Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zbx-AoyRPfKlpRxY1FLvy-jx_fs.roa
File: zbx-AoyRPfKlpRxY1FLvy-jx_fs.roa (raw, json)
Hash identifier: dC/oxIc1GVqGcEbeHpQ0LHCSkmGECSzBLk63hl7Z1I0=
Subject key identifier: CD:BC:7E:02:8C:91:3D:F2:A5:A5:1C:58:D4:52:EF:CB:E8:F1:FD:FB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E8EA1D33FDB22F016CD9459CB8C8B41E4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zbx-AoyRPfKlpRxY1FLvy-jx_fs.roa
Signing time: Wed 03 Jun 2026 17:57:10 +0000
ROA not before: Wed 03 Jun 2026 17:57:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.53.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.74.0/24 maxlen: 24
78.17.78.0/24 maxlen: 24
78.17.80.0/24 maxlen: 24
78.17.102.0/24 maxlen: 24
78.17.124.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.49.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.212.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a1:d3:3f:db:22:f0:16:cd:94:59:cb:8c:8b:41:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 3 17:57:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cdbc7e028c913df2a5a51c58d452efcbe8f1fdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:cd:1c:a2:12:e5:d7:c3:8d:e4:89:2b:55:
82:32:cc:2b:86:4d:0d:d6:0c:8b:34:5a:c8:bf:73:
f5:5f:b1:c5:5d:ed:19:8b:08:ec:e4:da:e8:38:14:
9c:40:59:d9:a4:df:30:89:9a:f4:99:b8:6e:87:0c:
de:8f:c0:6d:06:82:b5:50:d1:d6:b0:ac:2b:1a:63:
51:35:fa:ca:f5:c8:25:6a:d9:16:ed:58:ed:d9:78:
e4:95:7f:c9:95:d8:8b:d4:67:7c:f2:4d:3e:c1:ef:
0b:df:c2:09:72:e7:50:85:c2:f1:f5:00:29:48:25:
a1:6b:e3:ab:ce:4f:8a:1c:cc:dc:0d:fe:3f:25:6a:
21:b8:17:4d:f5:2b:2b:80:47:d0:b3:de:25:65:d7:
b6:fd:68:d3:43:85:6d:4c:f8:03:81:e4:fa:ac:19:
5a:61:6e:d1:ea:38:20:de:af:f4:82:53:c4:ca:00:
5a:35:1d:37:80:fc:76:95:3d:62:3f:0d:37:38:6b:
8d:48:b2:6f:83:8e:7b:76:24:36:94:68:f2:3d:f2:
19:10:e1:06:4d:5c:e2:69:eb:2d:c1:ea:e6:9e:e8:
f0:ee:e0:cb:e9:bf:09:7b:44:73:88:99:9f:19:f1:
c3:30:77:08:fe:87:ca:86:a0:e5:27:e7:82:23:29:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:7E:02:8C:91:3D:F2:A5:A5:1C:58:D4:52:EF:CB:E8:F1:FD:FB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zbx-AoyRPfKlpRxY1FLvy-jx_fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.53.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.74.0/24
78.17.78.0/24
78.17.80.0/24
78.17.102.0/24
78.17.124.0/24
78.17.150.0/24
78.17.192.0/24
78.17.198.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.49.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.122.0/23
89.125.130.0/23
89.125.151.0-89.125.152.255
89.125.159.0/24
89.125.181.0/24
89.125.188.0/24
89.125.197.0/24
89.125.203.0/24
89.125.210.0/24
89.125.212.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
104.143.205.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
194.135.124.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6d:0b:15:b1:46:f3:0b:b1:66:91:58:58:bc:ef:21:3c:8a:
2f:e3:12:56:a0:b4:5a:d0:73:c0:51:6d:2c:a1:53:23:bb:2e:
