Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wZq-y-LPEU4Sqo2jCa7Fbl2V0SE.roa
File: wZq-y-LPEU4Sqo2jCa7Fbl2V0SE.roa (raw, json)
Hash identifier: LOeHc/BPiEEnjdvqr7o8YYs4381FBcyeQcgkG1AqQFQ=
Subject key identifier: C1:9A:BE:CB:E2:CF:11:4E:12:AA:8D:A3:09:AE:C5:6E:5D:95:D1:21
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E68E4862393B9C714D3258909114E949C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wZq-y-LPEU4Sqo2jCa7Fbl2V0SE.roa
Signing time: Wed 27 May 2026 10:04:27 +0000
ROA not before: Wed 27 May 2026 10:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 46.33.64.0/19 maxlen: 24
62.41.0.0/20 maxlen: 24
62.41.16.0/21 maxlen: 24
62.41.56.0/21 maxlen: 24
62.41.64.0/20 maxlen: 24
62.41.80.0/22 maxlen: 24
62.41.84.0/23 maxlen: 24
62.41.102.0/24 maxlen: 24
62.41.160.0/24 maxlen: 24
62.50.128.0/19 maxlen: 19
62.132.0.0/22 maxlen: 22
62.132.16.0/22 maxlen: 22
62.132.24.0/23 maxlen: 23
62.132.28.0/24 maxlen: 24
62.132.42.0/23 maxlen: 23
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
62.132.132.0/23 maxlen: 23
77.67.0.0/17 maxlen: 24
77.77.128.0/18 maxlen: 24
87.119.64.0/18 maxlen: 24
89.149.128.0/18 maxlen: 24
92.71.0.0/17 maxlen: 17
92.71.128.0/18 maxlen: 18
134.222.0.0/16 maxlen: 16
135.196.48.0/21 maxlen: 24
135.196.228.0/23 maxlen: 24
135.196.232.0/23 maxlen: 24
135.196.238.0/23 maxlen: 24
141.136.96.0/20 maxlen: 20
185.160.40.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
192.54.104.0/24 maxlen: 24
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
192.67.196.0/24 maxlen: 24
192.129.32.0/23 maxlen: 23
192.129.36.0/24 maxlen: 24
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
192.129.56.0/23 maxlen: 24
193.141.0.0/23 maxlen: 23
193.141.40.0/22 maxlen: 22
193.141.44.0/23 maxlen: 23
193.141.140.0/23 maxlen: 23
193.242.80.0/20 maxlen: 20
194.41.62.0/24 maxlen: 24
194.45.4.0/23 maxlen: 23
194.45.12.0/23 maxlen: 23
194.45.98.0/23 maxlen: 23
194.45.182.0/23 maxlen: 23
194.120.0.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
194.120.112.0/22 maxlen: 22
194.120.120.0/22 maxlen: 22
194.121.52.0/22 maxlen: 22
194.121.104.0/23 maxlen: 23
194.121.123.0/24 maxlen: 24
194.121.203.0/24 maxlen: 24
194.121.220.0/22 maxlen: 22
194.122.76.0/22 maxlen: 22
194.122.80.0/21 maxlen: 21
194.122.120.0/21 maxlen: 21
194.122.224.0/20 maxlen: 20
194.122.248.0/22 maxlen: 22
194.123.122.0/24 maxlen: 24
194.123.164.0/24 maxlen: 24
195.86.28.0/22 maxlen: 24
195.86.32.0/22 maxlen: 24
195.86.44.0/22 maxlen: 24
195.86.52.0/22 maxlen: 24
195.86.164.0/22 maxlen: 24
195.86.176.0/20 maxlen: 24
195.86.224.0/21 maxlen: 24
195.86.236.0/23 maxlen: 24
195.143.0.0/16 maxlen: 24
212.0.224.0/19 maxlen: 19
212.1.0.0/19 maxlen: 19
212.14.64.0/19 maxlen: 19
212.27.160.0/19 maxlen: 19
212.56.0.0/19 maxlen: 19
212.81.64.0/18 maxlen: 18
212.115.128.0/18 maxlen: 24
212.189.0.0/17 maxlen: 17
212.221.0.0/17 maxlen: 24
212.222.0.0/16 maxlen: 24
213.200.64.0/18 maxlen: 18
213.251.0.0/18 maxlen: 24
213.254.192.0/18 maxlen: 24
217.114.112.0/20 maxlen: 20
217.117.160.0/20 maxlen: 20
217.118.112.0/20 maxlen: 20
217.195.224.0/19 maxlen: 19
2001:668::/29 maxlen: 64
2001:680::/32 maxlen: 32
2001:680:12::/48 maxlen: 48
2001:680:16::/48 maxlen: 48
2001:680:19::/48 maxlen: 48
2001:680:20::/48 maxlen: 48
