Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZZYIDj2YSq2a0n9p-TiJ-OdgzO4.roa
File: ZZYIDj2YSq2a0n9p-TiJ-OdgzO4.roa (raw, json)
Hash identifier: 9gpUBWXhE2Zw4rN5PwEbZEC2NrjoGwCPjxNduhUiFtU=
Subject key identifier: 65:96:08:0E:3D:98:4A:AD:9A:D2:7F:69:F9:38:89:F8:E7:60:CC:EE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D1F98C82F7EDD746B9372B101EB5873E7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZZYIDj2YSq2a0n9p-TiJ-OdgzO4.roa
Signing time: Tue 24 Mar 2026 11:26:39 +0000
ROA not before: Tue 24 Mar 2026 11:26:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 37.98.146.0/24 maxlen: 24
37.98.147.0/24 maxlen: 24
37.98.148.0/24 maxlen: 24
80.240.92.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.163.8.0/24 maxlen: 24
89.31.235.0/24 maxlen: 24
89.31.236.0/24 maxlen: 24
89.31.238.0/24 maxlen: 24
89.213.112.0/24 maxlen: 24
89.213.114.0/24 maxlen: 24
89.213.116.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
212.38.82.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:98:c8:2f:7e:dd:74:6b:93:72:b1:01:eb:58:73:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 24 11:26:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6596080e3d984aad9ad27f69f93889f8e760ccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:58:25:34:d4:67:55:f9:5e:ec:3b:ae:07:
1a:af:01:bc:f2:5e:e4:91:04:97:38:18:b1:c5:e1:
f8:79:e8:28:f6:12:47:cb:c2:27:a1:a7:0f:0c:a7:
bf:25:68:e1:4f:33:6f:ec:46:19:25:c0:a3:ab:7f:
20:30:4e:2c:fd:de:a5:cb:7c:0f:82:ba:91:35:f3:
30:73:71:23:5f:bb:55:02:7a:d7:7e:7f:3b:00:6a:
51:78:a1:6c:6b:64:55:30:c7:a9:0c:26:f8:c0:7e:
89:78:94:15:0f:34:81:cd:83:05:c9:6b:14:dc:46:
72:b8:4e:f4:fd:a4:7e:77:07:b1:d6:0c:19:58:63:
e2:f0:56:53:16:f4:32:ba:98:6e:86:48:aa:a7:8c:
11:33:68:6d:4f:59:d7:2c:39:a8:24:49:b7:cf:f4:
45:51:61:aa:1a:16:f1:ab:3c:54:ae:40:6d:50:a0:
84:18:b0:7f:af:56:54:bc:18:fb:06:96:93:71:6d:
83:73:e7:09:97:39:c9:a4:98:7e:6a:6b:bc:6f:4a:
4d:d8:55:aa:ec:71:35:38:ab:0a:97:29:1b:b0:79:
98:c2:cb:76:cb:1b:57:95:91:6c:46:78:16:6e:cf:
71:bd:a8:3c:5d:ab:34:59:e0:dc:d3:87:23:b2:ff:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:96:08:0E:3D:98:4A:AD:9A:D2:7F:69:F9:38:89:F8:E7:60:CC:EE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZZYIDj2YSq2a0n9p-TiJ-OdgzO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.146.0-37.98.148.255
80.240.92.0/24
82.152.142.0/24
82.153.51.0/24
82.163.8.0/24
89.31.235.0-89.31.236.255
89.31.238.0/24
89.213.112.0/24
89.213.114.0/24
89.213.116.0/24
109.176.213.0/24
212.38.82.0/24
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4e:64:34:53:95:8b:02:de:17:ae:2a:04:88:f0:a5:c6:90:
43:39:3f:43:ba:76:56:3f:a3:06:ee:43:0b:7a:3a:78:31:f5:
71:f3:7e:ab:b3:6d:da:8d:c9:c5:3f:92:36:0b:21:55:1e:b8:
9c:9a:59:3a:e2:af:f9:21:a0:6a:d6:b8:94:a7:52:0f:78:d9:
a2:6a:c8:bf:4b:e6:1c:91:1b:72:57:9e:8c:b3:06:61:2d:73:
77:1c:c3:f6:cc:da:77:b7:3b:d7:b0:1c:8d:ae:dd:a0:3e:db:
de:09:c8:55:b5:24:71:84:e1:5c:c5:a7:2d:06:67:8e:8d:e6:
b8:98:b3:aa:d5:e1:fb:8f:5c:df:2c:27:d9:70:4d:c8:3d:47:
3e:36:4f:3a:94:86:ef:0c:c0:2e:21:b5:f7:f0:bb:9d:bd:39:
f5:31:a5:3b:af:04:cf:6a:08:f0:3e:be:ce:26:b0:67:1e:72:
26:93:17:88:25:e4:8d:ad:73:20:16:9b:2f:f7:1f:b6:1c:af:
f8:db:05:53:73:2a:40:01:16:54:a0:70:ee:e4:eb:ac:c5:76:
2d:ba:37:46:3e:4e:f2:bd:20:43:85:95:73:e1:a3:40:bc:00:
48:d8:85:ba:40:bf:b4:e3:1d:92:8e:b9:9e:76:5c:b9:3d:4a:
98:94:c6:05
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZ0fmMgvft10a5NysQHrWHPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMzI0MTEyNjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTk2MDgwZTNkOTg0YWFkOWFkMjdmNjlmOTM4ODlmOGU3NjBjY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzVYJTTUZ1X5Xuw7rgcarwG88l7k
kQSXOBixxeH4eego9hJHy8InoacPDKe/JWjhTzNv7EYZJcCjq38gME4s/d6ly3wP
grqRNfMwc3EjX7tVAnrXfn87AGpReKFsa2RVMMepDCb4wH6JeJQVDzSBzYMFyWsU
3EZyuE70/aR+dwex1gwZWGPi8FZTFvQyuphuhkiqp4wRM2htT1nXLDmoJEm3z/RF
UWGqGhbxqzxUrkBtUKCEGLB/r1ZUvBj7BpaTcW2Dc+cJlznJpJh+amu8b0pN2FWq
7HE1OKsKlykbsHmYwst2yxtXlZFsRngWbs9xvag8Xas0WeDc04cjsv8UJwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFGWWCA49mEqtmtJ/afk4ifjnYMzuMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWlpZSURqMllTcTJhMG45cC1UaUotT2Rnek80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeMAwDBAElYpID
BAAlYpQDBABQ8FwDBABSmI4DBABSmTMDBABSowgwDAMEAFkf6wMEAFkf7AMEAFkf
7gMEAFnVcAMEAFnVcgMEAFnVdAMEAG2w1QMEANQmUgMEANXa4DANBgkqhkiG9w0B
AQsFAAOCAQEAf05kNFOViwLeF64qBIjwpcaQQzk/Q7p2Vj+jBu5DC3o6eDH1cfN+
q7Nt2o3JxT+SNgshVR64nJpZOuKv+SGgata4lKdSD3jZomrIv0vmHJEbcleejLMG
YS1zdxzD9szad7c717Acja7doD7b3gnIVbUkcYThXMWnLQZnjo3muJizqtXh+49c
3ywn2XBNyD1HPjZPOpSG7wzALiG19/C7nb059TGlO68Ez2oI8D6+ziawZx5yJpMX
iCXkja1zIBabL/cfthyv+NsFU3MqQAEWVKBw7uTrrMV2Lbo3Rj5O8r0gQ4WVc+Gj
QLwASNiFukC/tOMdko65nnZcuT1KmJTGBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:33 2026 by rpki-client