Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/iRwoKV2BzEHNv4rDOIBjcFMSMjU.roa
File: iRwoKV2BzEHNv4rDOIBjcFMSMjU.roa (raw, json)
Hash identifier: zdVDOBztnyAxSkLhX35SJwsmjzKkLc0UzdxuUMde7g4=
Subject key identifier: 89:1C:28:29:5D:81:CC:41:CD:BF:8A:C3:38:80:63:70:53:12:32:35
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 019DDEABB93F26CB571EAA4FF67663F856C3
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/iRwoKV2BzEHNv4rDOIBjcFMSMjU.roa
Signing time: Thu 30 Apr 2026 13:54:49 +0000
ROA not before: Thu 30 Apr 2026 13:54:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2a00:7320::/29 maxlen: 29
2a00:7320::/32 maxlen: 32
2a00:7321::/32 maxlen: 32
2a00:7322::/32 maxlen: 32
2a00:7323::/32 maxlen: 32
2a00:7324::/32 maxlen: 32
2a00:7325::/32 maxlen: 32
2a00:7326::/32 maxlen: 32
2a00:7327::/32 maxlen: 32
2a04:4f80::/29 maxlen: 29
2a04:4f80::/32 maxlen: 32
2a04:4f81::/32 maxlen: 32
2a04:4f82::/32 maxlen: 32
2a04:4f83::/32 maxlen: 32
2a04:4f84::/32 maxlen: 32
2a04:4f85::/32 maxlen: 32
2a04:4f86::/32 maxlen: 32
2a04:4f87::/32 maxlen: 32
2a07:f6c0::/29 maxlen: 29
2a07:f6c0::/32 maxlen: 32
2a07:f6c1::/32 maxlen: 32
2a07:f6c2::/32 maxlen: 32
2a07:f6c3::/32 maxlen: 32
2a07:f6c4::/32 maxlen: 32
2a07:f6c5::/32 maxlen: 32
2a07:f6c6::/32 maxlen: 32
2a07:f6c7::/32 maxlen: 32
2a09:b080::/29 maxlen: 29
2a09:b080::/32 maxlen: 32
2a09:b081::/32 maxlen: 32
2a09:b082::/32 maxlen: 32
2a09:b083::/32 maxlen: 32
2a09:b084::/32 maxlen: 32
2a09:b085::/32 maxlen: 32
2a09:b086::/32 maxlen: 32
2a09:b087::/32 maxlen: 32
2a0c:1f40::/29 maxlen: 29
2a0c:1f40::/32 maxlen: 32
2a0c:1f41::/32 maxlen: 32
2a0c:1f42::/32 maxlen: 32
2a0c:1f43::/32 maxlen: 32
2a0c:1f44::/32 maxlen: 32
2a0c:1f45::/32 maxlen: 32
2a0c:1f46::/32 maxlen: 32
2a0c:1f47::/32 maxlen: 32
2a0d:6c40::/29 maxlen: 29
2a0d:6c40::/32 maxlen: 32
2a0d:6c41::/32 maxlen: 32
2a0d:6c42::/32 maxlen: 32
2a0d:6c43::/32 maxlen: 32
2a0d:6c44::/32 maxlen: 32
2a0d:6c45::/32 maxlen: 32
2a0d:6c46::/32 maxlen: 32
2a0d:6c47::/32 maxlen: 32
2a0d:6cc0::/29 maxlen: 29
2a0d:6cc0::/32 maxlen: 32
2a0d:6cc1::/32 maxlen: 32
2a0d:6cc2::/32 maxlen: 32
2a0d:6cc3::/32 maxlen: 32
2a0d:6cc4::/32 maxlen: 32
2a0d:6cc5::/32 maxlen: 32
2a0d:6cc6::/32 maxlen: 32
2a0d:6cc7::/32 maxlen: 32
2a0d:71c0::/29 maxlen: 29
2a0d:71c0::/32 maxlen: 32
2a0d:71c1::/32 maxlen: 32
2a0d:71c2::/32 maxlen: 32
2a0d:71c3::/32 maxlen: 32
2a0d:71c4::/32 maxlen: 32
2a0d:71c5::/32 maxlen: 32
2a0d:71c6::/32 maxlen: 32
2a0d:71c7::/32 maxlen: 32
2a0d:75c0::/29 maxlen: 29
