Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/CVvM11azTV36yrG2xQ5RGTG3C_o.roa
File: CVvM11azTV36yrG2xQ5RGTG3C_o.roa (raw, json)
Hash identifier: RBo9IG29VA/AxQbxZgdNdbvlg4Ro6J7S2ntnpNj3fOE=
Subject key identifier: 09:5B:CC:D7:56:B3:4D:5D:FA:CA:B1:B6:C5:0E:51:19:31:B7:0B:FA
Certificate issuer: /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial: 019FB1C521EB84EC967B82F0D69CF7E04935
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/CVvM11azTV36yrG2xQ5RGTG3C_o.roa
Signing time: Thu 30 Jul 2026 06:45:14 +0000
ROA not before: Thu 30 Jul 2026 06:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
46.189.116.0/24 maxlen: 24
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.144.37.0/24 maxlen: 24
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/19 maxlen: 19
83.135.128.0/19 maxlen: 22
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/19 maxlen: 19
83.135.224.0/22 maxlen: 22
83.135.232.0/24 maxlen: 24
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.192.0/22 maxlen: 22
87.123.196.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.32.0/20 maxlen: 20
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.192.0/21 maxlen: 21
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/20 maxlen: 20
89.246.160.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.240.0/21 maxlen: 21
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.64.0/18 maxlen: 23
94.134.128.0/17 maxlen: 22
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
153.60.32.0/19 maxlen: 19
153.60.192.0/18 maxlen: 18
153.76.32.0/19 maxlen: 19
167.104.0.0/19 maxlen: 19
167.104.128.0/19 maxlen: 19
167.104.224.0/19 maxlen: 19
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
202.89.144.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2001:16b8:ee00::/48 maxlen: 48
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:c5:21:eb:84:ec:96:7b:82:f0:d6:9c:f7:e0:49:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Validity
Not Before: Jul 30 06:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=095bccd756b34d5dfacab1b6c50e511931b70bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:d7:a2:db:1c:3f:df:64:c4:45:e6:99:c5:
c5:ae:d3:af:62:37:cf:36:e7:c6:2c:d4:dd:0d:32:
83:78:a3:dd:5c:78:56:d4:02:2b:c9:36:99:4b:bd:
e9:1e:d0:8e:f0:43:1b:b2:f7:62:ad:dd:42:84:70:
7e:65:2a:2d:45:6a:e1:20:c3:89:15:bb:d2:fa:aa:
b4:89:28:1a:e2:0a:0e:fd:4e:b5:3e:bb:f4:27:62:
2d:60:4d:8c:44:82:83:89:ff:f1:b2:36:40:a4:e0:
83:86:64:35:c0:09:bc:ec:e2:ff:1b:ad:8a:e6:b5:
1f:18:3b:8c:92:74:f2:fe:ac:a8:11:02:fd:5c:f2:
6f:81:89:1b:9d:95:81:3f:fb:09:01:ca:50:cb:29:
d3:87:86:92:97:dd:1b:bb:68:d0:31:9c:6e:c0:91:
d8:e4:92:18:41:e6:20:51:9c:53:86:98:29:e6:6a:
41:a4:77:43:fe:6d:94:23:62:de:f6:e6:1d:f0:12:
5b:d0:ff:8a:bb:78:f4:be:c4:95:17:49:4f:75:d7:
55:01:ae:0b:5f:a2:4a:5a:80:bd:1a:67:61:81:89:
31:50:87:b6:67:60:21:79:f5:36:cd:ca:d7:08:e4:
0e:6a:e6:a1:ec:91:0e:6b:75:a3:7b:55:8c:6c:5e:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:CC:D7:56:B3:4D:5D:FA:CA:B1:B6:C5:0E:51:19:31:B7:0B:FA
X509v3 Authority Key Identifier:
keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/CVvM11azTV36yrG2xQ5RGTG3C_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
153.60.32.0/19
153.60.192.0/18
153.76.32.0/19
167.104.0.0/19
167.104.128.0/19
167.104.224.0/19
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
49:ee:1d:38:29:26:66:f4:8e:0e:34:9f:22:f9:4d:1a:92:13:
56:f4:8c:df:30:c2:c0:78:5d:02:cf:2b:c4:dd:76:2e:e3:e0:
a9:54:8e:80:42:8b:8c:33:e1:34:33:22:25:5e:91:c8:74:bb:
74:07:82:40:aa:2f:4a:8c:3c:5e:b1:14:40:eb:f3:bd:46:79:
e8:c0:2f:9b:af:dc:ae:fc:66:e5:de:4c:53:70:50:f0:53:52:
5f:3b:fb:e9:49:ea:03:bb:27:af:3a:b5:da:ab:ce:3a:e0:26:
07:4c:0e:51:45:a9:12:2d:c7:5b:64:d9:d2:75:69:83:bf:6a:
33:f1:11:3a:8d:33:a0:f0:8e:8e:e2:96:1f:e5:2d:af:9e:9f:
76:e3:a0:a4:3b:1b:d3:02:0a:0c:70:ee:21:24:be:b3:b3:07:
af:8b:d5:60:70:a3:88:d9:dc:f1:b6:19:50:4e:f4:7a:64:3b:
ab:10:68:3d:73:73:f6:2a:70:73:22:d0:ca:54:82:d9:ba:ba:
20:e1:7c:02:d3:fe:ed:15:3d:6b:d7:e7:87:04:7d:47:0e:68:
85:4f:3f:63:4e:67:e3:77:94:2f:bc:04:3c:1c:0c:be:50:2e:
5a:1d:88:8d:18:bb:88:25:fc:00:9a:12:49:5e:cd:93:e6:08:
0f:2f:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 17:51:10 2026 by rpki-client