Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZbqxyNBBfiSdFRcJ32UwfAPy_eg.roa
File: ZbqxyNBBfiSdFRcJ32UwfAPy_eg.roa (raw, json)
Hash identifier: sT6dhDSXBZeTvFHF0vz7WMAQ7NscR0Dw3g8mP5yY5cA=
Subject key identifier: 65:BA:B1:C8:D0:41:7E:24:9D:15:17:09:DF:65:30:7C:03:F2:FD:E8
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A0EEB3DBCA110DA837DD1007367B3FB677
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZbqxyNBBfiSdFRcJ32UwfAPy_eg.roa
Signing time: Tue 29 Sep 2026 19:45:59 +0000
ROA not before: Tue 29 Sep 2026 19:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.57.0/24 maxlen: 24
31.216.63.0/24 maxlen: 24
37.221.81.0/24 maxlen: 24
45.11.196.0/24 maxlen: 24
46.254.110.0/24 maxlen: 24
62.192.138.0/24 maxlen: 24
62.233.34.0/24 maxlen: 24
62.233.48.0/24 maxlen: 24
77.87.120.0/24 maxlen: 24
84.246.84.0/24 maxlen: 24
84.246.86.0/24 maxlen: 24
84.246.87.0/24 maxlen: 24
84.246.106.0/24 maxlen: 24
84.246.109.0/24 maxlen: 24
87.236.150.0/24 maxlen: 24
87.236.151.0/24 maxlen: 24
88.151.15.0/24 maxlen: 24
89.107.14.0/24 maxlen: 24
89.107.15.0/24 maxlen: 24
89.248.70.0/24 maxlen: 24
91.190.153.0/24 maxlen: 24
91.199.189.0/24 maxlen: 24
91.220.198.0/24 maxlen: 24
91.246.34.0/24 maxlen: 24
91.246.48.0/24 maxlen: 24
91.246.53.0/24 maxlen: 24
91.246.54.0/24 maxlen: 24
91.247.161.0/24 maxlen: 24
91.247.162.0/24 maxlen: 24
91.247.165.0/24 maxlen: 24
91.247.166.0/24 maxlen: 24
91.247.167.0/24 maxlen: 24
91.247.173.0/24 maxlen: 24
91.247.183.0/24 maxlen: 24
93.157.104.0/24 maxlen: 24
93.157.109.0/24 maxlen: 24
109.94.161.0/24 maxlen: 24
109.94.163.0/24 maxlen: 24
109.107.136.0/24 maxlen: 24
109.107.141.0/24 maxlen: 24
109.107.142.0/24 maxlen: 24
109.107.144.0/24 maxlen: 24
109.107.147.0/24 maxlen: 24
109.107.148.0/24 maxlen: 24
109.205.184.0/24 maxlen: 24
109.205.188.0/24 maxlen: 24
176.97.199.0/24 maxlen: 24
176.97.203.0/24 maxlen: 24
176.97.208.0/24 maxlen: 24
176.97.222.0/24 maxlen: 24
176.97.223.0/24 maxlen: 24
176.116.3.0/24 maxlen: 24
176.116.12.0/24 maxlen: 24
185.188.41.0/24 maxlen: 24
193.5.28.0/24 maxlen: 24
193.31.4.0/24 maxlen: 24
193.107.22.0/24 maxlen: 24
193.160.219.0/24 maxlen: 24
193.163.22.0/24 maxlen: 24
193.187.97.0/24 maxlen: 24
194.26.134.0/24 maxlen: 24
194.26.224.0/24 maxlen: 24
194.26.227.0/24 maxlen: 24
194.104.228.0/24 maxlen: 24
194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
195.88.220.0/24 maxlen: 24
195.96.144.0/24 maxlen: 24
195.96.147.0/24 maxlen: 24
195.96.154.0/24 maxlen: 24
212.18.126.0/24 maxlen: 24
212.52.25.0/24 maxlen: 24
212.52.26.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
217.198.176.0/24 maxlen: 24
217.198.178.0/24 maxlen: 24
217.198.179.0/24 maxlen: 24
217.198.180.0/24 maxlen: 24
217.198.181.0/24 maxlen: 24
217.198.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:b3:db:ca:11:0d:a8:37:dd:10:07:36:7b:3f:b6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Sep 29 19:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65bab1c8d0417e249d151709df65307c03f2fde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:9f:b2:f5:06:aa:b5:69:9c:32:0f:2a:f7:
