Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ZbSrOte3J1bjSkMjIcjwzDpvPJA.roa
File: ZbSrOte3J1bjSkMjIcjwzDpvPJA.roa (raw, json)
Hash identifier: 4PfqWbbb/AkFI2O3OXjGcGzMpkxwYMJ2P6SIOk3keto=
Subject key identifier: 65:B4:AB:3A:D7:B7:27:56:E3:4A:43:23:21:C8:F0:CC:3A:6F:3C:90
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019E2AF58FA72DA5C0076AC377B5F378D971
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ZbSrOte3J1bjSkMjIcjwzDpvPJA.roa
Signing time: Fri 15 May 2026 09:26:36 +0000
ROA not before: Fri 15 May 2026 09:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 32
37.230.168.0/23 maxlen: 32
37.230.172.0/22 maxlen: 32
37.230.188.0/22 maxlen: 32
45.133.96.0/22 maxlen: 32
45.159.136.0/22 maxlen: 32
45.159.136.0/24 maxlen: 32
45.159.137.0/24 maxlen: 32
45.159.138.0/24 maxlen: 32
46.21.244.0/22 maxlen: 32
46.243.209.0/24 maxlen: 32
46.243.210.0/23 maxlen: 32
46.243.212.0/24 maxlen: 32
51.250.0.0/17 maxlen: 32
62.84.112.0/20 maxlen: 32
81.26.176.0/20 maxlen: 32
84.201.128.0/18 maxlen: 32
84.252.128.0/20 maxlen: 32
89.104.112.0/23 maxlen: 32
89.169.128.0/18 maxlen: 32
89.232.188.0/22 maxlen: 32
92.255.1.0/24 maxlen: 32
92.255.3.0/24 maxlen: 32
92.255.13.0/24 maxlen: 32
92.255.15.0/24 maxlen: 32
93.77.160.0/19 maxlen: 32
103.76.52.0/22 maxlen: 32
111.88.144.0/20 maxlen: 32
111.88.240.0/20 maxlen: 32
130.193.32.0/19 maxlen: 32
153.51.32.0/19 maxlen: 32
158.160.0.0/16 maxlen: 32
178.154.192.0/18 maxlen: 32
185.206.164.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
193.32.216.0/22 maxlen: 32
194.247.51.0/24 maxlen: 32
213.130.80.0/21 maxlen: 32
213.165.192.0/19 maxlen: 32
213.165.200.0/21 maxlen: 32
217.28.224.0/20 maxlen: 32
217.198.168.0/21 maxlen: 32
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:f5:8f:a7:2d:a5:c0:07:6a:c3:77:b5:f3:78:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: May 15 09:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65b4ab3ad7b72756e34a432321c8f0cc3a6f3c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:89:24:92:7f:2e:c8:a4:04:1b:e3:18:00:
44:81:fb:ea:7e:de:f5:c5:92:24:c1:d4:27:35:96:
f9:91:57:0c:7f:fb:d6:26:79:3a:36:37:63:8f:ff:
3a:cc:1b:34:b2:d4:38:43:af:44:19:fd:0c:23:7f:
ea:0b:e0:42:3e:cd:7c:b5:0d:47:5d:2b:06:7e:78:
0c:ad:9a:0d:8f:d3:78:d3:42:1a:20:7a:6c:ae:21:
e1:1a:de:b9:8d:6d:63:92:b1:49:27:f9:0b:2f:a9:
13:74:b8:ec:53:62:d5:13:34:b6:bc:7a:e8:81:21:
d9:17:c4:fb:cc:7d:2e:83:4e:d2:c5:f8:30:c0:e7:
1b:4f:17:db:66:05:f8:2d:57:a1:a0:3d:73:91:36:
7f:46:13:bd:78:60:1a:b8:08:8a:d4:75:5a:11:7c:
65:f1:22:51:79:eb:e7:a3:84:50:1b:4e:56:cf:0f:
5f:8e:18:fa:ce:b3:f6:d8:28:48:ea:06:62:f9:c5:
82:df:da:bd:ae:91:61:ca:91:59:4b:ff:c6:b4:2c:
04:c4:c8:a1:0d:64:aa:0f:60:17:f9:40:54:df:d5:
7e:a9:b5:75:f8:74:b6:3e:ac:42:c6:7e:02:e9:70:
64:d5:a3:22:85:42:3b:2e:78:e7:87:5a:b6:d3:37:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:AB:3A:D7:B7:27:56:E3:4A:43:23:21:C8:F0:CC:3A:6F:3C:90
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ZbSrOte3J1bjSkMjIcjwzDpvPJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.168.0/23