2a00:1750::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:e4:86:23:93:b9:c7:14:d3:25:89:09:11:4e:94:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 27 10:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c19abecbe2cf114e12aa8da309aec56e5d95d121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:66:ba:37:0c:b3:59:92:62:88:ce:c4:22:2d:
d7:3c:48:de:d0:d9:29:9f:bd:87:5b:54:74:56:c2:
d1:49:e1:ed:cf:a7:c5:07:cf:77:aa:8f:f4:8a:96:
9f:12:cd:ea:d1:b0:22:60:4e:d0:4e:47:3b:60:05:
65:bf:f6:3e:c5:c5:65:8c:5f:1f:f7:a1:11:08:1b:
d1:d7:ef:1d:c3:69:ef:2a:04:07:1c:34:49:bc:b4:
5d:72:9b:60:60:65:d7:4f:9e:db:8c:1a:51:85:25:
e5:1f:5a:4f:f0:93:03:1f:66:fe:16:45:59:17:c8:
85:8a:93:6b:47:cd:a0:2a:a5:da:dd:10:97:97:aa:
90:7e:35:1e:dd:ae:d3:95:2e:0b:b2:bd:0e:2b:ea:
73:15:a1:13:68:c4:5e:e4:ce:9b:59:ae:30:5b:30:
fe:23:99:fc:4b:59:b3:4c:78:75:2c:e6:fe:c4:b9:
f6:97:b1:6a:db:24:07:06:d7:3c:82:95:0b:88:d1:
a4:d3:25:10:4e:7f:ec:97:c8:ab:f2:7e:f6:d7:f3:
43:0f:1a:5e:16:de:dc:f3:c2:fd:5f:db:fc:16:37:
27:99:ab:c3:32:05:b3:4b:5b:b1:aa:5c:5a:48:7c:
a2:a2:13:66:28:1e:a8:68:87:7b:ae:4f:20:13:27:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:BE:CB:E2:CF:11:4E:12:AA:8D:A3:09:AE:C5:6E:5D:95:D1:21
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wZq-y-LPEU4Sqo2jCa7Fbl2V0SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
62.41.0.0-62.41.23.255
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.50.128.0/19
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
92.71.0.0-92.71.191.255
134.222.0.0/16
135.196.48.0/21
135.196.228.0/23
135.196.232.0/23
135.196.238.0/23
141.136.96.0/20
185.160.40.0/22
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0/23
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.98.0/23
194.45.182.0/23
194.120.0.0/24
194.120.43.0/24
194.120.112.0/22
194.120.120.0/22
194.121.52.0/22
194.121.104.0/23
194.121.123.0/24
194.121.203.0/24
194.121.220.0/22
194.122.76.0-194.122.87.255
194.122.120.0/21
194.122.224.0/20
194.122.248.0/22
194.123.122.0/24
194.123.164.0/24
195.86.28.0-195.86.35.255
195.86.44.0/22
195.86.52.0/22
195.86.164.0/22
195.86.176.0/20
195.86.224.0/21
195.86.236.0/23
195.143.0.0/16
212.0.224.0-212.1.31.255
212.14.64.0/19
212.27.160.0/19
212.56.0.0/19
212.81.64.0/18
212.115.128.0/18
212.189.0.0/17
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
217.114.112.0/20
217.117.160.0/20
217.118.112.0/20
217.195.224.0/19
IPv6:
2001:668::/29
2001:680::/32
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
38:f1:ce:ca:3b:9d:1a:59:5b:41:51:29:d8:6f:6f:6e:82:22:
dc:8b:5b:40:fb:9c:af:ae:89:52:5c:b3:44:12:6c:f3:ec:07:
18:70:67:43:78:bb:30:19:45:27:00:11:e3:47:39:ba:7c:ff:
d2:16:04:9c:56:53:10:19:26:3d:39:ce:db:97:62:98:ff:66:
83:20:4f:27:0c:7e:8e:35:1b:0d:3e:cd:f7:16:7b:ea:86:e1:
59:a4:4a:84:93:1b:f4:12:67:bc:e3:78:42:56:96:d3:70:f5:
99:d8:fc:46:99:97:ea:ce:5e:18:35:16:4c:6e:81:87:58:a0:
1a:43:03:08:03:f2:2b:11:7c:cc:23:f0:42:fc:dd:5a:86:6f:
04:26:65:bd:a2:f1:26:74:db:d6:47:4c:5c:49:79:a4:c4:8b:
c4:7b:6d:8c:f9:0f:c9:59:32:ed:18:0f:95:fe:04:7e:41:0a:
c5:1f:74:15:31:de:c8:19:9a:6e:37:61:bb:a0:25:e8:d5:16:
99:ce:08:c3:58:f4:0e:07:99:c0:26:53:a7:42:8e:b9:30:86:
c8:69:a7:ee:90:5a:b0:66:ad:bb:c0:c6:56:09:5e:d9:4b:4b:
7a:4f:7b:77:44:d1:eb:3d:9b:e9:f6:0f:7f:f0:1b:ac:b4:db:
38:80:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:32 2026 by rpki-client