Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Zfa44Qs3hvp-Y7JcSOeHInnUwXA.roa
File: Zfa44Qs3hvp-Y7JcSOeHInnUwXA.roa (raw, json)
Hash identifier: 9NnTUP9qERCEhdunBQ4Z7a7xU0ytQQDj/R2htCHGsSc=
Subject key identifier: 65:F6:B8:E1:0B:37:86:FA:7E:63:B2:5C:48:E7:87:22:79:D4:C1:70
Certificate issuer: /CN=d75e5d507257475f7281230654b39870fa4969dc
Certificate serial: 019F2368A2A8A0DDA1FB4C0FC95247D2563F
Authority key identifier: D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Zfa44Qs3hvp-Y7JcSOeHInnUwXA.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8437
IP address blocks: 46.57.0.0/17 maxlen: 17
46.57.72.0/22 maxlen: 22
46.57.80.0/21 maxlen: 21
46.57.88.0/21 maxlen: 21
46.57.96.0/21 maxlen: 21
46.57.104.0/22 maxlen: 22
46.57.112.0/21 maxlen: 21
46.57.120.0/22 maxlen: 22
46.57.124.0/22 maxlen: 22
62.116.0.0/19 maxlen: 19
62.116.64.0/18 maxlen: 18
62.218.0.0/16 maxlen: 16
62.218.4.0/24 maxlen: 24
62.218.35.0/24 maxlen: 24
62.218.52.0/24 maxlen: 24
62.218.100.0/24 maxlen: 24
62.218.164.0/24 maxlen: 24
62.218.165.0/24 maxlen: 24
62.218.168.0/24 maxlen: 24
62.218.169.0/24 maxlen: 24
62.218.174.0/24 maxlen: 24
62.218.175.0/24 maxlen: 24
62.218.205.0/24 maxlen: 24
77.118.0.0/16 maxlen: 16
77.118.14.0/24 maxlen: 24
77.118.17.0/24 maxlen: 24
77.118.32.0/21 maxlen: 21
77.118.48.0/21 maxlen: 21
77.118.56.0/21 maxlen: 21
77.118.104.0/22 maxlen: 22
77.118.108.0/22 maxlen: 22
77.118.112.0/20 maxlen: 20
77.118.128.0/21 maxlen: 21
77.118.136.0/21 maxlen: 21
77.118.160.0/20 maxlen: 20
77.118.176.0/20 maxlen: 20
77.118.192.0/20 maxlen: 20
77.118.208.0/20 maxlen: 20
77.118.224.0/21 maxlen: 21
77.118.232.0/21 maxlen: 21
77.118.240.0/20 maxlen: 20
77.119.32.0/19 maxlen: 19
77.119.64.0/18 maxlen: 18
77.119.80.0/21 maxlen: 21
77.119.88.0/21 maxlen: 21
77.119.96.0/22 maxlen: 22
77.119.112.0/22 maxlen: 22
78.142.128.0/18 maxlen: 18
81.189.0.0/16 maxlen: 16
81.189.212.0/22 maxlen: 22
81.189.212.0/24 maxlen: 24
81.189.213.0/24 maxlen: 24
81.189.214.0/24 maxlen: 24
81.189.215.0/24 maxlen: 24
86.59.0.0/17 maxlen: 17
91.186.128.0/19 maxlen: 19
178.114.0.0/16 maxlen: 16
178.114.92.0/22 maxlen: 22
178.114.96.0/20 maxlen: 20
178.114.112.0/20 maxlen: 20
178.114.128.0/21 maxlen: 21
178.114.144.0/21 maxlen: 21
178.114.152.0/21 maxlen: 21
178.114.160.0/20 maxlen: 20
178.114.176.0/20 maxlen: 20
178.114.192.0/21 maxlen: 21
178.114.208.0/21 maxlen: 21
178.114.216.0/21 maxlen: 21
178.114.224.0/20 maxlen: 20
178.114.240.0/20 maxlen: 20
178.115.96.0/19 maxlen: 19
178.115.96.0/24 maxlen: 24
178.115.98.0/24 maxlen: 24
188.118.192.0/18 maxlen: 18
195.70.224.0/19 maxlen: 19
195.96.0.0/19 maxlen: 19
195.248.32.0/19 maxlen: 19
212.27.64.0/18 maxlen: 18
212.152.128.0/17 maxlen: 17
213.90.0.0/17 maxlen: 17
213.129.224.0/19 maxlen: 19
213.235.192.0/18 maxlen: 18
