Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZBwhk4ynhZ4TCrnuWY-8QhvazUI.roa
File: ZBwhk4ynhZ4TCrnuWY-8QhvazUI.roa (raw, json)
Hash identifier: TeHf4SIeVG4QItsaSa9hAtgnz9il7KBXTsp8htcjL5A=
Subject key identifier: 64:1C:21:93:8C:A7:85:9E:13:0A:B9:EE:59:8F:BC:42:1B:DA:CD:42
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019C988260EC42EF3BE58A9391DFF2BF652B
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZBwhk4ynhZ4TCrnuWY-8QhvazUI.roa
Signing time: Thu 26 Feb 2026 05:53:27 +0000
ROA not before: Thu 26 Feb 2026 05:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215148
IP address blocks: 31.170.249.0/24 maxlen: 24
31.171.108.0/24 maxlen: 24
31.171.109.0/24 maxlen: 24
31.171.111.0/24 maxlen: 24
31.171.119.0/24 maxlen: 24
31.171.124.0/24 maxlen: 24
62.212.224.0/24 maxlen: 24
62.212.225.0/24 maxlen: 24
62.212.226.0/24 maxlen: 24
62.212.227.0/24 maxlen: 24
62.212.228.0/24 maxlen: 24
62.212.233.0/24 maxlen: 24
62.212.234.0/24 maxlen: 24
62.212.236.0/24 maxlen: 24
62.212.244.0/24 maxlen: 24
62.212.245.0/24 maxlen: 24
77.81.56.0/24 maxlen: 24
85.132.1.0/24 maxlen: 24
85.132.3.0/24 maxlen: 24
85.132.12.0/24 maxlen: 24
85.132.17.0/24 maxlen: 24
85.132.18.0/24 maxlen: 24
85.132.43.0/24 maxlen: 24
85.132.44.0/24 maxlen: 24
85.132.46.0/24 maxlen: 24
85.132.47.0/24 maxlen: 24
85.132.48.0/24 maxlen: 24
85.132.49.0/24 maxlen: 24
85.132.52.0/24 maxlen: 24
85.132.53.0/24 maxlen: 24
85.132.54.0/24 maxlen: 24
85.132.55.0/24 maxlen: 24
85.132.57.0/24 maxlen: 24
85.132.61.0/24 maxlen: 24
85.132.67.0/24 maxlen: 24
85.132.69.0/24 maxlen: 24
85.132.71.0/24 maxlen: 24
85.132.72.0/24 maxlen: 24
85.132.75.0/24 maxlen: 24
85.132.76.0/24 maxlen: 24
85.132.78.0/24 maxlen: 24
85.132.79.0/24 maxlen: 24
85.132.81.0/24 maxlen: 24
85.132.84.0/24 maxlen: 24
85.132.85.0/24 maxlen: 24
85.132.88.0/24 maxlen: 24
85.132.89.0/24 maxlen: 24
85.132.91.0/24 maxlen: 24
85.132.95.0/24 maxlen: 24
85.132.96.0/24 maxlen: 24
85.132.99.0/24 maxlen: 24
85.132.100.0/24 maxlen: 24
85.132.101.0/24 maxlen: 24
85.132.107.0/24 maxlen: 24
85.132.109.0/24 maxlen: 24
85.132.111.0/24 maxlen: 24
85.132.115.0/24 maxlen: 24
85.132.116.0/24 maxlen: 24
85.132.123.0/24 maxlen: 24
85.132.124.0/24 maxlen: 24
94.20.16.0/24 maxlen: 24
94.20.20.0/24 maxlen: 24
94.20.21.0/24 maxlen: 24
94.20.30.0/24 maxlen: 24
94.20.40.0/24 maxlen: 24
94.20.45.0/24 maxlen: 24
94.20.47.0/24 maxlen: 24
94.20.49.0/24 maxlen: 24
94.20.62.0/24 maxlen: 24
94.20.64.0/24 maxlen: 24
94.20.65.0/24 maxlen: 24
94.20.68.0/24 maxlen: 24
94.20.71.0/24 maxlen: 24
94.20.72.0/24 maxlen: 24
94.20.74.0/24 maxlen: 24
94.20.77.0/24 maxlen: 24
94.20.81.0/24 maxlen: 24
94.20.85.0/24 maxlen: 24
94.20.94.0/24 maxlen: 24
94.20.105.0/24 maxlen: 24
94.20.137.0/24 maxlen: 24
94.20.138.0/24 maxlen: 24
94.20.142.0/24 maxlen: 24
94.20.147.0/24 maxlen: 24
94.20.178.0/24 maxlen: 24
94.20.179.0/24 maxlen: 24
94.20.216.0/24 maxlen: 24
94.20.217.0/24 maxlen: 24
94.20.225.0/24 maxlen: 24
94.20.229.0/24 maxlen: 24
94.20.230.0/24 maxlen: 24
94.20.246.0/24 maxlen: 24
94.20.248.0/24 maxlen: 24
2a01:6480:40::/48 maxlen: 48
