Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z3nMNAkGfx7V-2nhhIgSKhNAFko.roa
File: Z3nMNAkGfx7V-2nhhIgSKhNAFko.roa (raw, json)
Hash identifier: opuIZIe8VAVFGgpZGo1rzIcMhAAhHsNysOtjzvMXEo0=
Subject key identifier: 67:79:CC:34:09:06:7F:1E:D5:FB:69:E1:84:88:12:2A:13:40:16:4A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C8C515A09A6E91A38786580A71769660B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z3nMNAkGfx7V-2nhhIgSKhNAFko.roa
Signing time: Mon 23 Feb 2026 21:04:27 +0000
ROA not before: Mon 23 Feb 2026 21:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30633
IP address blocks: 45.128.77.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.5.125.0/24 maxlen: 24
193.27.23.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a06:35c2::/32 maxlen: 32
2a06:b5c0::/29 maxlen: 29
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:8880::/29 maxlen: 29
2a0e:f201::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2d81::/32 maxlen: 32
2a0f:2e80::/29 maxlen: 29
2a0f:3045::/32 maxlen: 32
2a0f:3046:320::/48 maxlen: 48
2a0f:3240::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:e1c6::/32 maxlen: 32
2a0f:e4c0::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:32c0::/32 maxlen: 32
2a10:32c1::/32 maxlen: 32
2a10:32c2::/32 maxlen: 32
2a10:32c4::/32 maxlen: 32
2a10:32c5::/32 maxlen: 32
2a10:32c6::/32 maxlen: 32
2a10:32c7::/32 maxlen: 32
2a10:3340::/29 maxlen: 29
2a10:35c0::/29 maxlen: 29
2a10:35c0::/32 maxlen: 32
2a10:35c1::/32 maxlen: 32
2a10:35c2::/32 maxlen: 32
2a10:35c3::/32 maxlen: 32
2a10:35c4::/32 maxlen: 32
2a10:35c5::/32 maxlen: 32
2a10:35c6::/32 maxlen: 32
2a10:35c7::/32 maxlen: 32
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:4c40::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ba00::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6:33::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:3080::/29 maxlen: 29
2a13:8c82:3::/48 maxlen: 48
2a13:df00::/29 maxlen: 29
2a13:e101:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:51:5a:09:a6:e9:1a:38:78:65:80:a7:17:69:66:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 23 21:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6779cc3409067f1ed5fb69e18488122a1340164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:a1:16:e2:c0:19:a2:93:ba:51:9a:45:d1:
e2:2a:33:7a:5a:51:8e:8e:6e:19:25:9a:84:8e:3b:
bd:3f:44:57:da:f8:21:02:ba:31:8c:60:03:47:34:
ca:7a:4d:5b:97:3d:e4:34:53:96:d6:a9:43:1b:55:
28:94:1c:fc:c9:e8:9e:3a:db:55:d7:58:41:27:6f:
bc:33:c3:c1:07:10:ae:89:34:a2:c3:cd:ab:92:0f:
61:5a:12:77:1e:cd:9e:55:35:70:49:6f:11:c8:b4:
c5:a4:27:cd:01:aa:dc:3a:60:c5:5c:04:1e:72:0a:
6d:d7:f1:f6:1b:24:9a:05:a6:02:e2:d1:15:c9:aa:
fc:0e:82:7b:97:4d:e0:e8:4b:94:fd:fb:53:d1:6d:
a0:58:3c:2b:a6:92:ef:5c:2f:65:e2:4d:d7:9b:21:
0a:e4:e2:1c:31:e5:74:24:78:6c:39:d4:e4:9d:54:
86:0c:46:6a:6d:b7:71:b6:ba:27:ae:df:a2:77:a3:
32:7a:a9:15:99:0c:4d:8c:03:76:37:96:ea:05:e5:
1d:d8:12:78:eb:15:5a:79:f3:37:d9:5d:c9:bd:0e:
06:35:f4:d9:55:73:66:86:b9:8e:03:a5:bc:49:31:
0a:81:94:93:06:2c:a5:e2:df:ac:a2:94:9a:30:a0:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:CC:34:09:06:7F:1E:D5:FB:69:E1:84:88:12:2A:13:40:16:4A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z3nMNAkGfx7V-2nhhIgSKhNAFko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.5.125.0/24
193.27.23.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a06:35c2::/32
2a06:b5c0::/29
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:8880::/29
2a0e:f201::/32
2a0f:140::/29
2a0f:e00::/29
2a0f:1740::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2d81::/32
2a0f:2e80::/29
2a0f:3045::/32
2a0f:3046:320::/48
2a0f:3240::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:8300::/29
2a0f:b400::/29
2a0f:c400::/29
2a0f:e1c6::/32
2a0f:e4c0::/29
2a10:32c0::/29
2a10:3340::/29
2a10:35c0::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6d40::/29
2a10:7100::/29
2a10:7900::/29
2a10:7b00::/29
2a11:4c40::/29
2a11:5c80::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ba00::/29
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6:33::/48
2a13:18c6:55::/48
2a13:3080::/29
2a13:8c82:3::/48
2a13:df00::/29
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
97:35:4c:35:46:15:41:ba:3d:d8:a4:87:98:11:64:41:bb:d6:
7e:17:7d:03:c2:09:24:b0:94:3c:9f:5f:ae:80:35:02:c5:2e:
0a:de:44:0c:e7:46:70:fd:e1:ae:f0:3a:a9:30:b6:c3:a9:61:
32:bd:89:31:62:40:6c:60:94:77:91:c5:c8:c3:34:b4:95:a3:
1d:12:90:53:e3:c4:c2:01:92:41:7b:3e:6a:ec:f5:83:82:e6:
2b:30:69:e6:31:24:da:a6:2e:03:fb:95:51:a6:5f:7d:bf:b7:
39:c1:1b:2f:80:7f:d9:2a:ed:08:b4:2b:40:3f:27:fa:6a:47:
a0:63:13:2c:be:79:17:a4:35:b5:ef:65:10:71:f2:36:80:55:
20:07:0a:ea:1c:e3:a1:c4:3b:1e:d3:44:51:c8:8f:aa:79:04:
34:6f:93:ab:d0:5c:0e:4a:3c:16:4d:b9:2d:b9:40:6e:49:50:
3b:52:a2:41:50:ed:9b:77:6e:ac:4e:ca:47:ce:b4:b1:93:4d:
8f:be:db:25:4c:21:76:e8:b3:7a:16:d6:b6:b4:79:48:6c:06:
32:f6:b7:4a:1c:fc:3f:78:4c:76:c3:36:16:f1:0b:07:08:48:
d8:61:39:5e:69:4a:93:30:b4:5a:2a:57:97:3b:15:1e:cb:9d:
38:39:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:24 2026 by rpki-client