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
45.159.136.0/22
46.21.244.0/22
46.243.209.0-46.243.212.255
51.250.0.0/17
62.84.112.0/20
81.26.176.0/20
84.201.128.0/18
84.252.128.0/20
89.104.112.0/23
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
92.255.13.0/24
92.255.15.0/24
93.77.160.0/19
103.76.52.0/22
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
153.51.32.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
194.247.51.0/24
213.130.80.0/21
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:1a:e7:f9:04:30:f1:68:64:5e:ae:1e:ad:33:6d:89:f0:d3:
be:9f:5f:c6:b4:25:0c:a3:d7:7c:ff:d2:6e:57:a2:53:a7:54:
61:73:c3:fb:08:2c:06:1a:8d:d5:c0:26:a6:48:9a:5f:50:3e:
b8:1f:79:2a:2d:f9:19:24:be:e8:b2:2f:76:72:06:96:0e:6d:
66:25:44:20:68:18:68:07:6f:88:8e:eb:12:e3:5c:7f:55:e6:
99:b0:76:0d:2e:a7:23:6f:18:22:1d:90:d4:86:59:9f:15:93:
fd:f2:21:29:a6:e2:28:8a:68:e7:bc:d2:28:ea:55:09:91:e1:
ee:43:00:a6:7c:d1:eb:d3:e8:d8:29:76:69:e8:13:d8:de:9c:
0e:73:8f:26:85:94:19:a3:f2:f8:dd:86:fc:08:6c:78:38:35:
7d:fd:fe:7f:5a:90:88:46:d0:ac:dc:bb:86:87:bd:f5:8d:61:
43:c5:47:93:7d:79:27:64:af:bd:3f:4a:77:aa:a4:b2:15:23:
4f:3f:de:ee:ee:36:be:c9:7d:7a:b3:ba:60:38:c2:c3:63:c1:
14:70:94:6d:06:20:72:52:2d:f9:61:c0:7b:6a:8e:66:ce:27:
e2:7d:c4:9c:74:30:8c:13:2d:11:ec:ae:c9:63:50:b6:3b:7d:
eb:f8:90:62
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAZ4q9Y+nLaXAB2rDd7XzeNlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl
ZTQzYzAwHhcNMjYwNTE1MDkyNjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWI0YWIzYWQ3YjcyNzU2ZTM0YTQzMjMyMWM4ZjBjYzNhNmYzYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/iJJJJ/LsikBBvjGABEgfvqft71
xZIkwdQnNZb5kVcMf/vWJnk6Njdjj/86zBs0stQ4Q69EGf0MI3/qC+BCPs18tQ1H
XSsGfngMrZoNj9N400IaIHpsriHhGt65jW1jkrFJJ/kLL6kTdLjsU2LVEzS2vHro
gSHZF8T7zH0ug07SxfgwwOcbTxfbZgX4LVehoD1zkTZ/RhO9eGAauAiK1HVaEXxl
8SJReevno4RQG05Wzw9fjhj6zrP22ChI6gZi+cWC39q9rpFhypFZS//GtCwExMih
DWSqD2AX+UBU39V+qbV1+HS2PqxCxn4C6XBk1aMihUI7Lnjnh1q20zdI8wIDAQAB
o4IC9zCCAvMwHQYDVR0OBBYEFGW0qzrXtydW40pDIyHI8Mw6bzyQMB8GA1UdIwQY
MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt
OWM4ZTU5YzI3NzFjLzEvWmJTck90ZTNKMWJqU2tNakljand6RHB2UEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj
LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCwYIKwYBBQUHAQcBAf8EgfswgfgwgeYEAgABMIHfAwQD
HywIAwQBJeaoAwQCJeasAwQCJea8AwQCLYVgAwQCLZ+IAwQCLhX0MAwDBAAu89ED
BAAu89QDBAcz+gADBAQ+VHADBARRGrADBAZUyYADBARU/IADBAFZaHADBAZZqYAD
BAJZ6LwDBABc/wEDBABc/wMDBABc/w0DBABc/w8DBAVdTaADBAJnTDQDBARvWJAD
BARvWPADBAWCwSADBAWZMyADAwCeoAMEBrKawAMEArnOpAMEAbnYwgMEAsEg2AME
AML3MwMEA9WCUAMEBdWlwAMEBNkc4AMEA9nGqDANBAIAAjAHAwUDKg3WwDANBgkq
hkiG9w0BAQsFAAOCAQEACxrn+QQw8WhkXq4erTNtifDTvp9fxrQlDKPXfP/Sblei
U6dUYXPD+wgsBhqN1cAmpkiaX1A+uB95Ki35GSS+6LIvdnIGlg5tZiVEIGgYaAdv
iI7rEuNcf1XmmbB2DS6nI28YIh2Q1IZZnxWT/fIhKabiKIpo57zSKOpVCZHh7kMA
pnzR69Po2Cl2aegT2N6cDnOPJoWUGaPy+N2G/AhseDg1ff3+f1qQiEbQrNy7hoe9
9Y1hQ8VHk315J2SvvT9Kd6qkshUjTz/e7u42vsl9erO6YDjCw2PBFHCUbQYgclIt
+WHAe2qOZs4n4n3EnHQwjBMtEeyuyWNQtjt96/iQYg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:02:26 2026 by rpki-client