Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/za0KCchEnO8zwmW-feM7Z3UncjE.roa
File: za0KCchEnO8zwmW-feM7Z3UncjE.roa (raw, json)
Hash identifier: cvLyxJf9J4OkfgwQV4Z4jYKejpKF+XIzROZmSetrmI0=
Subject key identifier: CD:AD:0A:09:C8:44:9C:EF:33:C2:65:BE:7D:E3:3B:67:75:27:72:31
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019C51DDBFC2551C6005F2A2499CB9C58C3D
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/za0KCchEnO8zwmW-feM7Z3UncjE.roa
Signing time: Thu 12 Feb 2026 12:40:12 +0000
ROA not before: Thu 12 Feb 2026 12:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28787
IP address blocks: 37.61.0.0/17 maxlen: 17
37.61.79.0/24 maxlen: 24
37.61.112.0/22 maxlen: 22
37.61.116.0/22 maxlen: 22
37.61.120.0/22 maxlen: 22
37.61.124.0/22 maxlen: 22
81.17.80.0/20 maxlen: 20
81.17.82.0/24 maxlen: 24
188.253.128.0/19 maxlen: 19
188.253.208.0/22 maxlen: 22
188.253.212.0/22 maxlen: 22
188.253.216.0/22 maxlen: 22
188.253.220.0/22 maxlen: 22
188.253.254.0/24 maxlen: 24
188.253.255.0/24 maxlen: 24
194.135.172.0/24 maxlen: 24
194.135.173.0/24 maxlen: 24
194.135.174.0/24 maxlen: 24
194.135.175.0/24 maxlen: 24
194.135.176.0/24 maxlen: 24
194.135.177.0/24 maxlen: 24
194.135.178.0/24 maxlen: 24
194.135.179.0/24 maxlen: 24
213.154.0.0/19 maxlen: 19
217.64.16.0/20 maxlen: 20
217.64.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:dd:bf:c2:55:1c:60:05:f2:a2:49:9c:b9:c5:8c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Feb 12 12:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdad0a09c8449cef33c265be7de33b6775277231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:0e:66:48:40:bf:53:5f:01:53:27:9e:0b:
d5:b7:70:09:25:99:61:ad:d0:ca:43:bd:e3:ca:a6:
55:ac:fb:1a:71:26:f6:77:0a:21:84:36:79:b2:c3:
e4:c8:86:d3:67:60:31:55:bd:43:35:da:d6:c4:34:
0c:69:b4:c6:b8:28:e7:db:4a:d5:3c:11:1e:d5:b2:
89:51:c2:ab:3b:58:60:3c:72:ea:a4:db:73:02:c1:
34:3b:4e:88:36:78:e4:64:d6:bd:0a:89:5f:11:08:
9c:56:80:61:07:e7:7c:26:5e:0f:61:88:0e:4c:c9:
e8:ee:67:f8:e8:f2:ac:46:a7:cb:8d:dd:51:f4:50:
ac:db:30:2e:bc:5d:24:f8:d1:ed:dd:82:ee:73:42:
7c:7b:76:be:ae:b6:0d:34:9a:0c:21:df:75:ee:31:
d1:a0:ab:51:ab:a1:c7:1a:1a:12:bd:26:2a:b1:0d:
0b:b2:fc:ab:c4:ca:d9:b2:87:85:54:08:47:69:5f:
b6:8a:69:9f:a8:bb:f8:0d:49:de:b1:94:a3:f0:0b:
2f:5f:42:7b:93:e5:96:e5:a5:5d:b4:56:a5:ed:3d:
0d:da:3c:c8:5b:f5:87:8a:18:c2:76:b3:4a:13:85:
03:a5:7a:92:24:41:56:03:fc:47:77:70:04:b5:94:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:0A:09:C8:44:9C:EF:33:C2:65:BE:7D:E3:3B:67:75:27:72:31
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/za0KCchEnO8zwmW-feM7Z3UncjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.0.0/17
81.17.80.0/20
188.253.128.0/19
188.253.208.0/20
188.253.254.0/23
194.135.172.0-194.135.179.255
213.154.0.0/19
217.64.16.0/20
Signature Algorithm: sha256WithRSAEncryption
27:5d:60:41:86:a8:8b:2c:74:fb:b2:78:54:37:f9:f7:b2:13:
08:2c:78:4c:00:fa:ec:1f:45:63:1d:3c:3b:7a:0e:ae:72:5c:
cf:f1:9c:89:92:b4:e5:24:dc:7d:f5:ec:21:d6:c5:76:0a:00:
2a:15:26:61:5a:3b:1c:38:07:f2:a7:2e:9b:99:fa:f2:8a:2e:
de:83:ec:c7:6e:47:9b:8c:be:16:f6:bc:3c:0b:6a:f2:2e:58:
02:40:42:3b:61:4a:1b:bf:aa:f0:d3:91:2f:74:75:2a:87:9d:
6f:7b:33:10:0b:6d:57:31:79:5d:cc:5e:6f:43:5a:fe:19:40:
28:f2:bc:4b:17:40:7f:9d:37:f8:d8:f7:2d:7c:1b:f1:f7:de:
2b:84:76:ee:52:73:76:7b:79:27:fc:c4:23:12:19:96:7c:d8:
0e:9c:ac:a3:b3:ed:13:e5:e0:99:bc:eb:11:6d:f4:7a:25:b8:
ad:5f:0b:e0:7b:5e:96:2a:d2:9b:e0:d9:28:69:a3:af:6c:95:
a8:b4:e0:32:06:99:98:54:5e:a0:74:03:34:dd:f6:bc:55:10:
ca:ff:1f:53:ab:7e:62:59:ff:48:88:35:76:e4:de:5b:5d:23:
2a:dd:82:ed:48:f5:66:dd:97:29:4f:8e:6c:b9:cc:13:52:10:
2d:f4:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:10 2026 by rpki-client