f4:09:10:80:28:8a:4c:cd:71:71:ca:c5:6a:2b:b7:29:9d:ee:
04:31:a3:7c:21:27:a3:b0:63:10:25:ee:03:a4:c6:5e:86:45:
a4:cc:f2:a2:95:6f:a7:8a:38:7e:3f:a1:82:11:67:5b:61:ee:
00:27:70:c8:a2:6e:62:01:dd:a2:1a:17:11:70:2d:3e:61:bc:
a2:9d:0c:9c:61:7f:7f:00:60:9f:03:28:f3:ea:73:85:e9:c3:
e5:8e:85:98:0a:19:68:84:28:63:92:1b:9b:71:23:18:81:c4:
13:dc:63:7d:b1:e2:75:0c:46:2e:33:78:fd:7d:0c:76:bc:ff:
ab:86:b3:26:ba:ed:98:59:46:82:c5:bc:39:33:4a:49:93:97:
a3:00:72:28:07:90:2a:03:f3:e1:61:81:35:b0:f7:cd:98:29:
3c:dd:12:58:63:76:d6:22:cc:a0:07:e0:c4:10:9b:c2:ad:90:
60:0b:cf:5f:41:c1:8b:b6:a5:c3:50:72:94:ed:89:90:df:61:
61:f9:6c:04:af:cf:cf:f4:bc:6a:ba:5d:5b:f6:98:a1:17:17:
d5:3f:6f:26
-----BEGIN CERTIFICATE-----
MIIHgTCCBmmgAwIBAgISAZ6OodM/2yLwFs2UWcuMi0HkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwNjAzMTc1NzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGJjN2UwMjhjOTEzZGYyYTVhNTFjNThkNDUyZWZjYmU4ZjFmZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMbNHKIS5dfDjeSJK1WCMswrhk0N
1gyLNFrIv3P1X7HFXe0Ziwjs5NroOBScQFnZpN8wiZr0mbhuhwzej8BtBoK1UNHW
sKwrGmNRNfrK9cglatkW7Vjt2XjklX/JldiL1Gd88k0+we8L38IJcudQhcLx9QAp
SCWha+Orzk+KHMzcDf4/JWohuBdN9SsrgEfQs94lZde2/WjTQ4VtTPgDgeT6rBla
YW7R6jgg3q/0glPEygBaNR03gPx2lT1iPw03OGuNSLJvg457diQ2lGjyPfIZEOEG
TVziaestwermnujw7uDL6b8Je0RziJmfGfHDMHcI/ofKhqDlJ+eCIyl/wwIDAQAB
o4IEjTCCBIkwHQYDVR0OBBYEFM28fgKMkT3ypaUcWNRS78vo8f37MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvemJ4LUFveVJQZktscFJ4WTFGTHZ5LWp4X2ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICoQYIKwYBBQUHAQcBAf8EggKQMIICjDCCAogEAgABMIIC
gAMEAQI58gMEAC1YDwMEAC2HtgMEAE1RZQMEAE4RAjAMAwQAThEJAwQAThEKMAwD
BABOEQ0DBABOERADBABOERgwDAMEAE4RJQMEAE4RJjAMAwQAThEpAwQAThEqAwQA
ThEtAwQAThE1AwQBThE4MAwDBABOETsDBABOETwDBABOET8DBABOEUQDBABOEUoD
BABOEU4DBABOEVADBABOEWYDBABOEXwDBABOEZYDBABOEcADBABOEcYDBABPbuMD
BABVzBIDBABZI3cDBABZI4EDBABZJbkDBABZJ3gDBABZKEYDBAJZfQAwDAMEAFl9
EQMEAll9EAMEAFl9GQMEAFl9MQMEAFl9MzAMAwQAWX01AwQAWX02AwQAWX04AwQB
WX08AwQAWX0/AwQAWX1EAwQAWX1JAwQAWX1NAwQAWX1VMAwDBABZfVkDBABZfVwD
BABZfV8DBABZfWIDBABZfWgDBAFZfXoDBAFZfYIwDAMEAFl9lwMEAFl9mAMEAFl9
nwMEAFl9tQMEAFl9vAMEAFl9xQMEAFl9ywMEAFl90gMEAFl91AMEAFl9/QMEAF6x
DQMEAF6xagMEAF6xkQMEAGc4VAMEAGdJIwMEAGiPzQMEAKcRKDAMAwQEpxGwAwQA
pxGyAwQApxG0AwQApxG2AwQAudR3AwQAvNBnAwQAvNUAAwQAvNZrAwQAwXwkAwQA
wXzhAwQAwlX5AwQAwlX7AwQAwod8AwQBykcMAwQAykcPAwQAzE0BAwQAzvWBAwQA
zvWDMAwDBADO9YUDBAPO9YADBADO9Z0DBADO9Z8DBADQe7kDBAHQe74DBADUwAAD
BADUwAgDBADUwAsDBADUwNQwDQYJKoZIhvcNAQELBQADggEBAGBtCxWxRvMLsWaR
WFi87yE8ii/jElagtFrQc8BRbSyhUyO7LvQJEIAoikzNcXHKxWortymd7gQxo3wh
J6OwYxAl7gOkxl6GRaTM8qKVb6eKOH4/oYIRZ1th7gAncMiibmIB3aIaFxFwLT5h
vKKdDJxhf38AYJ8DKPPqc4Xpw+WOhZgKGWiEKGOSG5txIxiBxBPcY32x4nUMRi4z
eP19DHa8/6uGsya67ZhZRoLFvDkzSkmTl6MAcigHkCoD8+FhgTWw982YKTzdElhj
dtYizKAH4MQQm8KtkGALz19BwYu2pcNQcpTtiZDfYWH5bASvz8/0vGq6XVv2mKEX
F9U/byY=
-----END CERTIFICATE-----
Generated at Thu Jun 4 06:21:07 2026 by rpki-client