Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ZccDiUeWmi3OkVpCGa9ybRfzWUI.roa
File: ZccDiUeWmi3OkVpCGa9ybRfzWUI.roa (raw, json)
Hash identifier: TgK/ENxpghgQEYHSAvUMPKICJH33ojk2PofhnHEenN4=
Subject key identifier: 65:C7:03:89:47:96:9A:2D:CE:91:5A:42:19:AF:72:6D:17:F3:59:42
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019E2F888575FDFF6E0D7D8558E849D5AFFA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ZccDiUeWmi3OkVpCGa9ybRfzWUI.roa
Signing time: Sat 16 May 2026 06:45:36 +0000
ROA not before: Sat 16 May 2026 06:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/24 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.248.0/24 maxlen: 24
37.202.251.0/24 maxlen: 24
94.182.81.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.103.0/24 maxlen: 24
94.182.104.0/23 maxlen: 24
94.182.106.0/24 maxlen: 24
94.182.107.0/24 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.114.0/24 maxlen: 24
94.182.116.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.135.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.137.0/24 maxlen: 24
94.182.144.0/24 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:88:85:75:fd:ff:6e:0d:7d:85:58:e8:49:d5:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: May 16 06:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65c7038947969a2dce915a4219af726d17f35942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:81:fa:15:2e:25:2c:a0:a4:78:e9:e0:4b:
f7:fa:4e:c0:03:d9:0e:ce:35:71:77:96:81:b9:74:
92:a7:63:c0:5b:87:0b:6c:4f:11:61:7b:0e:c5:d2:
fa:55:7f:d4:c3:9d:16:fb:3f:5e:f8:51:11:26:68:
fb:13:91:83:42:4c:56:2f:66:ad:59:94:49:2b:3e:
b8:7f:dc:c0:25:b6:2e:eb:6f:90:9a:a8:dd:33:ca:
81:20:92:43:b0:d1:dd:2f:30:72:3b:91:75:42:39:
d4:1a:88:d4:30:c2:3f:e9:d8:18:b9:dc:c8:44:4c:
45:2d:6c:1f:a4:f0:be:40:ce:94:b8:bf:4a:8a:e5:
4d:20:d9:4e:96:5f:65:51:16:b3:3d:a4:16:91:61:
45:d8:87:47:6b:52:09:6f:7e:7d:15:d2:fe:11:e6:
d0:27:7b:5c:da:f5:2b:03:31:2f:e5:ed:b6:c2:4b:
59:1a:64:79:16:b9:06:8c:2f:e4:d3:3f:c5:8f:8b:
8b:b7:68:a0:a6:ba:62:9a:e1:bd:60:7f:29:91:c8:
61:fd:ba:49:c4:c1:29:67:46:27:a4:09:5a:b8:78:
0e:3b:55:c3:c3:6e:bf:47:35:75:5f:3f:a6:bc:a1:
8d:f1:92:46:dc:9f:96:93:64:42:73:11:49:d3:bf:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:03:89:47:96:9A:2D:CE:91:5A:42:19:AF:72:6D:17:F3:59:42
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ZccDiUeWmi3OkVpCGa9ybRfzWUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.242.255
37.202.244.0-37.202.248.255
37.202.251.0/24
94.182.81.0/24
94.182.101.0/24
94.182.103.0-94.182.109.255
94.182.114.0/24
94.182.116.0/24
94.182.129.0/24
94.182.131.0-94.182.132.255
94.182.134.0-94.182.137.255
94.182.144.0/23
94.182.147.0/24
94.182.149.0-94.182.152.255
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
78:29:9a:de:ab:aa:81:3b:dc:de:09:95:fd:d8:e4:ac:2c:2c:
98:fb:fe:cd:1b:a1:a7:de:45:6c:04:b5:8f:0c:85:23:56:0e:
11:e6:3b:c8:10:4a:ca:ef:59:8f:61:e3:ec:6e:23:e4:12:c9:
f9:e8:d7:de:e3:87:91:45:1d:36:be:ba:f9:82:05:b6:01:2d:
32:2a:34:89:78:53:74:d6:4b:11:86:a8:0a:a0:93:a1:92:66:
7c:29:07:fe:64:4a:bd:27:3e:67:13:84:85:5f:97:fb:db:fc:
f0:a1:6c:80:2e:33:93:b2:a0:f2:6e:ba:ca:fe:97:47:cf:4b:
49:b3:46:c3:24:83:a5:d7:b2:23:63:8d:ee:82:70:dc:e9:c5:
ed:f4:94:c5:00:b2:15:c8:bf:17:7f:64:9e:45:18:f5:ee:b3:
56:57:e8:57:29:f9:d9:7e:70:64:1d:3d:e6:3e:f4:d5:73:f4:
54:ba:18:d8:99:43:7c:b7:9c:67:23:08:42:73:24:ee:6a:5a:
c8:0d:c1:21:8b:04:21:a3:86:c0:c3:0f:e5:30:63:af:d0:ea:
13:32:65:50:e6:c5:1f:63:aa:e9:87:61:fd:a7:51:c3:4e:f8:
43:02:a8:b1:c6:9c:c8:e6:77:24:b4:c5:13:ef:d4:74:1a:24:
96:bd:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 20:42:33 2026 by rpki-client