Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZRcZL61j2V2FKjZUpy53OS688i8.roa
File: ZRcZL61j2V2FKjZUpy53OS688i8.roa (raw, json)
Hash identifier: wAb1IEyizCTSaW/PxHmdJfNo47ObLQQXhF8nK6OE+P4=
Subject key identifier: 65:17:19:2F:AD:63:D9:5D:85:2A:36:54:A7:2E:77:39:2E:BC:F2:2F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A163253F336C510C84827CFD6B8587D003
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZRcZL61j2V2FKjZUpy53OS688i8.roa
Signing time: Thu 22 Oct 2026 10:25:47 +0000
ROA not before: Thu 22 Oct 2026 10:25:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:25:3f:33:6c:51:0c:84:82:7c:fd:6b:85:87:d0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 22 10:25:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6517192fad63d95d852a3654a72e77392ebcf22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:b3:af:71:e4:0d:c2:50:b7:1b:48:ca:33:
e4:a8:70:77:33:5f:4b:79:6d:d6:c1:ca:32:ce:8d:
3b:20:a8:be:af:de:5e:09:39:57:b2:e1:03:52:40:
9b:9e:8b:98:56:c0:8c:64:9e:2c:d2:a6:f8:34:7c:
aa:e4:7d:48:e4:ab:63:b0:07:ba:9a:82:77:5a:cd:
78:ec:e6:44:73:0b:69:64:fa:ff:2c:a8:6e:03:f9:
05:cf:bc:14:b0:81:60:50:01:15:33:38:e6:14:1b:
ca:a0:70:0b:89:75:22:78:3c:92:3e:ce:0d:04:11:
72:2f:43:8d:c7:f3:59:5a:c9:ab:93:3c:ca:51:9e:
98:b3:fa:e2:c2:53:cf:45:6a:11:b2:ad:d8:af:83:
0f:dc:e4:23:03:7b:d8:f6:e7:e8:19:0b:6e:43:27:
5a:12:91:2b:42:e6:ef:bf:13:fb:e3:b0:95:34:cb:
34:db:52:b6:1f:48:8c:db:30:34:52:b8:26:62:07:
bb:20:d8:9b:05:64:d4:d9:96:8d:b3:00:65:82:84:
7c:3c:77:21:97:10:5b:15:3a:75:32:5e:6f:91:66:
64:98:41:e2:3d:2c:b2:5f:3f:1b:01:51:15:83:12:
ce:33:39:ea:db:1f:ce:72:45:6c:ac:e0:5f:ba:8e:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:17:19:2F:AD:63:D9:5D:85:2A:36:54:A7:2E:77:39:2E:BC:F2:2F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZRcZL61j2V2FKjZUpy53OS688i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.74.244.0/24
45.136.4.0/24
77.83.200.0/22
109.236.49.0/24
185.254.28.0/24
185.254.31.0/24
193.35.155.0/24
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:3::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:3a:9f:24:7c:bd:d1:84:42:eb:91:c5:6f:1e:3f:d0:2c:5d:
ec:55:6e:f2:14:58:b8:ef:32:79:f8:63:e8:96:7f:03:12:53:
16:fc:ee:39:80:34:6a:7b:66:f3:a0:31:33:48:f4:fa:00:09:
a6:a9:01:cb:b5:65:44:03:6f:ec:a6:b3:c7:92:26:59:5f:2a:
80:0b:be:5e:c7:53:66:98:63:8a:6e:7c:cc:c3:15:2c:71:98:
5c:39:e3:41:57:2c:ae:33:1a:b9:54:ee:0b:fa:7a:4a:32:ff:
e2:0f:b6:58:3b:1b:61:c2:d8:09:67:71:cb:0e:ac:6d:68:49:
e5:88:dc:ba:27:11:80:66:af:67:fe:dc:14:94:30:d2:df:e0:
1a:a2:cd:31:76:3e:90:b2:01:d1:b2:aa:26:16:05:5d:a6:88:
c1:1d:00:fa:d1:20:db:b6:e1:bd:b9:b1:0b:07:b8:a0:06:b1:
51:fd:a3:00:8a:3b:6e:ea:54:44:35:f0:1b:32:c9:64:86:c8:
18:dd:01:6a:d8:0b:5e:dd:9d:3c:a4:f5:af:f9:a1:25:5e:ff:
c8:2f:40:f6:d2:69:44:c8:c6:45:30:04:2f:37:85:a6:03:61:
38:10:8c:c5:76:9d:3b:91:ed:87:dd:54:2b:4e:52:36:7a:72:
2c:c0:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:47:51 2026 by rpki-client