Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zXzaXXaXaacAbGR2BU_XAEJ7v30.roa
File: zXzaXXaXaacAbGR2BU_XAEJ7v30.roa (raw, json)
Hash identifier: Lqdd4BwuY4RYhpHOODbRGdpLMFlr375rTHvbeXFXxRI=
Subject key identifier: CD:7C:DA:5D:76:97:69:A7:00:6C:64:76:05:4F:D7:00:42:7B:BF:7D
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 019FCBD7F5418BF2BDD5D05C8EB7C75EE68E
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zXzaXXaXaacAbGR2BU_XAEJ7v30.roa
Signing time: Tue 04 Aug 2026 08:15:55 +0000
ROA not before: Tue 04 Aug 2026 08:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 31.222.252.0/24 maxlen: 24
37.72.134.0/24 maxlen: 24
45.85.247.0/24 maxlen: 24
62.3.22.0/24 maxlen: 24
62.204.39.0/24 maxlen: 24
91.242.251.0/24 maxlen: 24
91.246.35.0/24 maxlen: 24
109.107.151.0/24 maxlen: 24
146.19.46.0/24 maxlen: 24
146.19.66.0/24 maxlen: 24
146.19.153.0/24 maxlen: 24
146.19.158.0/24 maxlen: 24
176.126.125.0/24 maxlen: 24
185.76.148.0/24 maxlen: 24
193.3.163.0/24 maxlen: 24
193.3.186.0/24 maxlen: 24
193.35.229.0/24 maxlen: 24
194.104.133.0/24 maxlen: 24
212.18.123.0/24 maxlen: 24
212.23.194.0/24 maxlen: 24
217.114.33.0/24 maxlen: 24
217.114.36.0/24 maxlen: 24
217.119.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:d7:f5:41:8b:f2:bd:d5:d0:5c:8e:b7:c7:5e:e6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Aug 4 08:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd7cda5d769769a7006c6476054fd700427bbf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:bd:bb:89:2e:28:8d:dd:86:97:4d:b3:87:
24:6d:e8:25:e8:8c:97:08:a7:39:25:5e:88:7b:9f:
d1:2e:ab:13:46:ff:ca:8d:9e:2d:32:2e:77:90:ca:
bf:94:e0:81:7d:3c:8e:2b:11:f1:6d:ef:97:e0:c2:
1b:f3:5f:cb:c5:2f:01:d1:ae:41:fb:80:58:d5:8a:
56:5c:ba:20:90:77:1d:ff:ad:86:8c:35:a8:32:ed:
aa:10:47:36:95:76:db:f0:94:a7:fe:b0:d8:46:f8:
95:d4:f5:87:10:05:47:46:51:09:21:fe:c4:aa:8e:
c4:0f:05:9d:b2:74:e6:ed:db:3e:1c:03:12:b8:37:
7d:06:92:5b:51:ab:5e:99:a7:f3:8d:60:5e:ce:e5:
47:6b:28:e2:b2:85:ca:31:22:53:ed:6d:50:6d:82:
e3:4c:38:e8:33:fb:31:d2:6f:45:5f:d7:f1:f3:2a:
3f:bf:e3:52:5e:7a:76:53:3e:33:ff:68:83:92:e4:
31:06:0d:b5:00:f0:d5:9b:64:e4:36:20:16:a7:f7:
d0:0d:74:0c:ef:12:47:cc:bd:2f:a0:e7:1e:b7:25:
30:66:bc:d4:ae:72:a8:9c:cc:47:67:71:fd:74:78:
a2:1c:8c:dc:d6:c5:d8:aa:02:38:5e:8d:07:7f:8a:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:DA:5D:76:97:69:A7:00:6C:64:76:05:4F:D7:00:42:7B:BF:7D
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zXzaXXaXaacAbGR2BU_XAEJ7v30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.252.0/24
37.72.134.0/24
45.85.247.0/24
62.3.22.0/24
62.204.39.0/24
91.242.251.0/24
91.246.35.0/24
109.107.151.0/24
146.19.46.0/24
146.19.66.0/24
146.19.153.0/24
146.19.158.0/24
176.126.125.0/24
185.76.148.0/24
193.3.163.0/24
193.3.186.0/24
193.35.229.0/24
194.104.133.0/24
212.18.123.0/24
212.23.194.0/24
217.114.33.0/24
217.114.36.0/24
217.119.133.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6f:fd:de:64:3b:07:5e:4f:fb:6a:d1:6b:26:6c:49:ac:21:
a3:77:38:08:26:91:75:f6:1e:0a:77:c1:8b:20:4c:33:57:91:
3f:52:4e:21:e7:5e:2b:af:5a:63:a5:a2:dd:5f:1e:59:15:7d:
9b:c6:3b:b0:aa:9e:de:d5:b8:b1:c1:0b:91:ef:66:3e:26:2b:
19:2b:50:76:fb:d9:30:48:af:5c:d9:07:60:91:17:11:58:54:
9a:8e:a4:89:d9:4c:18:17:56:d0:a9:98:06:95:0a:90:52:f9:
31:84:63:8f:26:e1:12:65:45:20:fb:75:7c:51:62:87:35:54:
0f:f9:a5:96:43:63:0c:18:d3:2b:ba:12:ca:cc:45:e8:c3:7d:
3d:0e:e8:3b:b2:3a:e6:60:44:30:19:23:6d:7a:64:c5:b4:31:
24:94:dc:8b:ae:cc:71:cd:80:35:18:e9:f8:b0:50:d7:d5:4f:
ed:fb:ad:a6:bf:06:c7:fe:63:de:9f:e3:2e:18:48:26:f6:38:
84:e2:3d:1d:2f:a3:54:bb:18:e6:82:c3:bb:14:1b:0a:1f:c4:
41:d8:6f:bb:11:f1:38:81:b6:c5:f8:08:7b:f7:df:51:be:33:
c9:e5:36:ef:30:88:57:59:c0:52:73:3d:10:48:c2:0b:bf:58:
c0:5a:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:38 2026 by rpki-client