Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/jzdYDDnvmhmiiO-RuvB4n68cQEQ.roa
File: jzdYDDnvmhmiiO-RuvB4n68cQEQ.roa (raw, json)
Hash identifier: GJ25tiKVt0BxsWXUQMMHAoaI0YNdpllw/m8NQSPqK3Y=
Subject key identifier: 8F:37:58:0C:39:EF:9A:19:A2:88:EF:91:BA:F0:78:9F:AF:1C:40:44
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 01A090B14FE56D8A7D5C355A1E904EB85981
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/jzdYDDnvmhmiiO-RuvB4n68cQEQ.roa
Signing time: Fri 11 Sep 2026 13:38:54 +0000
ROA not before: Fri 11 Sep 2026 13:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.96.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.213.0/24 maxlen: 24
185.23.214.0/24 maxlen: 24
185.23.215.0/24 maxlen: 24
188.95.48.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
188.95.54.0/24 maxlen: 24
188.95.55.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.178.0/24 maxlen: 24
213.152.179.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
213.152.190.0/24 maxlen: 24
2a00:1678:127::/48 maxlen: 48
2a00:1678:a2b::/48 maxlen: 48
2a00:1678:b17::/48 maxlen: 48
2a00:1678:be1::/48 maxlen: 48
2a00:1678:be2::/48 maxlen: 48
2a00:1678:1122::/48 maxlen: 48
2a00:1678:1194::/48 maxlen: 48
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5524::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:7331::/48 maxlen: 48
2a00:1678:9000::/44 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:f113::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:b1:4f:e5:6d:8a:7d:5c:35:5a:1e:90:4e:b8:59:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Sep 11 13:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f37580c39ef9a19a288ef91baf0789faf1c4044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:63:39:91:e7:39:ea:f7:42:cf:d4:d3:60:
03:c3:ab:51:7b:c5:09:a1:85:53:7f:d1:a2:3d:82:
d8:6a:82:13:63:18:7f:96:b4:0d:5a:f9:ee:3e:11:
2a:8d:07:43:69:f6:14:92:57:c3:4c:99:42:2c:c8:
6f:df:e1:91:86:80:8e:90:ae:bf:8a:92:52:70:c0:
7c:f0:cd:9b:da:a8:10:d3:a3:06:a6:4a:36:b7:91:
52:a6:86:76:65:9b:07:e5:c3:44:e6:11:0c:e2:50:
c8:e1:27:03:f6:b8:b0:e4:56:3e:0d:8a:af:7b:7e:
04:4a:08:20:30:4a:3c:c2:8e:7d:c6:d9:2b:d0:73:
19:8d:e3:82:46:30:75:83:dd:75:2b:1b:d3:e3:83:
a6:6f:e2:14:a1:ae:9f:a5:6c:72:ab:81:36:32:25:
47:13:e1:c0:1f:62:2e:32:8a:5b:4c:aa:f5:33:2b:
e7:75:77:cf:67:24:63:ef:be:ec:41:0e:08:01:ae:
b6:d6:0f:b5:9b:87:99:3c:4d:de:7e:0c:b6:6a:4d:
10:ec:be:4e:48:eb:79:5e:6c:2c:7b:7e:27:89:37:
c3:db:f3:ff:c1:08:a7:5c:1b:13:8b:fd:ec:0e:62:
83:61:ec:d8:d7:a0:b5:f9:97:2d:6f:05:9d:e0:0d:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:58:0C:39:EF:9A:19:A2:88:EF:91:BA:F0:78:9F:AF:1C:40:44
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/jzdYDDnvmhmiiO-RuvB4n68cQEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.96.0-109.202.104.255
109.202.106.0-109.202.109.255
109.202.111.0/24
109.232.224.0/21
134.19.176.0/20
185.23.213.0-185.23.215.255
188.95.48.0/21
213.152.160.0-213.152.174.255
213.152.176.0/20
IPv6:
2a00:1678:127::/48
2a00:1678:a2b::/48
2a00:1678:b17::/48
2a00:1678:be1::-2a00:1678:be2:ffff:ffff:ffff:ffff:ffff
2a00:1678:1122::/48
2a00:1678:1194::/48
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5524::/48
2a00:1678:5afe::/48
2a00:1678:7331::/48
2a00:1678:9000::/44
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:f113::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
8a:ee:7c:e9:fd:64:8e:1e:7f:e7:73:61:ee:04:46:bf:f4:18:
35:2d:f1:e2:fb:a6:9b:6c:4d:25:9d:26:84:11:f4:96:a8:07:
bb:7c:84:3a:b3:27:3a:a8:4b:62:0f:33:dc:22:0b:c6:1b:c9:
17:01:0a:a8:0e:3e:3d:c6:0b:3b:e2:0c:72:9b:36:ea:98:9c:
64:46:f8:5f:5c:23:30:c0:f3:dd:b1:05:56:14:18:d4:17:29:
23:a9:98:6a:7d:20:9e:f3:97:6b:4f:b9:40:67:cb:84:27:d6:
1e:7a:b1:de:f9:5a:aa:45:44:d9:70:38:ba:53:d0:59:38:6c:
9d:21:5b:9b:cf:6b:34:d7:4c:c8:a5:9e:97:5a:4c:f8:46:97:
bf:27:87:da:08:38:67:f2:f6:40:47:40:fe:23:d4:f4:6d:cf:
38:1e:ce:fb:dd:a1:77:6f:ba:45:c4:6f:8e:66:a1:36:46:7e:
db:8e:79:50:60:be:28:11:02:37:2b:77:9d:41:01:3b:24:de:
31:2e:b9:26:aa:fa:ca:07:ba:8c:36:32:36:03:3f:16:8a:91:
d1:fb:61:b6:b4:8d:65:8a:5d:54:6b:78:bd:88:14:d7:49:e1:
b8:35:f1:eb:aa:57:b9:5a:f7:93:70:3b:17:3c:0f:cf:e1:b8:
8b:6f:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:44:05 2026 by rpki-client