Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z1F7EB8M4L0H2fcVv_ZVAkmgH2A.roa
File: Z1F7EB8M4L0H2fcVv_ZVAkmgH2A.roa (raw, json)
Hash identifier: ran8Xq6AyYI+JZtqMeb8gxxfm+bMcRsUWt96e1O236I=
Subject key identifier: 67:51:7B:10:1F:0C:E0:BD:07:D9:F7:15:BF:F6:55:02:49:A0:1F:60
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F8E5B962E15D686100CA845315A164977
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z1F7EB8M4L0H2fcVv_ZVAkmgH2A.roa
Signing time: Thu 23 Jul 2026 09:43:14 +0000
ROA not before: Thu 23 Jul 2026 09:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 46.102.237.0/24 maxlen: 24
72.35.240.0/24 maxlen: 24
72.35.241.0/24 maxlen: 24
72.35.243.0/24 maxlen: 24
72.35.244.0/24 maxlen: 24
78.17.20.0/24 maxlen: 24
78.17.21.0/24 maxlen: 24
78.17.30.0/24 maxlen: 24
78.17.31.0/24 maxlen: 24
78.17.58.0/24 maxlen: 24
78.17.61.0/24 maxlen: 24
78.17.81.0/24 maxlen: 24
78.17.229.0/24 maxlen: 24
89.125.223.0/24 maxlen: 24
89.125.242.0/24 maxlen: 24
89.125.245.0/24 maxlen: 24
104.143.194.0/24 maxlen: 24
104.143.195.0/24 maxlen: 24
104.143.200.0/24 maxlen: 24
140.225.195.0/24 maxlen: 24
140.225.196.0/24 maxlen: 24
140.225.205.0/24 maxlen: 24
153.76.192.0/24 maxlen: 24
153.76.197.0/24 maxlen: 24
153.76.201.0/24 maxlen: 24
153.76.206.0/24 maxlen: 24
153.76.207.0/24 maxlen: 24
153.76.209.0/24 maxlen: 24
153.76.210.0/24 maxlen: 24
153.76.219.0/24 maxlen: 24
153.76.220.0/24 maxlen: 24
153.76.222.0/24 maxlen: 24
153.76.223.0/24 maxlen: 24
162.35.227.0/24 maxlen: 24
206.245.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:5b:96:2e:15:d6:86:10:0c:a8:45:31:5a:16:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 23 09:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67517b101f0ce0bd07d9f715bff6550249a01f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:e7:48:b2:0c:7e:d1:3a:ab:da:ed:66:95:
79:ff:67:a9:95:43:b6:36:09:98:e8:bf:e8:f1:62:
28:9b:2d:92:cd:ad:fe:d1:12:d5:c8:70:1d:fc:2f:
2d:09:2e:91:09:ce:c5:9b:ca:78:6d:7d:98:c4:9d:
5f:62:d2:4f:4c:85:1f:c7:49:31:04:b1:55:90:39:
c9:82:2d:1a:cc:b9:b5:49:f4:d1:05:c0:93:cb:b8:
cd:95:87:ab:3a:6f:97:f7:ef:09:98:66:d1:0f:75:
b4:2d:73:f2:90:c5:58:fc:d7:dd:43:54:ea:ce:b9:
09:f4:d6:db:93:55:1d:8c:b4:91:3a:ee:9e:ee:c9:
70:04:e2:76:49:7a:39:ed:9b:75:e1:46:ed:60:ae:
da:dc:08:01:8b:dc:7b:dd:8e:2e:4c:ae:51:16:28:
3f:2f:97:82:45:ad:a0:5a:7c:d6:78:b9:c4:45:6c:
fa:fd:e9:8b:51:b6:a3:95:e5:09:99:79:32:8f:d6:
0a:c8:df:f5:4b:50:7c:06:20:12:1e:df:3e:b5:8c:
51:3e:5b:02:25:01:9a:87:89:95:ca:30:a8:e7:41:
fe:80:e5:31:6a:76:84:4b:11:c3:b2:d1:4a:45:1f:
65:a4:59:7f:3a:b0:da:0c:2a:b9:22:e7:d5:e2:56:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:51:7B:10:1F:0C:E0:BD:07:D9:F7:15:BF:F6:55:02:49:A0:1F:60
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Z1F7EB8M4L0H2fcVv_ZVAkmgH2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
72.35.240.0/23
72.35.243.0-72.35.244.255
78.17.20.0/23
78.17.30.0/23
78.17.58.0/24
78.17.61.0/24
78.17.81.0/24
78.17.229.0/24
89.125.223.0/24
89.125.242.0/24
89.125.245.0/24
104.143.194.0/23
104.143.200.0/24
140.225.195.0-140.225.196.255
140.225.205.0/24
153.76.192.0/24
153.76.197.0/24
153.76.201.0/24
153.76.206.0/23
153.76.209.0-153.76.210.255
153.76.219.0-153.76.220.255
153.76.222.0/23
162.35.227.0/24
206.245.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5a:f0:79:93:cf:52:32:8e:b2:80:5b:eb:b2:f3:30:55:3c:
ca:7d:68:c6:0c:b5:72:50:df:f5:1f:68:e7:34:61:42:2a:c1:
3e:f5:bb:f7:87:40:9a:fa:e8:61:0e:38:13:bc:fc:42:b6:2a:
89:d3:a6:3d:26:63:4e:fc:8c:05:54:18:6d:66:2a:21:10:32:
c9:31:58:ed:3d:eb:3e:b1:ee:c4:41:ba:64:98:48:71:19:ae:
73:0d:be:2a:1e:ad:12:27:1b:f0:50:16:94:0c:9c:fb:7f:39:
1c:6c:0a:36:ac:d5:7b:64:4e:b8:24:8b:7e:a0:1b:f4:6e:65:
af:29:7e:e6:05:12:05:cb:bd:c0:c0:e3:7a:cd:0e:a0:3a:18:
c6:6e:76:8d:c6:37:63:e6:28:43:70:60:f6:2a:5b:c1:03:ac:
f7:5e:46:8b:e5:3e:97:a6:44:7d:92:9f:47:5c:f1:70:57:2f:
a1:1a:aa:87:bf:bb:30:96:6b:f0:b1:e9:0b:e4:6e:3f:d8:ff:
07:62:88:bd:26:d3:2e:7e:eb:ed:7e:e8:9f:c5:17:f8:11:af:
47:24:9e:b2:10:eb:a1:fa:e6:dc:09:0a:76:6e:c6:f8:76:76:
a4:b1:71:3f:df:d5:bb:86:f3:f3:b7:b2:a5:42:98:e9:1a:73:
c7:5a:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:12 2026 by rpki-client