Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Znvr8yVRDM_W2OeELRoPug4jNeo.roa
File: Znvr8yVRDM_W2OeELRoPug4jNeo.roa (raw, json)
Hash identifier: YDHfFAu7HsZuyoFaaHX4lgMvQUQm7Z2O0oJuj/96cjI=
Subject key identifier: 66:7B:EB:F3:25:51:0C:CF:D6:D8:E7:84:2D:1A:0F:BA:0E:23:35:EA
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01A037848B92CD858145D807E0A32202B33C
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Znvr8yVRDM_W2OeELRoPug4jNeo.roa
Signing time: Tue 25 Aug 2026 06:03:48 +0000
ROA not before: Tue 25 Aug 2026 06:03:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 24
45.83.57.0/24 maxlen: 24
45.83.58.0/24 maxlen: 24
45.83.59.0/24 maxlen: 24
45.86.144.0/24 maxlen: 24
45.86.145.0/24 maxlen: 24
45.86.146.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
86.104.67.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.142.0/24 maxlen: 24
89.40.143.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
89.44.237.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
92.114.86.0/24 maxlen: 24
92.114.87.0/24 maxlen: 24
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
94.176.108.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.10.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
94.177.48.0/24 maxlen: 24
94.177.49.0/24 maxlen: 24
94.177.96.0/24 maxlen: 24
94.177.98.0/24 maxlen: 24
94.177.99.0/24 maxlen: 24
176.223.64.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.214.199.0/24 maxlen: 24
188.215.6.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.80.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.241.66.0/24 maxlen: 24
188.241.67.0/24 maxlen: 24
188.241.126.0/24 maxlen: 24
188.241.138.0/24 maxlen: 24
188.241.139.0/24 maxlen: 24
188.241.143.0/24 maxlen: 24
188.241.213.0/24 maxlen: 24
193.239.140.0/23 maxlen: 24
193.239.141.0/24 maxlen: 24
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:84:8b:92:cd:85:81:45:d8:07:e0:a3:22:02:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Aug 25 06:03:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=667bebf325510ccfd6d8e7842d1a0fba0e2335ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:30:fb:d2:ad:14:50:73:79:70:f0:28:2a:
44:2d:2a:53:10:f0:35:50:5c:29:0c:dc:d7:48:c4:
63:5f:3d:de:d2:90:23:87:4e:f8:50:24:ef:ae:17:
de:40:49:b5:76:7a:b0:69:8d:7b:1c:9d:fc:21:b6:
4f:55:df:53:ae:f6:0e:6d:25:fa:ea:05:4a:af:6c:
bb:8a:23:32:72:98:7d:a9:4d:d3:42:2c:a5:f8:43:
cb:26:cc:29:df:88:f7:6c:c7:e5:a0:37:d7:6f:1f:
54:3d:ba:01:7e:7a:b2:cd:15:6d:0b:c8:f6:1e:09:
a3:f2:48:15:8a:17:22:5d:cb:d3:07:41:05:e1:90:
09:f1:2c:76:e8:e3:b3:af:42:0d:f8:a7:a1:20:f2:
eb:24:25:7c:8c:9e:cd:b8:a3:ac:b0:1e:af:81:2d:
73:18:30:4d:39:66:2d:a4:aa:4b:c4:71:b0:2f:25:
c4:a4:b5:da:3b:ee:97:ed:17:8f:fc:21:ba:3b:44:
44:94:73:e7:6a:90:f3:b1:37:77:11:e3:c1:54:c8:
23:59:ae:d9:f3:3c:a3:7d:28:80:0d:3d:a4:cb:90:
86:c4:cc:44:03:e4:5c:70:0d:93:ad:32:75:6c:bc:
5b:15:a2:3c:f4:d3:22:35:e6:85:61:ef:7f:09:5e:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7B:EB:F3:25:51:0C:CF:D6:D8:E7:84:2D:1A:0F:BA:0E:23:35:EA
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/Znvr8yVRDM_W2OeELRoPug4jNeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0-45.86.146.255
77.81.103.0/24
86.104.67.0/24
86.107.110.0/24
89.34.236.0/24
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
89.44.237.0/24
91.212.52.0/24
91.229.186.0/24
92.114.86.0/23
93.113.144.0/21
94.176.108.0/24
94.176.212.0/24
94.177.10.0/24
94.177.21.0/24
94.177.48.0/23
94.177.96.0/24
94.177.98.0/23
176.223.64.0/24
185.184.240.0/22
185.198.244.0-185.198.246.255
188.208.16.0/23
188.211.248.0/24
188.214.199.0/24
188.215.6.0/24
188.215.94.0/24
188.240.80.0/24
188.240.228.0/23
188.241.66.0/23
188.241.126.0/24
188.241.138.0/23
188.241.143.0/24
188.241.213.0/24
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
ac:69:13:f1:94:a5:f1:02:3b:90:01:fe:ae:9a:62:9e:ef:6b:
17:eb:b4:bb:5f:03:e0:77:cf:a8:cc:72:d8:d6:24:c2:0d:1b:
b6:2f:96:0d:2e:67:ea:5b:cd:b0:52:85:bb:02:1c:7d:2d:f7:
f5:6f:20:22:da:fb:d7:d9:90:a5:07:a7:09:29:ec:b0:22:6b:
9f:d4:16:d2:b2:e0:5d:54:12:98:e3:4e:3c:82:c8:6f:4e:7e:
57:60:73:02:af:9c:ad:02:7d:e7:d7:f1:a6:88:b1:11:16:11:
76:b5:c5:a2:cc:e1:89:46:55:bd:f5:6f:e0:7f:18:3a:c4:c1:
46:09:88:9b:94:4e:14:71:04:98:66:db:0a:73:0f:ae:86:72:
06:c0:db:d2:f7:1f:43:5e:70:82:6a:8a:c7:45:31:42:62:f2:
d9:f5:de:aa:ef:2e:c6:48:a1:fe:d8:73:56:cf:ad:70:22:e0:
2a:d5:7a:81:0a:fb:97:49:bb:0a:27:01:ca:95:7a:de:56:3a:
e3:0f:0a:8f:ba:83:34:52:54:2a:3a:e6:8a:5f:11:8c:1b:0a:
b9:14:06:6c:c6:cd:6e:a4:08:a2:72:b7:15:fc:7c:54:61:30:
ac:97:ed:b0:be:d9:c9:d8:31:11:3b:db:e9:5b:47:ad:bf:11:
ad:96:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:16 2026 by rpki-client