Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ZLWYPED9hnyATq6zL7cDoSdfwEk.roa
File: ZLWYPED9hnyATq6zL7cDoSdfwEk.roa (raw, json)
Hash identifier: l+nkgnHvp3Sb6As13mBVpCJe7cBpWUBShh9jwSh1vjo=
Subject key identifier: 64:B5:98:3C:40:FD:86:7C:80:4E:AE:B3:2F:B7:03:A1:27:5F:C0:49
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01A0D1E382935B58B9C55E02013A29C96E93
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ZLWYPED9hnyATq6zL7cDoSdfwEk.roa
Signing time: Thu 24 Sep 2026 05:29:03 +0000
ROA not before: Thu 24 Sep 2026 05:29:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58256
IP address blocks: 37.143.144.0/24 maxlen: 24
37.143.145.0/24 maxlen: 24
37.143.146.0/24 maxlen: 24
37.143.147.0/24 maxlen: 24
37.143.148.0/24 maxlen: 24
37.143.149.0/24 maxlen: 24
37.143.150.0/24 maxlen: 24
37.143.151.0/24 maxlen: 24
91.108.128.0/24 maxlen: 24
91.108.129.0/24 maxlen: 24
91.108.130.0/24 maxlen: 24
91.108.131.0/24 maxlen: 24
91.108.132.0/24 maxlen: 24
91.108.133.0/24 maxlen: 24
91.108.134.0/24 maxlen: 24
91.108.135.0/24 maxlen: 24
91.108.136.0/24 maxlen: 24
91.108.138.0/24 maxlen: 24
91.108.139.0/24 maxlen: 24
91.108.144.0/24 maxlen: 24
91.108.147.0/24 maxlen: 24
91.108.148.0/24 maxlen: 24
91.108.150.0/24 maxlen: 24
91.108.154.0/24 maxlen: 24
91.108.155.0/24 maxlen: 24
91.108.156.0/24 maxlen: 24
91.108.157.0/24 maxlen: 24
185.83.28.0/24 maxlen: 24
185.83.29.0/24 maxlen: 24
185.83.30.0/24 maxlen: 24
185.83.31.0/24 maxlen: 24
185.83.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:e3:82:93:5b:58:b9:c5:5e:02:01:3a:29:c9:6e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Sep 24 05:29:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64b5983c40fd867c804eaeb32fb703a1275fc049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:57:5a:6e:83:dd:62:39:76:a2:5f:0b:4b:
b5:dd:69:7f:72:2b:f7:74:d2:1b:66:8c:b6:18:e3:
a6:ff:a2:bb:0e:4f:78:ec:d2:24:66:0b:90:d9:be:
98:84:7b:df:61:d9:1b:cf:9c:e0:e5:5e:46:f2:38:
6d:fe:72:a6:11:63:fe:42:09:2a:ec:6a:43:23:3f:
29:30:18:e4:f7:58:27:fa:93:0a:9a:ed:a5:39:13:
f9:e0:c8:0c:b2:09:14:fb:7e:57:2a:1b:d0:d0:6a:
a7:8d:71:03:e0:cf:a4:56:61:16:bf:c6:b1:fd:30:
16:76:bb:3c:e9:53:cf:84:1d:24:25:7f:0b:6d:fd:
76:db:25:74:1a:9a:fb:c7:7c:e0:b5:f1:78:12:de:
dc:c2:ee:56:f2:89:b0:14:7b:95:21:82:25:b3:0f:
a2:d5:52:a5:da:25:99:77:37:93:c8:56:0b:42:ff:
41:25:95:bd:b4:0a:86:4f:3b:62:d5:28:9d:c9:44:
42:ee:a8:fa:d7:3d:dd:a1:2e:95:40:2c:bd:39:fc:
c6:f9:f0:bd:de:29:04:3d:f2:4f:e0:c0:82:70:db:
cd:0d:1c:4f:0c:44:67:6c:b6:15:7c:d2:87:9d:7f:
d8:76:1c:7e:9c:df:1d:b4:bd:43:1a:dd:84:e3:2b:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B5:98:3C:40:FD:86:7C:80:4E:AE:B3:2F:B7:03:A1:27:5F:C0:49
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ZLWYPED9hnyATq6zL7cDoSdfwEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.144.0/21
91.108.128.0-91.108.136.255
91.108.138.0/23
91.108.144.0/24
91.108.147.0-91.108.148.255
91.108.150.0/24
91.108.154.0-91.108.157.255
185.83.28.0/22
185.83.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:62:b7:e0:08:79:f1:d9:fd:7a:b5:bd:cd:4d:8b:5d:dc:4a:
83:62:44:20:0e:7c:f7:f1:23:5e:0d:76:ee:f6:ce:a1:76:f7:
a7:5d:6e:25:4b:76:be:a8:33:b4:e6:3a:d7:e3:7a:06:41:3f:
1d:4d:e8:47:c3:a8:74:61:77:25:5a:65:4e:bc:93:bf:0a:31:
92:00:e3:91:7c:84:c6:51:17:29:9e:c2:e1:9c:78:cf:01:d7:
e1:58:93:a7:a5:b4:2d:5f:02:4f:a8:a0:9d:01:12:be:da:2c:
a3:2d:29:f8:15:5d:fb:29:c6:af:6b:a1:75:7f:e4:f7:cb:7b:
76:57:99:75:64:ce:e5:db:51:da:ac:9b:a5:5c:14:43:c1:b7:
c2:ac:62:65:7d:fb:a3:54:08:07:fc:49:ae:3e:6a:1b:b7:bf:
8f:9b:97:5c:65:fc:c4:6f:bf:94:91:07:18:81:8c:c4:5c:32:
cd:7d:0a:02:ea:06:55:51:97:04:e8:19:cc:40:d3:74:96:e5:
47:da:16:43:24:fe:a4:66:6b:c3:2c:48:e2:34:af:52:50:d0:
4b:ec:90:86:00:04:b2:e4:11:a3:af:0f:ee:37:2c:7e:e6:c1:
78:72:e1:07:18:a5:30:5e:61:ef:0d:9e:cf:e6:29:76:da:ee:
5a:0c:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:01:59 2026 by rpki-client