Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa
File: hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa (raw, json)
Hash identifier: QzJoFvzXpwwE2bEYMhJWP3eLZe6Rf1UyZdose9+ReX4=
Subject key identifier: 87:3E:1A:F1:26:B1:64:7C:22:D5:38:15:D6:5F:B8:BA:F8:D5:22:A9
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019FB1D945ACE85BA1BDE7FF10315CB45EDF
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa
Signing time: Thu 30 Jul 2026 07:07:14 +0000
ROA not before: Thu 30 Jul 2026 07:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6821
IP address blocks: 37.25.80.0/21 maxlen: 24
37.25.84.0/22 maxlen: 22
46.217.0.0/16 maxlen: 16
46.217.0.0/18 maxlen: 18
46.217.0.0/19 maxlen: 21
46.217.0.0/21 maxlen: 21
46.217.8.0/21 maxlen: 21
46.217.16.0/21 maxlen: 21
46.217.24.0/21 maxlen: 21
46.217.32.0/21 maxlen: 21
46.217.40.0/21 maxlen: 21
46.217.48.0/21 maxlen: 21
46.217.56.0/21 maxlen: 21
46.217.64.0/18 maxlen: 21
46.217.64.0/21 maxlen: 21
46.217.72.0/21 maxlen: 21
46.217.80.0/21 maxlen: 21
46.217.88.0/21 maxlen: 21
46.217.96.0/21 maxlen: 21
46.217.104.0/21 maxlen: 21
46.217.112.0/21 maxlen: 21
46.217.120.0/21 maxlen: 21
46.217.128.0/18 maxlen: 21
46.217.128.0/21 maxlen: 21
46.217.136.0/21 maxlen: 21
46.217.144.0/21 maxlen: 21
46.217.152.0/21 maxlen: 21
46.217.160.0/19 maxlen: 19
46.217.192.0/18 maxlen: 18
46.217.192.0/19 maxlen: 23
46.217.198.0/23 maxlen: 23
46.217.200.0/21 maxlen: 21
46.217.216.0/21 maxlen: 21
46.217.224.0/19 maxlen: 19
46.217.224.0/20 maxlen: 21
46.217.232.0/21 maxlen: 21
46.217.254.0/24 maxlen: 24
62.77.136.0/21 maxlen: 21
62.162.0.0/16 maxlen: 24
62.162.0.0/18 maxlen: 18
62.162.5.0/24 maxlen: 24
62.162.27.0/24 maxlen: 24
62.162.31.0/24 maxlen: 24
62.162.41.0/24 maxlen: 24
62.162.42.0/24 maxlen: 24
62.162.70.0/24 maxlen: 24
62.162.90.0/24 maxlen: 24
62.162.120.0/24 maxlen: 24
62.162.129.0/24 maxlen: 24
62.162.130.0/24 maxlen: 24
62.162.133.0/24 maxlen: 24
62.162.134.0/24 maxlen: 24
62.162.136.0/24 maxlen: 24
62.162.138.0/24 maxlen: 24
62.162.145.0/24 maxlen: 24
62.162.146.0/24 maxlen: 24
62.162.155.0/24 maxlen: 24
62.162.161.0/24 maxlen: 24
62.162.162.0/24 maxlen: 24
62.220.192.0/19 maxlen: 24
62.220.203.0/24 maxlen: 24
62.220.204.0/22 maxlen: 22
77.28.0.0/15 maxlen: 21
77.28.0.0/16 maxlen: 21
77.28.0.0/18 maxlen: 21
77.28.0.0/20 maxlen: 20
77.28.16.0/21 maxlen: 21
77.28.24.0/21 maxlen: 21
77.28.64.0/18 maxlen: 21
77.28.64.0/19 maxlen: 19
77.28.120.0/21 maxlen: 21
77.28.128.0/18 maxlen: 21
77.28.192.0/18 maxlen: 21
77.28.224.0/20 maxlen: 20
77.28.240.0/20 maxlen: 20
77.29.0.0/16 maxlen: 18
77.29.0.0/18 maxlen: 18
77.29.64.0/18 maxlen: 18
77.29.128.0/18 maxlen: 18
77.29.192.0/18 maxlen: 18
79.125.128.0/17 maxlen: 24
79.125.128.0/18 maxlen: 18
79.125.128.0/19 maxlen: 22
79.125.128.0/22 maxlen: 22
79.125.132.0/22 maxlen: 22
79.125.136.0/22 maxlen: 22
79.125.140.0/22 maxlen: 22