2a01:6480:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:82:60:ec:42:ef:3b:e5:8a:93:91:df:f2:bf:65:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Feb 26 05:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=641c21938ca7859e130ab9ee598fbc421bdacd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:f8:6d:84:2c:ab:87:7b:e4:ed:22:37:c5:
73:28:46:8d:e2:fe:a6:de:3e:43:0e:10:c6:23:a1:
e0:24:9d:5e:09:01:3c:3e:74:41:b5:c9:13:cb:e8:
4e:ba:c9:24:2d:eb:b0:1b:be:5d:f1:c8:65:62:5c:
d1:8f:4f:c1:98:c7:87:bc:d6:1b:39:17:b1:13:17:
6f:88:e6:2b:76:04:5c:30:8a:db:ad:55:2c:8c:55:
30:1e:fa:5d:02:d0:eb:1a:30:3c:75:65:94:ce:97:
79:f2:2a:db:c0:19:50:60:32:df:87:fd:11:00:63:
8d:38:c7:07:a5:43:46:1f:47:1f:11:d4:54:90:4b:
f9:af:f5:d3:30:69:b8:21:a5:0d:f7:99:96:50:c2:
f7:04:f6:cc:c0:56:33:ac:d9:13:bb:0b:cd:59:1f:
c9:b9:9c:44:18:20:d5:d9:03:74:1d:35:10:e0:a5:
26:a5:da:53:a1:3e:78:9c:50:c6:37:5e:b6:23:83:
f8:8f:50:73:f3:bd:1e:97:1b:b9:fc:26:fd:f5:62:
31:19:0e:1c:7f:7d:20:4b:35:24:65:02:52:76:b2:
77:9c:f1:25:66:83:b3:3a:35:8a:9f:4a:d5:b2:06:
cd:4f:d3:25:1f:22:bb:6e:23:aa:4a:d9:25:b7:15:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:21:93:8C:A7:85:9E:13:0A:B9:EE:59:8F:BC:42:1B:DA:CD:42
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/ZBwhk4ynhZ4TCrnuWY-8QhvazUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.249.0/24
31.171.108.0/23
31.171.111.0/24
31.171.119.0/24
31.171.124.0/24
62.212.224.0-62.212.228.255
62.212.233.0-62.212.234.255
62.212.236.0/24
62.212.244.0/23
77.81.56.0/24
85.132.1.0/24
85.132.3.0/24
85.132.12.0/24
85.132.17.0-85.132.18.255
85.132.43.0-85.132.44.255
85.132.46.0-85.132.49.255
85.132.52.0/22
85.132.57.0/24
85.132.61.0/24
85.132.67.0/24
85.132.69.0/24
85.132.71.0-85.132.72.255
85.132.75.0-85.132.76.255
85.132.78.0/23
85.132.81.0/24
85.132.84.0/23
85.132.88.0/23
85.132.91.0/24
85.132.95.0-85.132.96.255
85.132.99.0-85.132.101.255
85.132.107.0/24
85.132.109.0/24
85.132.111.0/24
85.132.115.0-85.132.116.255
85.132.123.0-85.132.124.255
94.20.16.0/24
94.20.20.0/23
94.20.30.0/24
94.20.40.0/24
94.20.45.0/24
94.20.47.0/24
94.20.49.0/24
94.20.62.0/24
94.20.64.0/23
94.20.68.0/24
94.20.71.0-94.20.72.255
94.20.74.0/24
94.20.77.0/24
94.20.81.0/24
94.20.85.0/24
94.20.94.0/24
94.20.105.0/24
94.20.137.0-94.20.138.255
94.20.142.0/24
94.20.147.0/24
94.20.178.0/23
94.20.216.0/23
94.20.225.0/24
94.20.229.0-94.20.230.255
94.20.246.0/24
94.20.248.0/24
IPv6:
2a01:6480:40::/47
Signature Algorithm: sha256WithRSAEncryption
5c:f7:03:3c:1d:5b:db:91:5b:30:4f:cc:6a:ac:10:57:33:da:
d1:a1:9a:fb:94:0c:3e:ba:33:df:1e:68:f5:b0:9e:80:92:71:
30:8d:91:b7:ac:c4:8f:c0:8c:6b:70:37:cb:e8:93:98:2d:ec:
eb:ae:da:50:22:cb:69:c5:77:50:a8:6e:c1:7f:89:ee:e0:bc:
cc:4e:dd:47:2b:88:ae:a3:ca:03:95:e6:61:f6:09:8e:ab:4e:
8a:44:cf:c7:1d:28:12:d2:fa:f9:57:de:39:3b:69:e2:03:5b:
2c:20:e4:e3:87:cf:5e:50:8d:3b:02:61:54:3c:5e:a4:f0:d6:
1c:b2:c3:5d:8d:96:47:79:20:1e:b0:eb:fb:f8:7a:2d:91:83:
a9:bf:09:ef:cb:bc:49:2c:d3:5c:5b:65:47:8e:c2:20:19:27:
d9:e1:91:6e:9b:3f:22:ca:03:28:57:ce:90:00:82:3d:5a:17:
e9:b4:7f:b9:56:74:dd:11:58:55:57:4d:e8:7d:fc:2c:27:54:
77:72:24:70:41:41:df:02:37:6d:4b:e5:6e:b7:80:7b:0d:ea:
22:e6:79:15:96:d3:14:f8:6b:ff:7d:da:d4:02:87:47:0d:51:
33:e9:2c:85:ee:32:dd:fa:5a:ad:f9:13:0b:84:66:ce:b1:c0:
b3:6f:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:25 2026 by rpki-client