Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/ZKaBJyBRkzDPUmFlAS458DLw7HU.roa
File:                     ZKaBJyBRkzDPUmFlAS458DLw7HU.roa (raw, json)
Hash identifier:          HCAX8ouKnSaIKqPaeTAJ+7k13PatJ7PBSc3QmeHyguM=
Subject key identifier:   64:A6:81:27:20:51:93:30:CF:52:61:65:01:2E:39:F0:32:F0:EC:75
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       019C9443A4C39496E7FDEED6E983F3599B4E
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/ZKaBJyBRkzDPUmFlAS458DLw7HU.roa
Signing time:             Wed 25 Feb 2026 10:06:26 +0000
ROA not before:           Wed 25 Feb 2026 10:06:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48728
IP address blocks:        31.11.48.0/21 maxlen: 21
                          37.186.32.0/23 maxlen: 23
                          37.186.32.0/24 maxlen: 24
                          37.186.33.0/24 maxlen: 24
                          37.186.34.0/24 maxlen: 24
                          37.186.35.0/24 maxlen: 24
                          37.186.36.0/24 maxlen: 24
                          37.186.37.0/24 maxlen: 24
                          37.186.38.0/24 maxlen: 24
                          37.186.39.0/24 maxlen: 24
                          37.186.40.0/24 maxlen: 24
                          37.186.41.0/24 maxlen: 24
                          37.186.42.0/23 maxlen: 23
                          37.186.42.0/24 maxlen: 24
                          37.186.43.0/24 maxlen: 24
                          37.186.44.0/24 maxlen: 24
                          37.186.45.0/24 maxlen: 24
                          37.186.46.0/24 maxlen: 24
                          37.186.47.0/24 maxlen: 24
                          37.186.48.0/24 maxlen: 24
                          37.186.50.0/24 maxlen: 24
                          37.186.51.0/24 maxlen: 24
                          37.186.52.0/24 maxlen: 24
                          37.186.53.0/24 maxlen: 24
                          37.186.54.0/24 maxlen: 24
                          37.186.55.0/24 maxlen: 24
                          37.186.58.0/24 maxlen: 24
                          37.186.59.0/24 maxlen: 24
                          80.76.160.0/24 maxlen: 24
                          80.76.161.0/24 maxlen: 24
                          80.76.162.0/24 maxlen: 24
                          80.76.163.0/24 maxlen: 24
                          80.76.164.0/24 maxlen: 24
                          80.76.165.0/24 maxlen: 24
                          80.76.170.0/24 maxlen: 24
                          80.76.171.0/24 maxlen: 24
                          80.76.172.0/24 maxlen: 24
                          80.76.173.0/24 maxlen: 24
                          80.76.174.0/24 maxlen: 24
                          80.76.175.0/24 maxlen: 24
                          103.14.208.0/24 maxlen: 24
                          103.17.0.0/22 maxlen: 22
                          103.17.1.0/24 maxlen: 24
                          103.17.2.0/24 maxlen: 24
                          103.17.3.0/24 maxlen: 24
                          103.23.124.0/24 maxlen: 24
                          103.23.125.0/24 maxlen: 24
                          103.199.88.0/22 maxlen: 22
                          103.199.88.0/24 maxlen: 24
                          103.199.89.0/24 maxlen: 24
                          103.199.90.0/24 maxlen: 24
                          103.199.91.0/24 maxlen: 24
                          103.225.75.0/24 maxlen: 24
                          212.70.96.0/19 maxlen: 19
                          212.70.96.0/24 maxlen: 24
                          212.70.97.0/24 maxlen: 24
                          212.70.98.0/24 maxlen: 24
                          212.70.99.0/24 maxlen: 24
                          212.70.102.0/24 maxlen: 24
