24
62.192.189.0/24 maxlen: 24
62.192.190.0/24 maxlen: 24
62.192.191.0/24 maxlen: 24
83.150.224.0/22 maxlen: 24
83.150.224.0/24 maxlen: 24
83.150.225.0/24 maxlen: 24
85.208.56.0/22 maxlen: 24
85.208.56.0/24 maxlen: 24
85.208.57.0/24 maxlen: 24
85.208.58.0/24 maxlen: 24
85.208.59.0/24 maxlen: 24
92.118.144.0/22 maxlen: 24
92.118.144.0/24 maxlen: 24
92.118.145.0/24 maxlen: 24
92.118.146.0/24 maxlen: 24
92.118.147.0/24 maxlen: 24
185.51.164.0/22 maxlen: 24
185.51.164.0/24 maxlen: 24
185.51.167.0/24 maxlen: 24
186.240.0.0/19 maxlen: 24
186.240.32.0/19 maxlen: 24
186.240.64.0/19 maxlen: 24
186.240.96.0/19 maxlen: 24
186.241.192.0/19 maxlen: 24
186.241.224.0/19 maxlen: 24
186.243.64.0/19 maxlen: 24
186.243.96.0/19 maxlen: 24
193.42.15.0/24 maxlen: 24
193.42.132.0/24 maxlen: 24
193.42.135.0/24 maxlen: 24
193.42.149.0/24 maxlen: 24
193.108.46.0/24 maxlen: 24
193.108.96.0/23 maxlen: 24
193.108.96.0/24 maxlen: 24
193.108.97.0/24 maxlen: 24
193.168.4.0/23 maxlen: 24
193.168.4.0/24 maxlen: 24
194.146.84.0/22 maxlen: 24
194.146.84.0/24 maxlen: 24
194.146.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:03:22:cf:c2:7c:47:9d:3d:83:21:39:08:d2:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Apr 13 18:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd9c370dd3dba4584461ab210817e01a3772e4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:05:28:e8:0e:b0:74:df:49:ff:05:5c:c0:
13:da:ec:a8:fc:1f:35:d8:69:ce:8c:36:ef:53:3b:
23:f0:81:59:92:24:dd:d5:f1:6d:73:d3:99:8e:cf:
fc:9c:3e:af:8d:b3:91:d7:80:5c:3b:b5:b6:91:04:
66:d3:67:9a:cc:7a:52:a8:b5:46:3f:54:ea:92:9f:
b5:dc:17:bb:1d:b6:71:7f:2f:29:06:a0:79:fa:9e:
60:b6:99:7d:65:e6:87:e3:9a:64:49:c1:da:3c:a8:
da:b6:fe:db:ce:31:1e:6a:38:77:38:9d:53:af:52:
ab:7e:84:6d:2a:46:bd:1e:aa:b0:1a:b1:1c:a8:3a:
c1:d2:90:9d:24:40:02:a6:cc:d8:40:84:1c:25:89:
ab:29:52:63:69:49:23:94:02:7d:cd:1b:a6:f1:80:
ad:ea:7a:0a:23:78:77:c3:4b:81:41:bd:da:d9:05:
c3:2f:44:97:8d:92:a1:f0:b6:b9:2e:97:d3:31:78:
78:46:b2:6f:8d:d6:32:4f:b8:fb:c2:ec:e1:72:37:
ec:11:8f:30:7d:7e:5e:ce:7d:e7:45:71:37:9d:e0:
c4:60:6a:d1:05:6b:24:8c:e6:6c:c2:ef:cc:22:7a:
ae:5b:0a:2c:25:13:16:f6:1a:0a:e7:9b:db:ba:5f:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:37:0D:D3:DB:A4:58:44:61:AB:21:08:17:E0:1A:37:72:E4:AB
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/_Zw3DdPbpFhEYashCBfgGjdy5Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.100.0/22
45.8.29.0-45.8.30.255
45.9.108.0/22
45.10.208.0-45.10.210.255
45.13.160.0/22
45.66.188.0/22
45.80.112.0/22
45.87.228.0/22
45.93.64.0/22
45.131.156.0/22
45.142.76.0/22
45.147.212.0/22
45.149.68.0/22
45.156.168.0/22
45.156.216.0/22
45.158.220.0/22
62.192.188.0/22
83.150.224.0/22
85.208.56.0/22
92.118.144.0/22
185.51.164.0/22
186.240.0.0/17
186.241.192.0/18
186.243.64.0/18
193.42.15.0/24
193.42.132.0/24
193.42.135.0/24
193.42.149.0/24
193.108.46.0/24
193.108.96.0/23
193.168.4.0/23
194.146.84.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:b8:7f:ff:8c:59:ff:c9:f9:4b:e2:40:f9:28:49:06:ab:6a:
57:cc:d8:05:87:d3:be:67:b1:e9:2c:21:b7:2d:11:6a:d9:df:
f8:11:96:10:db:86:10:35:d9:76:74:c8:92:78:4b:7c:61:98:
0b:b4:94:58:a6:4e:fd:53:6b:72:55:49:cb:9a:2a:dc:19:ce:
37:58:58:58:43:05:02:d9:70:70:0e:ad:ab:95:23:ff:46:2e:
df:02:69:ed:f5:c9:26:0f:6f:f0:06:ee:36:13:f6:fa:b4:1d:
e8:30:56:be:67:2b:86:16:12:cc:65:1c:ba:b7:6f:97:71:aa:
8f:49:35:52:8a:52:41:54:c3:fe:58:1e:54:6d:cf:7b:f7:8c:
e0:34:ea:97:f2:3f:e4:a6:83:de:a3:e9:b8:58:eb:9c:86:4d:
71:a2:0e:16:7f:66:d6:f4:62:b4:d4:65:d8:45:eb:5e:d5:14:
18:8f:62:69:52:a6:b6:66:68:f1:37:2a:b6:b4:7f:9c:34:9c:
ef:e6:02:40:42:67:1c:63:b0:a6:5d:c8:c7:50:0d:f8:8f:9b:
ae:7c:15:98:a6:81:92:ae:1c:cf:03:bf:2c:e7:91:1e:7b:6b:
d9:91:15:b1:8a:b0:eb:7a:64:db:67:2f:e8:8f:3d:dd:03:3b:
dc:df:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:25 2026 by rpki-client