2a0d:75c0::/32 maxlen: 32
2a0d:75c1::/32 maxlen: 32
2a0d:75c2::/32 maxlen: 32
2a0d:75c3::/32 maxlen: 32
2a0d:75c4::/32 maxlen: 32
2a0d:75c5::/32 maxlen: 32
2a0d:75c6::/32 maxlen: 32
2a0d:75c7::/32 maxlen: 32
2a0d:78c0::/29 maxlen: 29
2a0d:78c0::/32 maxlen: 32
2a0d:78c1::/32 maxlen: 32
2a0d:78c2::/32 maxlen: 32
2a0d:78c3::/32 maxlen: 32
2a0d:78c4::/32 maxlen: 32
2a0d:78c5::/32 maxlen: 32
2a0d:78c6::/32 maxlen: 32
2a0d:78c7::/32 maxlen: 32
2a0d:7bc0::/29 maxlen: 29
2a0d:7bc0::/32 maxlen: 32
2a0d:7bc1::/32 maxlen: 32
2a0d:7bc2::/32 maxlen: 32
2a0d:7bc3::/32 maxlen: 32
2a0d:7bc4::/32 maxlen: 32
2a0d:7bc5::/32 maxlen: 32
2a0d:7bc6::/32 maxlen: 32
2a0d:7bc7::/32 maxlen: 32
2a0d:8900::/29 maxlen: 29
2a0d:8900::/32 maxlen: 32
2a0d:8901::/32 maxlen: 32
2a0d:8902::/32 maxlen: 32
2a0d:8903::/32 maxlen: 32
2a0d:8904::/32 maxlen: 32
2a0d:8905::/32 maxlen: 32
2a0d:8906::/32 maxlen: 32
2a0d:8907::/32 maxlen: 32
2a0d:8e40::/29 maxlen: 29
2a0d:8e40::/32 maxlen: 32
2a0d:8e41::/32 maxlen: 32
2a0d:8e42::/32 maxlen: 32
2a0d:8e43::/32 maxlen: 32
2a0d:8e44::/32 maxlen: 32
2a0d:8e45::/32 maxlen: 32
2a0d:8e46::/32 maxlen: 32
2a0d:8e47::/32 maxlen: 32
2a0d:91c0::/29 maxlen: 29
2a0d:91c0::/32 maxlen: 32
2a0d:91c1::/32 maxlen: 32
2a0d:91c2::/32 maxlen: 32
2a0d:91c3::/32 maxlen: 32
2a0d:91c4::/32 maxlen: 32
2a0d:91c5::/32 maxlen: 32
2a0d:91c6::/32 maxlen: 32
2a0d:91c7::/32 maxlen: 32
2a0d:99c0::/29 maxlen: 29
2a0d:99c0::/32 maxlen: 32
2a0d:99c1::/32 maxlen: 32
2a0d:99c2::/32 maxlen: 32
2a0d:99c3::/32 maxlen: 32
2a0d:99c4::/32 maxlen: 32
2a0d:99c5::/32 maxlen: 32
2a0d:99c6::/32 maxlen: 32
2a0d:99c7::/32 maxlen: 32
2a0d:9dc0::/29 maxlen: 29
2a0d:9dc0::/32 maxlen: 32
2a0d:9dc1::/32 maxlen: 32
2a0d:9dc2::/32 maxlen: 32
2a0d:9dc3::/32 maxlen: 32
2a0d:9dc4::/32 maxlen: 32
2a0d:9dc5::/32 maxlen: 32
2a0d:9dc6::/32 maxlen: 32
2a0d:9dc7::/32 maxlen: 32
2a0e:5000::/29 maxlen: 29
2a0e:5000::/32 maxlen: 32
2a0e:5001::/32 maxlen: 32
2a0e:5002::/32 maxlen: 32
2a0e:5003::/32 maxlen: 32
2a0e:5004::/32 maxlen: 32
2a0e:5005::/32 maxlen: 32
2a0e:5006::/32 maxlen: 32
2a0e:5007::/32 maxlen: 32
2a0e:6500::/29 maxlen: 29
2a0e:6500::/32 maxlen: 32
2a0e:6501::/32 maxlen: 32
2a0e:6502::/32 maxlen: 32
2a0e:6503::/32 maxlen: 32
2a0e:6504::/32 maxlen: 32
2a0e:6505::/32 maxlen: 32
2a0e:6506::/32 maxlen: 32
2a0e:6507::/32 maxlen: 32
2a10:9fc0::/29 maxlen: 29
2a10:9fc0::/32 maxlen: 32
2a10:9fc1::/32 maxlen: 32
2a10:9fc2::/32 maxlen: 32
2a10:9fc3::/32 maxlen: 32
2a10:9fc4::/32 maxlen: 32
2a10:9fc5::/32 maxlen: 32