                          212.70.106.0/24 maxlen: 24
                          212.70.107.0/24 maxlen: 24
                          212.70.108.0/24 maxlen: 24
                          212.70.109.0/24 maxlen: 24
                          212.70.110.0/24 maxlen: 24
                          212.70.111.0/24 maxlen: 24
                          212.70.112.0/24 maxlen: 24
                          212.70.113.0/24 maxlen: 24
                          212.70.114.0/24 maxlen: 24
                          212.70.115.0/24 maxlen: 24
                          212.70.116.0/24 maxlen: 24
                          212.70.117.0/24 maxlen: 24
                          212.70.118.0/24 maxlen: 24
                          212.70.119.0/24 maxlen: 24
                          212.70.122.0/24 maxlen: 24
                          212.70.125.0/24 maxlen: 24
                          212.70.126.0/24 maxlen: 24
                          212.70.127.0/24 maxlen: 24
                          2a04:7f80::/29 maxlen: 29
                          2a04:7f80::/47 maxlen: 47
                          2a04:7f80::/48 maxlen: 48
                          2a04:7f80:0:a::/64 maxlen: 64
                          2a04:7f80:2::/47 maxlen: 47
                          2a04:7f80:2::/48 maxlen: 48
                          2a04:7f80:3::/48 maxlen: 48
                          2a04:7f80:4::/47 maxlen: 47
                          2a04:7f80:4::/48 maxlen: 48
                          2a04:7f80:5::/48 maxlen: 48
                          2a04:7f80:6::/47 maxlen: 47
                          2a04:7f80:8::/47 maxlen: 47
                          2a04:7f80:a::/47 maxlen: 47
                          2a04:7f80:c::/47 maxlen: 47
                          2a04:7f80:10::/44 maxlen: 44
                          2a04:7f80:10::/48 maxlen: 48
                          2a04:7f80:11::/48 maxlen: 48
                          2a04:7f80:12::/48 maxlen: 48
                          2a04:7f80:13::/48 maxlen: 48
                          2a04:7f80:14::/48 maxlen: 48
                          2a04:7f80:15::/48 maxlen: 48
                          2a04:7f80:16::/48 maxlen: 48
                          2a04:7f80:17::/48 maxlen: 48
                          2a04:7f80:18::/48 maxlen: 48
                          2a04:7f80:19::/48 maxlen: 48
                          2a04:7f80:1a::/48 maxlen: 48
                          2a04:7f80:1b::/48 maxlen: 48
                          2a04:7f80:1c::/48 maxlen: 48
                          2a04:7f80:1d::/48 maxlen: 48
                          2a04:7f80:1e::/48 maxlen: 48
                          2a04:7f80:1f::/48 maxlen: 48
                          2a04:7f80:20::/44 maxlen: 44
                          2a04:7f80:20::/48 maxlen: 48
                          2a04:7f80:21::/48 maxlen: 48
                          2a04:7f80:22::/48 maxlen: 48
                          2a04:7f80:23::/48 maxlen: 48
                          2a04:7f80:24::/48 maxlen: 48
                          2a04:7f80:25::/48 maxlen: 48
                          2a04:7f80:26::/48 maxlen: 48
                          2a04:7f80:27::/48 maxlen: 48
                          2a04:7f80:28::/48 maxlen: 48
                          2a04:7f80:29::/48 maxlen: 48
                          2a04:7f80:2a::/48 maxlen: 48
                          2a04:7f80:2b::/48 maxlen: 48
                          2a04:7f80:2c::/48 maxlen: 48
                          2a04:7f80:2d::/48 maxlen: 48
                          2a04:7f80:2e::/48 maxlen: 48
                          2a04:7f80:2f::/48 maxlen: 48
                          2a04:7f80:30::/44 maxlen: 44
                          2a04:7f80:30::/48 maxlen: 48