79.125.160.0/19 maxlen: 19
79.125.160.0/20 maxlen: 20
79.125.192.0/18 maxlen: 23
79.125.220.0/23 maxlen: 23
79.125.232.0/21 maxlen: 21
79.125.240.0/20 maxlen: 20
95.156.0.0/19 maxlen: 24
95.156.12.0/22 maxlen: 22
95.156.24.0/22 maxlen: 22
95.156.29.0/24 maxlen: 24
95.156.30.0/24 maxlen: 24
95.156.31.0/24 maxlen: 24
95.156.32.0/19 maxlen: 24
95.156.50.0/24 maxlen: 24
95.156.52.0/22 maxlen: 22
195.26.128.0/19 maxlen: 24
195.26.130.0/24 maxlen: 24
195.26.144.0/24 maxlen: 24
195.26.149.0/24 maxlen: 24
2a00:5c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:d9:45:ac:e8:5b:a1:bd:e7:ff:10:31:5c:b4:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jul 30 07:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=873e1af126b1647c22d53815d65fb8baf8d522a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:19:03:6c:a4:f0:7d:d6:71:71:c6:9b:51:
26:64:25:f7:96:18:bb:ce:86:d4:44:eb:6a:49:41:
fa:27:fc:dc:41:95:d4:f4:8a:a8:1e:67:c2:ac:71:
2f:4d:b1:5b:02:ad:c6:98:af:a1:65:10:23:51:aa:
9b:96:9b:a2:aa:6a:50:12:a0:3e:59:bb:63:eb:cd:
0a:2a:77:52:93:38:cf:96:cd:be:e5:e2:39:f0:95:
18:b4:8a:58:ca:75:af:53:b3:65:2f:7e:f0:a7:ab:
92:90:b0:60:3f:e2:66:1d:8d:42:b2:a6:a7:50:c3:
63:74:e3:1c:0e:59:50:40:9c:79:ac:e7:11:26:69:
8d:3f:30:5f:c3:b3:b5:88:5e:3a:d5:5d:71:6c:a6:
d9:0a:55:f2:73:12:b0:f1:64:3f:ce:5a:d3:f1:80:
92:8a:32:56:64:dc:0c:fe:09:91:09:d1:f6:89:af:
66:7e:80:b7:e8:17:8c:5d:fa:e2:bd:fb:9f:ad:c7:
27:2e:8d:1b:a4:53:64:8c:46:48:48:be:6c:35:34:
cb:80:66:59:01:63:04:6b:fb:16:fc:9d:df:64:1b:
c9:53:de:94:01:3a:1b:13:9a:98:9a:3e:d7:7d:0f:
fc:3e:97:b2:e4:0e:38:cf:d9:e9:96:b7:6b:e8:0b:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:1A:F1:26:B1:64:7C:22:D5:38:15:D6:5F:B8:BA:F8:D5:22:A9
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/hz4a8SaxZHwi1TgV1l-4uvjVIqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.80.0/21
46.217.0.0/16
62.77.136.0/21
62.162.0.0/16
62.220.192.0/19
77.28.0.0/15
79.125.128.0/17
95.156.0.0/18
195.26.128.0/19
IPv6:
2a00:5c40::/29
Signature Algorithm: sha256WithRSAEncryption
97:17:ef:51:89:2a:f0:19:c5:a2:bf:fc:36:7f:9d:d7:0b:4b:
ab:c5:cc:a4:dd:47:1f:b2:20:81:f3:77:c7:62:34:e7:32:d6:
48:9d:b5:6a:e3:0d:07:d8:c8:6e:d3:6d:cf:05:a1:89:41:67:
4f:a0:c5:21:b4:63:a2:62:bc:ef:76:10:db:7d:cf:91:69:2e:
08:7f:74:0c:3a:21:6a:41:5a:27:47:34:37:4f:5d:c1:58:eb:
d5:ba:b1:b7:fe:2d:5c:82:40:4c:08:0e:2a:94:59:41:6b:7c:
0e:50:a3:88:51:d4:48:49:0a:89:ac:0f:70:13:bd:b3:4a:5f:
c8:14:9f:36:52:cf:d7:06:be:9f:a2:42:6e:9d:b6:9b:71:7a:
fd:0d:60:1b:d1:9d:71:1c:fd:c4:f0:62:ab:bb:b5:5a:62:57:
98:0d:65:42:d2:95:e8:98:0e:9a:de:1b:5d:64:4f:c0:4c:3e:
9c:21:fd:c6:99:96:0c:99:d9:0e:28:13:35:3b:7a:3e:1f:b8:
55:3a:06:99:be:f5:5b:fe:75:0a:dd:8c:3e:ef:0e:60:72:77:
71:27:80:4d:3c:c1:b0:d9:a9:da:9f:d2:6c:1f:ab:c6:dd:53:
df:10:c4:2b:20:b2:9a:73:09:86:89:21:6a:9b:02:fe:81:ac:
72:0b:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:25:49 2026 by rpki-client