2a10:9fc6::/32 maxlen: 32
2a10:9fc7::/32 maxlen: 32
2a10:a040::/29 maxlen: 29
2a10:a040::/32 maxlen: 32
2a10:a041::/32 maxlen: 32
2a10:a042::/32 maxlen: 32
2a10:a043::/32 maxlen: 32
2a10:a044::/32 maxlen: 32
2a10:a045::/32 maxlen: 32
2a10:a046::/32 maxlen: 32
2a10:a047::/32 maxlen: 32
2a10:d940::/29 maxlen: 29
2a10:d940::/32 maxlen: 32
2a10:d941::/32 maxlen: 32
2a10:d942::/32 maxlen: 32
2a10:d943::/32 maxlen: 32
2a10:d944::/32 maxlen: 32
2a10:d945::/32 maxlen: 32
2a10:d946::/32 maxlen: 32
2a10:d947::/32 maxlen: 32
2a10:d9c0::/29 maxlen: 29
2a10:d9c0::/32 maxlen: 32
2a10:d9c1::/32 maxlen: 32
2a10:d9c2::/32 maxlen: 32
2a10:d9c3::/32 maxlen: 32
2a10:d9c4::/32 maxlen: 32
2a10:d9c5::/32 maxlen: 32
2a10:d9c6::/32 maxlen: 32
2a10:d9c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:ab:b9:3f:26:cb:57:1e:aa:4f:f6:76:63:f8:56:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Apr 30 13:54:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=891c28295d81cc41cdbf8ac33880637053123235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:d3:66:8f:55:65:eb:33:48:2a:39:b1:fb:
91:e0:d4:2a:52:74:7d:0b:f6:57:09:cf:10:64:03:
90:bc:1f:89:c7:d2:f2:d5:70:26:4a:7a:c1:0e:5b:
c1:92:54:a3:40:3a:c9:3c:cd:93:79:7e:dc:48:f1:
26:7e:7b:f3:bc:0c:4f:18:ff:af:4a:01:ad:13:86:
b2:69:e6:c3:a7:4c:4e:14:40:ca:18:ea:de:9e:b7:
33:a5:2f:9b:90:6e:a6:9b:9f:9e:7a:61:89:32:a2:
42:ee:16:6b:08:c3:91:05:97:5b:5e:f5:08:49:d6:
85:c4:57:13:61:52:c0:97:12:00:fc:76:b1:73:3d:
38:6e:da:a4:1b:c9:a3:40:af:49:55:79:c0:81:c1:
32:fe:83:8c:ad:4a:bb:a5:b3:f3:50:bf:da:ef:e8:
74:42:35:9a:8b:e7:39:b8:87:3c:35:70:9b:c8:af:
e5:f4:d3:6f:00:9a:d9:53:a5:35:1a:f0:5b:1e:93:
e7:10:91:f2:14:f7:68:a0:58:75:e1:ff:2f:6d:1c:
b5:31:07:e4:4c:f6:9c:65:2c:36:c0:2b:e5:dc:e2:
95:29:13:ba:3e:ba:c3:26:e5:b3:50:29:be:ab:83:
d6:ce:67:55:76:25:70:d2:de:01:90:a8:ae:26:f2:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:28:29:5D:81:CC:41:CD:BF:8A:C3:38:80:63:70:53:12:32:35
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/iRwoKV2BzEHNv4rDOIBjcFMSMjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7320::/29
2a04:4f80::/29
2a07:f6c0::/29
2a09:b080::/29
2a0c:1f40::/29
2a0d:6c40::/29
2a0d:6cc0::/29
2a0d:71c0::/29
2a0d:75c0::/29
2a0d:78c0::/29
2a0d:7bc0::/29
2a0d:8900::/29
2a0d:8e40::/29
2a0d:91c0::/29
2a0d:99c0::/29
2a0d:9dc0::/29
2a0e:5000::/29
2a0e:6500::/29
2a10:9fc0::/29
2a10:a040::/29
2a10:d940::/29
2a10:d9c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:bf:63:60:c6:7d:22:a1:e7:8b:dc:18:c0:d2:0e:40:4c:c7:
2d:bd:a6:c8:f5:f5:72:e7:c3:5b:e4:90:f9:0a:8f:1c:ba:49:
69:ee:ff:d2:8c:7a:3c:11:b1:96:26:a5:17:7e:22:40:7d:b0:
dc:f1:4d:05:fd:6f:a9:77:38:3f:ba:3d:b5:24:24:68:d7:c2:
df:1a:bd:4b:db:c3:96:9b:42:f8:92:ac:b4:4c:0d:a8:80:47:
1f:94:a8:6f:35:cc:16:05:e3:20:b0:60:75:e0:23:60:53:ad:
6d:d7:f8:6e:a1:4d:11:d2:de:9c:ed:c4:4e:10:31:15:18:9c:
70:71:e6:69:c1:54:1d:cb:c8:96:e6:da:6c:c5:02:3c:f7:28:
53:e8:7a:07:de:f8:53:9b:f7:66:be:5e:07:9c:d8:6d:e1:4d:
ea:60:d4:40:7b:61:a7:80:4d:2c:34:73:55:ba:95:79:7c:30:
b0:5e:d7:1b:f2:d6:cd:df:5f:4b:2f:ac:97:9d:1d:73:0b:f5:
8e:bd:55:d9:7a:42:32:78:c6:12:57:94:b5:f5:22:7c:67:76:
f6:41:57:9f:95:95:db:1e:18:34:74:b3:4f:89:ff:39:b5:ff:
51:30:08:97:08:1b:35:3c:0a:b8:8e:e8:a6:79:90:f5:2a:f1:
57:08:89:8e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZ3eq7k/JstXHqpP9nZj+FbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOGJhZTkyMzMwNWE3MWM1MjZhNmZjZjU3YzI5ZDZjMTZh
NDI2OWUwHhcNMjYwNDMwMTM1NDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTFjMjgyOTVkODFjYzQxY2RiZjhhYzMzODgwNjM3MDUzMTIzMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiprTZo9VZeszSCo5sfuR4NQqUnR9
C/ZXCc8QZAOQvB+Jx9Ly1XAmSnrBDlvBklSjQDrJPM2TeX7cSPEmfnvzvAxPGP+v
SgGtE4ayaebDp0xOFEDKGOrenrczpS+bkG6mm5+eemGJMqJC7hZrCMORBZdbXvUI
SdaFxFcTYVLAlxIA/Haxcz04btqkG8mjQK9JVXnAgcEy/oOMrUq7pbPzUL/a7+h0
QjWai+c5uIc8NXCbyK/l9NNvAJrZU6U1GvBbHpPnEJHyFPdooFh14f8vbRy1MQfk
TPacZSw2wCvl3OKVKRO6PrrDJuWzUCm+q4PWzmdVdiVw0t4BkKiuJvIzawIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFIkcKCldgcxBzb+KwziAY3BTEjI1MB8GA1UdIwQY
MBaAFHqLrpIzBaccUmpvz1fCnWwWpCaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0Yzkt
ZGUwYzU3MGJhODUwLzEvaVJ3b0tWMkJ6RUhOdjRyRE9JQmpjRk1TTWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yYTFlNWMtMTAxMC00MDk4LTk0YzktZGUwYzU3MGJhODUw
LzEvZW91dWtqTUZweHhTYW1fUFY4S2RiQmFrSnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAIwgZoDBQMq
AHMgAwUDKgRPgAMFAyoH9sADBQMqCbCAAwUDKgwfQAMFAyoNbEADBQMqDWzAAwUD
Kg1xwAMFAyoNdcADBQMqDXjAAwUDKg17wAMFAyoNiQADBQMqDY5AAwUDKg2RwAMF
AyoNmcADBQMqDZ3AAwUDKg5QAAMFAyoOZQADBQMqEJ/AAwUDKhCgQAMFAyoQ2UAD
BQMqENnAMA0GCSqGSIb3DQEBCwUAA4IBAQB/v2Ngxn0ioeeL3BjA0g5ATMctvabI
9fVy58Nb5JD5Co8cuklp7v/SjHo8EbGWJqUXfiJAfbDc8U0F/W+pdzg/uj21JCRo
18LfGr1L28OWm0L4kqy0TA2ogEcflKhvNcwWBeMgsGB14CNgU61t1/huoU0R0t6c
7cROEDEVGJxwceZpwVQdy8iW5tpsxQI89yhT6HoH3vhTm/dmvl4HnNht4U3qYNRA
e2GngE0sNHNVupV5fDCwXtcb8tbN319LL6yXnR1zC/WOvVXZekIyeMYSV5S19SJ8
Z3b2QVeflZXbHhg0dLNPif85tf9RMAiXCBs1PAq4juimeZD1KvFXCImO
-----END CERTIFICATE-----
Generated at Tue May 5 23:15:40 2026 by rpki-client