                          2a04:7f80:31::/48 maxlen: 48
                          2a04:7f80:32::/48 maxlen: 48
                          2a04:7f80:33::/48 maxlen: 48
                          2a04:7f80:34::/48 maxlen: 48
                          2a04:7f80:35::/48 maxlen: 48
                          2a04:7f80:36::/48 maxlen: 48
                          2a04:7f80:37::/48 maxlen: 48
                          2a04:7f80:38::/48 maxlen: 48
                          2a04:7f80:39::/48 maxlen: 48
                          2a04:7f80:3a::/48 maxlen: 48
                          2a04:7f80:3b::/48 maxlen: 48
                          2a04:7f80:3c::/48 maxlen: 48
                          2a04:7f80:3d::/48 maxlen: 48
                          2a04:7f80:3e::/48 maxlen: 48
                          2a04:7f80:3f::/48 maxlen: 48
                          2a04:7f80:40::/45 maxlen: 45
                          2a04:7f80:40::/48 maxlen: 48
                          2a04:7f80:41::/48 maxlen: 48
                          2a04:7f80:42::/48 maxlen: 48
                          2a04:7f80:43::/48 maxlen: 48
                          2a04:7f80:44::/48 maxlen: 48
                          2a04:7f80:45::/48 maxlen: 48
                          2a04:7f80:46::/48 maxlen: 48
                          2a04:7f80:47::/48 maxlen: 48
                          2a04:7f80:48::/45 maxlen: 45
                          2a04:7f80:48::/48 maxlen: 48
                          2a04:7f80:49::/48 maxlen: 48
                          2a04:7f80:4a::/48 maxlen: 48
                          2a04:7f80:4b::/48 maxlen: 48
                          2a04:7f80:4c::/48 maxlen: 48
                          2a04:7f80:4d::/48 maxlen: 48
                          2a04:7f80:4e::/48 maxlen: 48
                          2a04:7f80:4f::/48 maxlen: 48
                          2a04:7f80:50::/45 maxlen: 45
                          2a04:7f80:50::/48 maxlen: 48
                          2a04:7f80:51::/48 maxlen: 48
                          2a04:7f80:52::/48 maxlen: 48
                          2a04:7f80:53::/48 maxlen: 48
                          2a04:7f80:54::/48 maxlen: 48
                          2a04:7f80:55::/48 maxlen: 48
                          2a04:7f80:56::/48 maxlen: 48
                          2a04:7f80:57::/48 maxlen: 48
                          2a04:7f80:58::/45 maxlen: 45
                          2a04:7f80:58::/48 maxlen: 48
                          2a04:7f80:59::/48 maxlen: 48
                          2a04:7f80:5a::/48 maxlen: 48
                          2a04:7f80:5b::/48 maxlen: 48
                          2a04:7f80:5c::/48 maxlen: 48
                          2a04:7f80:5d::/48 maxlen: 48
                          2a04:7f80:5e::/48 maxlen: 48
                          2a04:7f80:5f::/48 maxlen: 48
                          2a04:7f80:60::/44 maxlen: 44
                          2a04:7f80:60::/48 maxlen: 48
                          2a04:7f80:61::/48 maxlen: 48
                          2a04:7f80:62::/48 maxlen: 48
                          2a04:7f80:63::/48 maxlen: 48
                          2a04:7f80:64::/48 maxlen: 48
                          2a04:7f80:65::/48 maxlen: 48
                          2a04:7f80:66::/48 maxlen: 48
                          2a04:7f80:67::/48 maxlen: 48
                          2a04:7f80:68::/48 maxlen: 48
                          2a04:7f80:69::/48 maxlen: 48
                          2a04:7f80:6a::/48 maxlen: 48
                          2a04:7f80:6b::/48 maxlen: 48
                          2a04:7f80:6c::/48 maxlen: 48
                          2a04:7f80:6d::/48 maxlen: 48
                          2a04:7f80:6e::/48 maxlen: 48
                          2a04:7f80:6f::/48 maxlen: 48
