Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/ZW0aFRggHkZTWmuvnYGPdC2huwg.roa
File: ZW0aFRggHkZTWmuvnYGPdC2huwg.roa (raw, json)
Hash identifier: TrmzY9bElpj84VDEyVQdviY1r6dh8gcH5HMBCYNEAr4=
Subject key identifier: 65:6D:1A:15:18:20:1E:46:53:5A:6B:AF:9D:81:8F:74:2D:A1:BB:08
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 019EF7AFD25E58E15D66A9AF54F45FA185EB
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/ZW0aFRggHkZTWmuvnYGPdC2huwg.roa
Signing time: Wed 24 Jun 2026 03:32:35 +0000
ROA not before: Wed 24 Jun 2026 03:32:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51964
IP address blocks: 57.7.0.0/16 maxlen: 24
57.21.0.0/16 maxlen: 24
57.35.0.0/16 maxlen: 24
57.66.0.0/15 maxlen: 32
57.68.0.0/15 maxlen: 32
57.70.0.0/16 maxlen: 32
57.72.0.0/15 maxlen: 32
57.74.0.0/16 maxlen: 32
57.76.0.0/14 maxlen: 32
57.77.0.0/16 maxlen: 32
57.78.0.0/15 maxlen: 32
57.82.0.0/15 maxlen: 32
57.86.0.0/16 maxlen: 32
57.90.0.0/16 maxlen: 32
57.92.0.0/16 maxlen: 24
57.96.0.0/15 maxlen: 24
57.98.0.0/16 maxlen: 24
57.100.0.0/16 maxlen: 24
57.194.0.0/15 maxlen: 24
57.197.0.0/16 maxlen: 24
57.199.0.0/16 maxlen: 24
57.200.0.0/16 maxlen: 24
57.202.0.0/15 maxlen: 24
57.205.0.0/16 maxlen: 24
57.207.0.0/16 maxlen: 24
57.208.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:af:d2:5e:58:e1:5d:66:a9:af:54:f4:5f:a1:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jun 24 03:32:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=656d1a1518201e46535a6baf9d818f742da1bb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:ee:aa:91:c1:23:24:0c:fd:d0:16:4a:34:
f6:0c:2d:8e:3a:f1:7c:f9:c3:67:e8:2e:d7:c6:2f:
91:f5:ce:85:87:4e:0d:82:08:0b:14:39:a2:6b:07:
d7:e1:49:84:75:18:9d:d1:d9:02:31:c9:aa:a3:cf:
a0:23:f7:8e:21:d6:f6:e8:c4:77:c4:5c:85:dc:6e:
76:25:cc:60:10:b8:2d:61:0f:a2:4a:1e:9b:1a:c4:
2a:04:8e:1f:28:12:0e:db:e1:5c:7a:b3:06:2f:0e:
d6:1d:70:d5:89:a9:38:91:0b:35:7f:b6:dc:80:1d:
7c:6f:bd:27:69:1e:57:86:a5:35:2b:15:12:83:f7:
87:a5:80:c0:ad:e0:01:95:ed:7a:a7:4a:df:b8:ec:
f3:f9:eb:a7:20:3c:06:eb:62:cc:7e:43:df:a8:85:
03:fd:65:50:16:07:05:38:3d:74:0e:65:41:2e:3c:
b1:50:71:15:0f:1f:23:c2:0c:fb:cc:60:d4:1b:3b:
99:fa:5f:3f:81:0e:0f:1e:a2:c1:b4:a3:32:12:04:
b0:0d:e3:85:fb:b4:cb:04:64:2b:31:0c:a0:a9:4a:
4a:11:af:b5:72:97:36:69:53:f6:8d:4b:51:9a:c1:
b4:ad:31:1e:cc:56:e4:a1:b4:f1:82:d2:38:87:4c:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:1A:15:18:20:1E:46:53:5A:6B:AF:9D:81:8F:74:2D:A1:BB:08
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/ZW0aFRggHkZTWmuvnYGPdC2huwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.7.0.0/16
57.21.0.0/16
57.35.0.0/16
57.66.0.0-57.70.255.255
57.72.0.0-57.74.255.255
57.76.0.0/14
57.82.0.0/15
57.86.0.0/16
57.90.0.0/16
57.92.0.0/16
57.96.0.0-57.98.255.255
57.100.0.0/16
57.194.0.0/15
57.197.0.0/16
57.199.0.0-57.200.255.255
57.202.0.0/15
57.205.0.0/16
57.207.0.0-57.223.255.255
Signature Algorithm: sha256WithRSAEncryption
d0:e0:e3:3c:44:24:60:3a:d3:7f:6d:d5:d2:52:71:83:20:6d:
21:c9:85:ec:fa:67:86:5a:16:2e:f4:05:4f:86:26:d9:18:ed:
93:9b:74:87:d1:bf:da:b9:61:bc:c9:c0:1d:98:d3:dc:fe:c6:
04:d2:41:41:ae:97:33:72:20:9a:44:c4:97:87:1d:81:8d:89:
7a:b8:54:36:77:af:25:3f:83:4b:95:3a:5f:27:c2:1b:9f:d0:
7e:3e:3e:45:51:b6:2e:dc:f3:7d:1c:4c:30:84:5a:c4:b0:d1:
8f:6b:93:26:3d:ad:96:5d:2b:ce:ba:e5:d8:64:5d:d9:c4:84:
5c:ee:a3:0b:5b:74:7d:f2:3e:ac:43:ee:8c:7e:dc:3d:d8:a0:
fc:95:fd:89:b3:5d:7d:35:8a:8e:9c:41:18:13:28:97:b6:09:
b7:33:0b:e4:1f:39:a5:1a:e0:be:8b:2b:fb:08:7f:a5:fe:df:
45:e6:f9:98:14:59:d1:26:c9:4f:b5:7e:2c:96:5d:32:f8:4c:
d1:b0:a4:e3:e8:bb:f7:30:50:bf:18:87:d2:6f:05:57:c2:64:
04:bf:90:ed:62:1d:db:ef:74:1b:48:86:3f:b6:bd:97:68:d7:
bf:cb:74:bc:7d:50:25:f5:55:e7:a1:54:82:99:2c:e6:c5:49:
d7:3a:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:53 2026 by rpki-client