Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/LWeCumCGWLRiY1UBy3xVVe9OiBY.roa
File: LWeCumCGWLRiY1UBy3xVVe9OiBY.roa (raw, json)
Hash identifier: Xd77tEDCH+uT7udr8IstaxGuVR7mAIqesHauwpnVYWw=
Subject key identifier: 2D:67:82:BA:60:86:58:B4:62:63:55:01:CB:7C:55:55:EF:4E:88:16
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019E8A7A3BDD33000173977636D7848BC6DC
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/LWeCumCGWLRiY1UBy3xVVe9OiBY.roa
Signing time: Tue 02 Jun 2026 22:35:27 +0000
ROA not before: Tue 02 Jun 2026 22:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8641
IP address blocks: 77.73.24.0/21 maxlen: 21
77.94.160.0/19 maxlen: 19
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.150.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
81.26.154.0/24 maxlen: 24
81.26.155.0/24 maxlen: 24
84.47.128.0/23 maxlen: 23
84.47.131.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.135.0/24 maxlen: 24
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.143.0/24 maxlen: 24
84.47.144.0/23 maxlen: 23
84.47.147.0/24 maxlen: 24
84.47.150.0/23 maxlen: 32
84.47.152.0/23 maxlen: 23
84.47.156.0/22 maxlen: 22
84.47.158.0/23 maxlen: 23
84.47.160.0/24 maxlen: 24
84.47.161.0/24 maxlen: 24
84.47.162.0/24 maxlen: 24
84.47.163.0/24 maxlen: 24
84.47.164.0/23 maxlen: 23
84.47.164.0/24 maxlen: 24
84.47.168.0/22 maxlen: 22
84.47.172.0/24 maxlen: 24
84.47.174.0/23 maxlen: 23
84.47.176.0/23 maxlen: 23
84.47.176.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.178.0/24 maxlen: 24
84.47.181.0/24 maxlen: 24
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
84.47.190.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
85.91.112.0/22 maxlen: 22
85.91.118.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
91.197.183.0/24 maxlen: 24
185.106.107.0/24 maxlen: 24
193.105.11.0/24 maxlen: 24
213.135.64.0/23 maxlen: 23
213.135.67.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
213.135.70.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.82.0/23 maxlen: 23
213.135.84.0/22 maxlen: 22
213.135.88.0/22 maxlen: 22
213.135.92.0/24 maxlen: 24
213.135.94.0/23 maxlen: 24
213.135.95.0/24 maxlen: 24
213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/23 maxlen: 23
213.208.174.0/23 maxlen: 23
213.208.176.0/21 maxlen: 21
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8a:7a:3b:dd:33:00:01:73:97:76:36:d7:84:8b:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jun 2 22:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d6782ba608658b462635501cb7c5555ef4e8816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:84:94:39:c4:5f:2c:ec:2e:e9:5c:7b:49:
f5:8c:f4:c8:f9:95:b8:39:09:fc:95:5f:2d:15:d4:
1a:80:8d:0c:5b:34:6b:3f:c4:62:7a:17:dc:6d:c6:
06:5f:06:e1:02:db:ca:9b:d2:d4:f4:3a:a8:a4:81:
03:40:b0:a5:03:f4:77:9d:ba:06:c7:06:66:ae:92:
fe:3d:e7:51:d4:51:02:28:48:fc:ed:78:5a:d0:c6:
f0:3f:1a:f2:40:bf:36:8f:79:8a:ed:b5:e0:6b:64:
5d:1a:e0:b9:38:af:e9:3e:1a:9d:9b:bd:ca:f6:70:
89:78:4e:d2:c8:75:56:69:80:fa:96:f3:03:f0:d8:
28:31:48:06:54:d6:4f:a0:12:52:97:ab:c7:88:cd:
18:24:90:46:ec:fd:33:a5:3b:bc:6a:04:91:c5:4a:
43:df:9a:66:89:eb:75:58:11:e4:f5:82:5a:2d:63:
f6:2e:f6:e6:2a:a2:cc:01:98:20:54:8c:a5:3d:61:
2b:d1:21:61:1f:f7:d5:80:27:2f:10:c4:31:6d:22:
b4:09:38:bd:9a:97:f8:de:ae:a4:96:ce:a5:09:4c:
2e:ab:c3:aa:94:ca:eb:7d:30:4b:a2:a5:f4:b4:50:
1f:9b:76:8e:88:53:00:9a:55:17:0d:56:f5:61:d7:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:82:BA:60:86:58:B4:62:63:55:01:CB:7C:55:55:EF:4E:88:16
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/LWeCumCGWLRiY1UBy3xVVe9OiBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.24.0/21
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/23
84.47.131.0/24
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0/24
84.47.150.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.172.255
84.47.174.0-84.47.178.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
91.197.183.0/24
185.106.107.0/24
193.105.11.0/24
213.135.64.0/23
213.135.67.0/24
213.135.69.0-213.135.70.255
213.135.72.0/23
213.135.77.0/24
213.135.82.0-213.135.92.255
213.135.94.0/23
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.188.0/22
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
78:6e:3f:ff:b7:bd:51:be:64:49:17:9e:c9:ad:c1:17:13:8a:
e1:fb:ea:18:f7:55:da:e1:cf:2f:e4:43:4b:a5:f0:fa:eb:85:
61:d7:71:ac:6d:66:8e:eb:f6:79:cd:1b:b0:02:44:c8:8f:a6:
04:d6:1c:58:47:33:a9:26:d1:4b:83:6b:36:ca:bd:17:74:b2:
55:74:95:80:75:35:6d:e9:0a:4d:f6:d1:0b:13:de:7d:be:30:
e1:88:d0:49:d6:4c:59:08:1e:86:ff:02:84:70:cd:1b:21:fb:
08:83:e0:8b:f3:45:41:56:3b:1c:c5:60:1c:66:ef:5b:73:92:
c4:f9:6b:80:18:32:ae:b6:e9:23:37:a4:b4:b0:39:02:27:ff:
f8:f7:6c:18:d6:05:d2:0a:42:c6:d8:c3:23:e3:f5:fb:6e:d8:
ad:3c:d6:d6:0e:6c:b2:1e:32:7c:e3:39:be:f6:88:33:ca:d5:
41:7a:6a:44:ca:07:4a:20:fd:02:09:a5:d6:79:0c:85:e3:e3:
1e:f3:56:dc:31:1c:0e:c4:1c:20:04:a3:0a:d0:60:d7:d5:2f:
2b:41:12:21:72:a1:ee:0a:af:f7:19:c6:4c:94:94:37:52:b8:
10:b7:e1:00:9d:1f:99:42:96:6f:ab:98:28:80:99:71:ec:7c:
b3:8b:1e:14
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgISAZ6KejvdMwABc5d2NteEi8bcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjYwNjAyMjIzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDY3ODJiYTYwODY1OGI0NjI2MzU1MDFjYjdjNTU1NWVmNGU4ODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSaElDnEXyzsLulce0n1jPTI+ZW4
OQn8lV8tFdQagI0MWzRrP8RiehfcbcYGXwbhAtvKm9LU9DqopIEDQLClA/R3nboG
xwZmrpL+PedR1FECKEj87Xha0MbwPxryQL82j3mK7bXga2RdGuC5OK/pPhqdm73K
9nCJeE7SyHVWaYD6lvMD8NgoMUgGVNZPoBJSl6vHiM0YJJBG7P0zpTu8agSRxUpD
35pmiet1WBHk9YJaLWP2LvbmKqLMAZggVIylPWEr0SFhH/fVgCcvEMQxbSK0CTi9
mpf43q6kls6lCUwuq8OqlMrrfTBLoqX0tFAfm3aOiFMAmlUXDVb1Ydcz5wIDAQAB
o4IDPjCCAzowHQYDVR0OBBYEFC1ngrpghli0YmNVAct8VVXvTogWMB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvTFdlQ3VtQ0dXTFJpWTFVQnkzeFZWZTlPaUJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCCASoEAgABMIIB
IgMEA01JGAMEBU1eoDAMAwQEURqQAwQCURqYAwQBVC+AAwQAVC+DMAwDBAFUL4YD
BABUL4gwDAMEAlQvjAMEAVQvkAMEAFQvkzAMAwQBVC+WAwQBVC+YMAwDBAJUL5wD
BAFUL6QwDAMEA1QvqAMEAFQvrDAMAwQBVC+uAwQAVC+yMAwDBABUL7UDBANUL7AD
BAFUL7oDBAFUL74DBANVW2ADBAJVW3AwDAMEAVVbdgMEAFVbegMEAFvFtwMEALlq
awMEAMFpCwMEAdWHQAMEANWHQzAMAwQA1YdFAwQA1YdGAwQB1YdIAwQA1YdNMAwD
BAHVh1IDBADVh1wDBAHVh14wDAMEBdXQoAMEANXQqjAMAwQC1dCsAwQA1dC4AwQC
1dC8MA0EAgACMAcDBQMqAgvIMA0GCSqGSIb3DQEBCwUAA4IBAQB4bj//t71RvmRJ
F57JrcEXE4rh++oY91Xa4c8v5ENLpfD664Vh13GsbWaO6/Z5zRuwAkTIj6YE1hxY
RzOpJtFLg2s2yr0XdLJVdJWAdTVt6QpN9tELE959vjDhiNBJ1kxZCB6G/wKEcM0b
IfsIg+CL80VBVjscxWAcZu9bc5LE+WuAGDKutukjN6S0sDkCJ//492wY1gXSCkLG
2MMj4/X7btitPNbWDmyyHjJ84zm+9ogzytVBempEygdKIP0CCaXWeQyF4+Me81bc
MRwOxBwgBKMK0GDX1S8rQRIhcqHuCq/3GcZMlJQ3UrgQt+EAnR+ZQpZvq5gogJlx
7Hyzix4U
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:42 2026 by rpki-client