                          2a04:7f80:88::/45 maxlen: 45
                          2a04:7f80:90::/45 maxlen: 45
                          2a04:7f80:99::/48 maxlen: 48
                          2a04:7f80:100::/48 maxlen: 48
                          2a04:7f80:1000::/40 maxlen: 40
                          2a04:7f80:1100::/40 maxlen: 40
                          2a04:7f80:1200::/40 maxlen: 40
                          2a04:7f80:2000::/40 maxlen: 40
                          2a04:7f80:2100::/40 maxlen: 40
                          2a04:7f80:2200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:94:43:a4:c3:94:96:e7:fd:ee:d6:e9:83:f3:59:9b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: Feb 25 10:06:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=64a6812720519330cf526165012e39f032f0ec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:0d:e0:3a:82:df:3e:32:ac:5a:79:d1:78:
                    46:80:82:5e:b8:04:9b:8f:16:00:53:df:09:98:aa:
                    be:b3:1f:80:33:d3:42:a3:92:01:e1:2c:59:59:91:
                    dc:26:87:8c:2c:e1:76:79:3a:57:7c:4f:f6:50:9b:
                    55:24:2d:ae:37:7c:91:9d:5c:26:78:6f:83:e4:a8:
                    9d:52:b8:ef:a6:95:03:db:b7:b9:3c:b1:f0:21:39:
                    df:4e:a7:e0:5b:02:c8:0e:e6:39:16:46:b5:b1:6c:
                    4f:87:01:34:69:5d:2a:18:2f:81:f2:13:26:f6:c5:
                    06:9c:86:6f:6a:4c:23:71:3e:d6:0c:72:20:78:db:
                    d9:d3:ef:5e:97:61:60:5e:e6:26:97:03:01:e4:0f:
                    96:2f:95:cd:43:69:e4:3b:f8:6b:1f:c7:c7:c6:ba:
                    dc:1d:a3:8a:86:a8:b3:38:f2:63:d4:14:08:ee:a8:
                    4e:bb:d8:d0:25:2b:9c:2b:5b:57:ab:ad:d1:1e:52:
                    34:53:64:7a:78:9d:ef:d0:e3:00:db:e6:c1:4f:3f:
                    21:8b:c0:e2:b7:75:30:9b:7e:89:44:e9:f4:06:eb:
                    a3:12:14:e7:a7:a6:3f:9c:f5:b6:16:ff:8e:df:df:
                    56:4f:7e:5f:c9:e7:6a:8a:7a:57:b0:04:fd:1a:17:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:81:27:20:51:93:30:CF:52:61:65:01:2E:39:F0:32:F0:EC:75
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/ZKaBJyBRkzDPUmFlAS458DLw7HU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.48.0/21
                  37.186.32.0-37.186.48.255
                  37.186.50.0-37.186.55.255
                  37.186.58.0/23
                  80.76.160.0-80.76.165.255
                  80.76.170.0-80.76.175.255
                  103.14.208.0/24
                  103.17.0.0/22
                  103.23.124.0/23
                  103.199.88.0/22
                  103.225.75.0/24
                  212.70.96.0/19
                IPv6:
                  2a04:7f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         d2:56:0f:4f:a9:0e:dc:1d:29:2a:65:6e:b8:96:9a:2b:43:e4:
         3c:91:00:fe:05:07:9f:47:a4:cb:e7:25:e9:ae:ac:78:45:93:
         ef:a2:e9:5f:d5:a8:0e:9f:bf:ef:80:c8:0f:54:95:aa:4b:f8:
         14:25:cb:7a:9a:f5:b5:ad:ae:a1:74:87:6c:ce:e1:ec:53:9e:
         80:89:44:b5:d1:98:48:13:db:4c:fa:6e:34:d2:70:6e:63:4d:
         e4:55:0c:17:90:c8:aa:17:36:cb:b7:2f:00:5a:8b:5e:b7:14:
         df:0a:db:89:16:6a:86:5a:c0:d9:e3:7e:54:8d:ee:17:da:52:
         6f:32:10:0c:3c:ea:2d:e5:ce:bc:7a:b9:0a:db:f9:2b:df:6d:
         80:ff:7b:9b:7c:8a:0a:93:17:85:f4:54:d1:eb:00:63:61:58:
         ec:0c:25:f9:b9:4f:ca:a7:56:1e:9c:80:db:fa:75:99:d4:a8:
         6b:78:b1:a2:9d:6b:5d:b9:ad:97:7b:0d:2a:ea:32:96:07:c7:
         4c:cb:ad:62:11:40:d8:74:24:5a:29:03:ae:0f:9d:ac:0b:cb:
         98:5f:29:97:53:50:c5:2c:4d:02:12:84:7a:ab:cc:2d:39:e0:
         e9:4f:b9:83:24:cf:57:e4:a2:55:e7:df:e2:13:da:e2:37:e5:
         f9:84:c7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:19:13 2026 by rpki-client