213.235.196.0/24 maxlen: 24
213.235.234.0/24 maxlen: 24
2001:858::/32 maxlen: 32
2001:858:40::/45 maxlen: 45
2001:938::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a2:a8:a0:dd:a1:fb:4c:0f:c9:52:47:d2:56:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75e5d507257475f7281230654b39870fa4969dc
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65f6b8e10b3786fa7e63b25c48e7872279d4c170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0a:52:2c:dc:49:ed:ea:4a:27:a5:ff:3f:97:
21:b0:8d:b6:88:ca:da:93:7f:ac:00:1a:66:a9:37:
cc:44:f6:fc:97:98:d8:db:f2:47:0f:0c:82:21:e5:
d9:df:68:ca:4d:f8:53:22:05:39:15:5d:36:5c:91:
02:0c:0c:42:75:79:89:cb:4a:5d:de:a0:0a:83:42:
7b:98:22:65:d1:61:3c:22:fa:68:c4:6a:be:d1:84:
e0:33:3f:4a:e4:8a:15:97:48:ad:86:0f:1e:48:7c:
55:2b:34:da:da:ee:05:43:d1:72:e9:33:ee:39:65:
c5:d0:58:a9:7d:73:01:00:eb:b5:ab:00:2f:2c:f7:
51:24:dc:7f:34:3a:1e:ae:62:f0:ec:c8:58:a4:97:
47:ee:1e:d8:a3:68:5d:9e:bb:34:44:3c:ec:c1:7d:
1e:77:36:bd:68:5a:eb:0c:73:b9:7c:95:cd:5d:73:
58:db:6f:df:a2:8e:a3:1b:53:d5:6f:e4:66:a3:dd:
12:cc:19:a8:b3:c9:e3:96:26:1c:27:9b:fd:b7:c9:
7a:68:83:10:b6:74:92:3f:97:56:f6:24:50:fe:4b:
2e:93:ca:e8:9c:93:a4:b3:9c:57:a8:5a:5e:f6:af:
c2:f6:ea:6d:7b:4a:a8:84:a9:bd:ad:9a:a6:84:dd:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F6:B8:E1:0B:37:86:FA:7E:63:B2:5C:48:E7:87:22:79:D4:C1:70
X509v3 Authority Key Identifier:
keyid:D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/Zfa44Qs3hvp-Y7JcSOeHInnUwXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.0.0/17
62.116.0.0/19
62.116.64.0/18
62.218.0.0/16
77.118.0.0/16
77.119.32.0-77.119.127.255
78.142.128.0/18
81.189.0.0/16
86.59.0.0/17
91.186.128.0/19
178.114.0.0/16
178.115.96.0/19
188.118.192.0/18
195.70.224.0/19
195.96.0.0/19
195.248.32.0/19
212.27.64.0/18
212.152.128.0/17
213.90.0.0/17
213.129.224.0/19
213.235.192.0/18
IPv6:
2001:858::/32
2001:938::/32
Signature Algorithm: sha256WithRSAEncryption
5d:bc:20:d8:fc:5f:58:af:40:53:b8:30:22:b6:1a:00:5e:6f:
5c:6a:3c:c0:3a:75:2a:7a:51:31:a7:9c:6b:e9:2b:1d:5f:18:
28:eb:ce:af:e6:32:cd:9e:b7:c0:50:c4:4f:c2:b9:98:c8:d5:
f5:2a:ed:60:ee:2f:14:fa:cb:88:80:ac:73:16:5c:d1:84:16:
31:52:9b:7d:e4:7b:7f:14:d5:32:bc:8a:ee:ef:5e:90:f2:4b:
b6:b8:f9:69:5b:ec:3f:c0:7a:c3:a0:3b:cd:8d:41:3e:70:da:
6b:fa:47:e2:ec:c6:d9:71:e4:8d:e8:74:39:54:cf:2f:d4:a2:
d1:0f:51:ab:1f:3e:0e:e0:98:21:dd:8b:61:b4:76:19:68:57:
77:72:8c:70:1e:69:8a:6b:dd:55:4d:d4:28:ff:0b:64:ab:60:
b2:de:20:f9:85:07:76:69:6e:6f:10:25:6e:91:a0:09:cb:4a:
22:57:d8:5b:58:75:8f:97:f6:0c:b8:28:63:e0:62:bf:42:a5:
29:ae:b6:8a:32:d6:32:38:67:27:68:54:5f:2e:ec:c0:dc:10:
ba:d9:a1:92:87:d6:8e:6a:c7:fa:2e:0f:2b:ab:bb:63:9a:21:
38:5b:69:3d:78:bf:84:66:64:19:7a:6c:fe:d8:f4:66:e7:5a:
ee:bc:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:54 2026 by rpki-client