47:f9:68:60:d7:c2:b3:11:c5:df:cc:97:3a:71:fe:
97:75:35:6b:ed:01:86:c8:cd:69:93:aa:9b:b5:79:
09:4b:6f:06:06:7b:88:49:72:88:90:ec:ea:0c:3a:
49:05:57:f0:b2:64:f4:08:77:47:d1:f7:88:0a:22:
7f:b5:70:98:e6:6d:23:ff:65:be:13:b7:b6:d9:6b:
74:34:32:59:ae:98:b2:3e:b5:20:74:7c:f6:78:27:
aa:49:bf:d3:22:48:03:bc:5b:44:74:d4:6a:02:ce:
fd:16:b0:63:9a:95:85:ef:98:1a:45:a3:a1:84:3e:
31:3a:c3:46:2a:ae:43:62:7b:83:0d:07:44:75:40:
62:54:e8:cd:fa:db:50:ac:60:e5:50:c6:fd:ff:36:
d5:79:66:50:ec:c7:63:9f:13:c5:48:52:e9:5c:f8:
15:75:16:fb:e1:d2:a6:8f:fc:49:93:e6:78:a7:e2:
bb:a7:53:10:38:82:6a:7d:35:7b:23:16:96:bc:4a:
55:91:42:9e:6d:05:d8:45:a3:ff:99:41:9f:9b:23:
78:0c:a4:1d:b0:c9:5a:39:3b:0c:79:e3:16:3d:b0:
8d:f2:83:e5:8f:26:75:bc:e8:0d:ab:cf:31:3f:ce:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:B1:C8:D0:41:7E:24:9D:15:17:09:DF:65:30:7C:03:F2:FD:E8
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZbqxyNBBfiSdFRcJ32UwfAPy_eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.57.0/24
31.216.63.0/24
37.221.81.0/24
45.11.196.0/24
46.254.110.0/24
62.192.138.0/24
62.233.34.0/24
62.233.48.0/24
77.87.120.0/24
84.246.84.0/24
84.246.86.0/23
84.246.106.0/24
84.246.109.0/24
87.236.150.0/23
88.151.15.0/24
89.107.14.0/23
89.248.70.0/24
91.190.153.0/24
91.199.189.0/24
91.220.198.0/24
91.246.34.0/24
91.246.48.0/24
91.246.53.0-91.246.54.255
91.247.161.0-91.247.162.255
91.247.165.0-91.247.167.255
91.247.173.0/24
91.247.183.0/24
93.157.104.0/24
93.157.109.0/24
109.94.161.0/24
109.94.163.0/24
109.107.136.0/24
109.107.141.0-109.107.142.255
109.107.144.0/24
109.107.147.0-109.107.148.255
109.205.184.0/24
109.205.188.0/24
176.97.199.0/24
176.97.203.0/24
176.97.208.0/24
176.97.222.0/23
176.116.3.0/24
176.116.12.0/24
185.188.41.0/24
193.5.28.0/24
193.31.4.0/24
193.107.22.0/24
193.160.219.0/24
193.163.22.0/24
193.187.97.0/24
194.26.134.0/24
194.26.224.0/24
194.26.227.0/24
194.104.228.0/24
194.105.60.0/24
194.107.92.0/24
195.88.220.0/24
195.96.144.0/24
195.96.147.0/24
195.96.154.0/24
212.18.126.0/24
212.52.25.0-212.52.26.255
213.217.11.0/24
217.198.176.0/24
217.198.178.0-217.198.182.255
Signature Algorithm: sha256WithRSAEncryption
12:f9:dc:81:f7:f8:90:5d:be:a3:ef:96:7f:6d:c3:10:f9:99:
3a:79:15:11:41:c7:4b:10:eb:bf:c6:35:da:84:ad:c4:d6:b4:
58:63:79:4a:e2:9f:ba:20:6c:b7:76:60:d2:69:80:8d:a6:ff:
33:9f:b9:42:c4:e2:fa:38:7d:db:d0:ad:f2:0f:aa:0c:b4:0c:
7e:70:53:46:37:43:a6:4a:7b:ad:be:ae:18:d8:1f:45:fa:8b:
5e:30:7c:0e:b4:cc:87:0b:75:3d:2b:85:f4:c3:32:b0:20:b5:
f2:02:ab:43:e3:7f:0b:8f:75:44:66:a4:79:b1:67:96:05:13:
10:d2:14:4b:4d:a2:7f:9c:aa:98:48:14:d2:6f:40:8f:19:3f:
2d:97:02:4b:55:04:55:67:9b:f9:65:ba:be:2d:6b:30:28:5a:
9d:61:42:f8:56:0d:7b:a9:67:68:49:a5:e6:4e:1f:df:6e:cf:
8b:da:24:b1:96:73:f1:92:a3:4d:f9:a1:d3:a0:ed:c0:8e:d1:
9a:12:bd:ac:d5:95:97:d7:de:b2:f5:c6:1b:f3:f8:8a:97:93:
96:4c:5c:df:2f:08:98:31:15:be:6b:70:90:21:83:e3:7a:de:
88:a6:d7:5a:88:32:62:a0:95:c6:ba:e4:f7:aa:86:78:f6:3d:
fa:5d:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:45:38 2026 by rpki-client