Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZGAMRL2LEVw7dCzCiQ32R3An9fA.roa
File: ZGAMRL2LEVw7dCzCiQ32R3An9fA.roa (raw, json)
Hash identifier: 5GEuqlOEiYrp8xgMocuyP71e5nGVm9Lf42n7G60SwXw=
Subject key identifier: 64:60:0C:44:BD:8B:11:5C:3B:74:2C:C2:89:0D:F6:47:70:27:F5:F0
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019CFB134426B0D9412B1BAC240F87CCACFB
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZGAMRL2LEVw7dCzCiQ32R3An9fA.roa
Signing time: Tue 17 Mar 2026 09:14:29 +0000
ROA not before: Tue 17 Mar 2026 09:14:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.24.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
77.36.4.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.57.0/24 maxlen: 24
77.36.60.0/24 maxlen: 24
77.36.65.0/24 maxlen: 24
77.36.68.0/22 maxlen: 22
77.36.80.0/21 maxlen: 21
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.218.252.0/23 maxlen: 23
91.218.254.0/23 maxlen: 23
91.223.158.0/24 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.228.119.0/24 maxlen: 24
91.229.6.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.232.254.0/24 maxlen: 24
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.236.77.0/24 maxlen: 24
91.236.237.0/24 maxlen: 24
91.237.48.0/24 maxlen: 24
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.239.222.0/23 maxlen: 23
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.184.0/22 maxlen: 22
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.9.0/24 maxlen: 24
93.120.12.0/22 maxlen: 22
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.46.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.74.0/24 maxlen: 24
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.120.0/22 maxlen: 22
93.120.124.0/22 maxlen: 22
109.207.140.0/23 maxlen: 23
171.25.223.0/24 maxlen: 24
176.96.48.0/22 maxlen: 22
176.96.56.0/21 maxlen: 21
176.96.93.0/24 maxlen: 24
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.107.72.0/21 maxlen: 21
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.147.0/24 maxlen: 24
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.191.252.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:13:44:26:b0:d9:41:2b:1b:ac:24:0f:87:cc:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 17 09:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64600c44bd8b115c3b742cc2890df6477027f5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:25:2b:7e:f7:99:82:ee:1c:9a:18:87:b1:
22:26:b2:71:03:4d:b2:8f:a5:da:b1:39:57:a7:d4:
ab:f7:ba:07:8a:fc:a0:dd:18:2a:4f:19:ae:bb:44:
b9:f5:e3:c2:24:e8:b9:79:a8:97:ed:6d:2b:ef:de:
7f:6f:05:88:2a:e9:a9:a0:c8:09:88:32:87:d7:b8:
d4:53:ce:c4:d9:c5:94:4b:65:15:d7:ae:d0:aa:87:
bc:1d:a7:ff:0c:86:e5:d0:76:15:ff:69:bc:3c:1e:
c3:6c:cb:f2:a8:4f:71:3e:14:15:e7:53:d8:42:cc:
34:8d:04:5e:8b:6c:b3:70:c4:db:16:7c:37:4d:a9:
5d:f9:94:48:bf:4e:ae:d6:37:43:06:67:b3:e7:57:
3b:46:23:c1:eb:d0:33:77:02:01:dc:0a:c1:b0:5d:
b7:7d:e7:1c:6b:77:78:bc:3c:0d:fb:ba:a4:a8:52:
6c:e6:69:dd:c2:d9:65:29:61:c4:7a:4c:9d:f6:fb:
74:70:2a:e8:62:cc:c0:a7:e1:d7:ab:16:74:96:5c:
21:6b:a4:73:8f:ec:ab:75:16:fa:cc:50:62:ef:3c:
3c:2a:12:40:f3:03:47:e0:2d:e4:75:62:1d:f8:c4:
9c:6a:27:5f:6e:b7:3a:2f:b0:f6:9f:b5:cf:75:e7:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:0C:44:BD:8B:11:5C:3B:74:2C:C2:89:0D:F6:47:70:27:F5:F0
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ZGAMRL2LEVw7dCzCiQ32R3An9fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.24.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0/21
77.36.4.0-77.36.15.255
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.57.0/24
77.36.60.0/24
77.36.65.0/24
77.36.68.0/22
77.36.80.0/21
77.36.89.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.218.252.0/22
91.223.158.0/24
91.225.34.0/23
91.228.119.0/24
91.229.6.0/24
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.232.254.0/24
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.236.77.0/24
91.236.237.0/24
91.237.48.0/24
91.239.0.0/22
91.239.178.0/24
91.239.222.0/23
91.240.156.0/22
91.245.176.0/21
91.246.184.0/21
91.246.196.0/22
93.120.8.0/23
93.120.12.0/22
93.120.27.0-93.120.30.255
93.120.46.0/24
93.120.48.0-93.120.71.255
93.120.74.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.120.0/21
109.207.140.0/23
171.25.223.0/24
176.96.48.0/22
176.96.56.0/21
176.96.93.0/24
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.147.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/21
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
11:fd:65:c9:b4:cb:4c:6b:00:d5:94:9c:7e:37:0a:14:ce:00:
2b:26:60:50:1e:64:16:1c:75:ae:0a:41:b4:17:25:15:83:4d:
33:84:79:98:40:33:6f:ce:48:ee:dc:8e:6e:42:66:d3:eb:16:
ad:0d:34:04:27:f8:f3:52:ca:20:84:86:af:f1:d7:f0:6c:4f:
e4:34:86:44:ae:7e:fb:62:43:53:93:29:97:43:cb:f6:9d:cb:
6a:11:d3:4f:67:ca:45:13:83:52:f3:54:03:b9:12:80:6f:4f:
a6:3e:55:73:70:e4:e4:e0:2a:b7:0e:39:91:69:47:c2:60:97:
ea:77:d9:5c:5c:c2:89:ad:84:e3:e6:2a:0b:a4:8b:1a:2a:68:
f1:8e:19:ab:d2:db:45:22:14:99:40:01:24:55:3a:5a:19:69:
da:70:e3:b6:e6:0f:36:e1:62:fe:74:16:22:89:c0:c8:bc:18:
e1:45:c2:b8:56:3c:77:1a:54:c6:43:4b:0a:56:9b:4e:1f:f5:
5a:c6:20:86:90:4a:94:5a:38:0b:98:e8:69:a5:7f:c7:8d:55:
d2:00:65:f0:13:46:eb:79:fe:d4:56:f0:16:f5:e2:ca:09:b9:
65:5d:8e:63:ac:95:bd:ba:db:b6:fa:13:92:ff:3a:56:82:7a:
9e:f0:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:44 2026 by rpki-client