Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ZZAGyODBQuhSTq1KG9XN62QS3MQ.roa
File: ZZAGyODBQuhSTq1KG9XN62QS3MQ.roa (raw, json)
Hash identifier: NKGmXLYVBB2xSYaGxp7Ky80sTerHdcg/u7ExH6ngk0E=
Subject key identifier: 65:90:06:C8:E0:C1:42:E8:52:4E:AD:4A:1B:D5:CD:EB:64:12:DC:C4
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019E81E322FBB5E43DBA53543FC061204B18
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ZZAGyODBQuhSTq1KG9XN62QS3MQ.roa
Signing time: Mon 01 Jun 2026 06:33:26 +0000
ROA not before: Mon 01 Jun 2026 06:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202053
IP address blocks: 5.22.208.0/22 maxlen: 22
5.22.212.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
80.69.172.0/22 maxlen: 22
81.27.96.0/22 maxlen: 22
81.27.100.0/22 maxlen: 22
81.27.104.0/23 maxlen: 23
81.27.106.0/23 maxlen: 23
81.27.108.0/22 maxlen: 22
83.136.248.0/21 maxlen: 21
85.9.200.0/21 maxlen: 21
85.9.208.0/21 maxlen: 21
85.9.216.0/22 maxlen: 22
85.9.220.0/22 maxlen: 22
94.237.0.0/24 maxlen: 24
94.237.1.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.4.0/22 maxlen: 22
94.237.8.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
94.237.126.0/24 maxlen: 24
95.111.192.0/21 maxlen: 21
95.111.200.0/22 maxlen: 22
95.111.204.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
185.20.136.0/22 maxlen: 22
185.26.48.0/22 maxlen: 22
185.70.196.0/22 maxlen: 22
194.62.96.0/22 maxlen: 22
212.147.224.0/22 maxlen: 22
212.147.228.0/22 maxlen: 22
212.147.232.0/22 maxlen: 22
212.147.236.0/22 maxlen: 22
212.147.240.0/22 maxlen: 22
212.147.244.0/22 maxlen: 22
212.147.248.0/23 maxlen: 23
212.147.250.0/23 maxlen: 23
212.147.252.0/22 maxlen: 22
213.163.192.0/20 maxlen: 20
2a04:3540::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3541:8000::/34 maxlen: 34
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3544::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3545::/32 maxlen: 32
2a04:3545:4000::/34 maxlen: 34
2a04:3545:8000::/34 maxlen: 34
2a04:3546::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:e3:22:fb:b5:e4:3d:ba:53:54:3f:c0:61:20:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jun 1 06:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=659006c8e0c142e8524ead4a1bd5cdeb6412dcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:d4:ea:85:80:2a:0b:f7:dc:43:a1:5f:1e:
81:c6:a6:1e:de:a4:dc:c0:a7:9e:a1:e3:77:c7:14:
ef:d2:ce:ca:5a:c8:f8:3c:d4:6a:a8:76:a4:b8:4b:
3b:02:7b:9c:d6:03:6f:66:a5:5b:67:7a:6c:69:a5:
c4:b2:84:d2:81:a0:66:95:fb:09:7e:71:ca:e7:40:
0f:15:6c:c1:f6:f9:a8:42:82:10:83:be:5f:5c:b0:
16:cf:85:95:38:3a:cd:1d:f5:22:06:c9:6b:fe:73:
db:d1:71:52:80:26:1f:b6:98:8a:79:35:a3:e4:70:
c9:7b:4b:02:09:e6:3e:f7:64:be:77:11:3a:ab:2c:
d5:d2:1d:eb:42:99:f1:ee:ed:a2:1f:84:38:35:89:
35:e3:50:87:de:f8:a1:f7:fb:43:e1:8a:4a:98:d5:
05:07:ca:f3:6d:f8:2c:af:17:8e:eb:21:8f:b2:55:
10:4b:fa:06:7b:02:ac:53:eb:95:86:4e:d5:45:db:
43:53:4e:bf:50:c8:8a:f9:0f:6e:f7:63:39:63:cc:
92:b0:90:d5:c6:7a:04:cc:4a:0a:65:fd:52:fc:d9:
30:4b:6d:a3:10:3a:f0:d7:a6:3a:06:af:c3:52:fb:
e9:7f:88:42:c6:e0:e2:c5:b0:9c:a4:64:e0:52:4e:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:06:C8:E0:C1:42:E8:52:4E:AD:4A:1B:D5:CD:EB:64:12:DC:C4
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ZZAGyODBQuhSTq1KG9XN62QS3MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.69.172.0/22
81.27.96.0/20
83.136.248.0/21
85.9.200.0-85.9.223.255
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
212.147.224.0/19
213.163.192.0/20
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
56:9b:aa:0e:12:1c:17:cf:40:50:99:0f:a9:0e:ef:7b:d9:fb:
38:d4:86:5f:8e:cb:87:eb:76:32:24:89:36:6a:d7:95:81:9e:
c4:27:2c:2a:05:dc:47:9d:d8:4a:76:5f:e4:38:bb:fd:01:02:
2b:93:8c:4f:60:84:78:3f:c7:ec:77:32:3a:f6:f3:19:61:f1:
26:cb:7f:d8:14:67:29:e9:b6:c7:ba:fd:1b:e8:cd:53:f3:62:
e0:67:60:f7:4c:18:eb:b3:e5:55:ad:c4:24:9b:e0:c0:6d:2d:
fa:d7:55:16:ce:4e:2b:05:2b:00:78:81:00:1d:2d:3b:eb:20:
11:a4:bd:e4:96:58:47:ce:d2:69:12:75:bc:4f:dc:13:ee:65:
06:7e:4b:b5:f0:78:99:1b:fc:38:3d:a7:d0:7f:39:d5:49:df:
fa:60:6e:fa:df:b0:2d:68:16:0b:7b:fc:9f:f6:80:6a:df:bb:
e1:aa:ad:d6:60:5b:aa:ed:f3:7f:e4:12:91:a6:ba:46:79:31:
e8:bc:67:66:16:c2:52:c7:ae:04:1d:f2:44:ef:02:4f:cc:79:
cf:67:f3:a4:4b:bb:a0:c2:09:db:ba:a0:7d:b3:e3:9e:14:73:
7b:92:19:65:12:1d:fb:35:0b:11:9a:57:5a:cf:ee:81:7f:13:
2f:6b:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:22:01 2026 by rpki-client