Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZOJmWRu7uROoDIU1rh4W7iQ80Kw.roa
File: ZOJmWRu7uROoDIU1rh4W7iQ80Kw.roa (raw, json)
Hash identifier: KvHFPAPRNsjECQCUV23hARPOjAdXY51LDlFn2x9ITx0=
Subject key identifier: 64:E2:66:59:1B:BB:B9:13:A8:0C:85:35:AE:1E:16:EE:24:3C:D0:AC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A131711CA7B52D823C10BE5BF67CF1004F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZOJmWRu7uROoDIU1rh4W7iQ80Kw.roa
Signing time: Mon 12 Oct 2026 18:47:38 +0000
ROA not before: Mon 12 Oct 2026 18:47:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 62.76.230.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
153.76.176.0/24 maxlen: 24
153.76.180.0/24 maxlen: 24
153.76.182.0/24 maxlen: 24
153.76.184.0/24 maxlen: 24
153.76.187.0/24 maxlen: 24
153.76.189.0/24 maxlen: 24
153.76.191.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:71:1c:a7:b5:2d:82:3c:10:be:5b:f6:7c:f1:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 12 18:47:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64e266591bbbb913a80c8535ae1e16ee243cd0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:69:14:94:67:00:d4:4d:bf:dd:c9:4d:ea:
87:b1:bb:77:53:5e:a3:5e:eb:d9:5e:4e:d9:1f:1d:
bf:a6:4c:6f:8b:76:a4:de:52:e9:b3:05:ce:7a:f0:
27:bf:53:7c:e4:e6:b2:1e:6c:2a:f2:0a:9e:2c:9a:
a3:b8:8d:b2:5e:38:5e:ce:fc:bd:ce:41:84:9c:4c:
43:cf:48:2c:79:94:48:2e:f6:2d:44:74:da:e4:24:
53:a3:77:d2:56:17:0e:48:e9:85:80:e7:3e:44:18:
3e:94:c0:9c:7a:ec:43:97:3d:db:2f:e2:cb:fd:6e:
57:bd:7c:60:b6:6a:80:2a:09:b1:a3:5f:c4:d0:26:
1c:03:2e:f1:e3:ec:59:61:de:82:9e:58:78:f1:5b:
fd:dc:17:ae:00:82:10:4d:8d:93:72:f9:7a:8a:7c:
a8:ba:11:56:96:12:1f:8c:b2:c7:8e:f0:7f:74:2e:
29:32:e5:63:ca:74:bf:b5:2b:24:6c:d5:30:91:e1:
ad:aa:5a:b4:61:49:39:ab:18:91:77:dc:fa:c0:e6:
9a:ae:df:d2:21:3a:df:3e:e5:f9:e8:59:87:80:6a:
62:1c:ad:58:c1:c3:9d:3a:71:bf:9d:b1:89:e3:e3:
97:c7:1f:cf:0f:0e:de:2c:05:86:b0:50:47:8b:75:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:66:59:1B:BB:B9:13:A8:0C:85:35:AE:1E:16:EE:24:3C:D0:AC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZOJmWRu7uROoDIU1rh4W7iQ80Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
62.76.235.0/24
153.76.176.0/24
153.76.180.0/24
153.76.182.0/24
153.76.184.0/24
153.76.187.0/24
153.76.189.0/24
153.76.191.0/24
193.124.8.0/24
193.124.200.0/24
193.124.202.0/24
194.58.67.0/24
194.87.34.0/24
194.87.63.0/24
194.87.165.0/24
195.133.7.0/24
212.192.244.0/24
212.192.251.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c3:63:8f:a3:fa:86:61:35:3b:e8:ae:a7:6e:64:13:08:c1:
5d:9b:20:a1:d9:1b:6f:04:b0:a5:cc:bf:84:ce:58:3e:da:97:
02:85:49:38:45:d1:f2:b3:aa:9b:7e:5a:89:90:6a:bc:3c:23:
3a:7c:a0:ae:90:e6:47:c1:51:21:ed:51:05:5a:35:db:b7:97:
d5:a7:a9:92:66:8d:21:84:74:7e:43:fb:0d:b7:ac:b7:c3:12:
81:86:b4:85:39:8e:d4:24:4e:f6:55:43:bd:7f:3e:49:20:80:
70:9a:db:43:c4:34:ef:86:de:a7:5f:06:d5:7e:93:37:37:db:
3b:fc:d6:77:64:7e:02:13:5b:48:f3:83:72:26:1c:da:93:dc:
59:69:87:d6:e3:1e:11:d2:2a:97:83:e2:5a:b0:01:ab:8d:c9:
21:04:29:1f:16:00:5a:ed:91:8f:c4:b1:10:67:ff:d8:53:2c:
7b:95:0a:b4:73:00:0d:7d:03:d0:04:c5:c8:70:fc:d1:cc:09:
9c:b7:a3:23:88:78:09:fc:85:fd:9c:02:ae:c7:c1:88:d7:94:
b7:e5:2b:8a:55:d5:ed:48:93:f9:d1:0d:2f:62:9b:48:18:2e:
d9:70:26:3c:10:c7:bc:16:dc:85:3a:58:b5:0e:e4:80:40:41:
b7:c0:cc:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:23 2026 by rpki-client