Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oIAfzVr3p-hYcnYCdp_-Qc1R4tE.roa
File: oIAfzVr3p-hYcnYCdp_-Qc1R4tE.roa (raw, json)
Hash identifier: MUK7HxjFMH4XwT3u5GhjawFCWp0fF9YN+7OEoLOqJB0=
Subject key identifier: A0:80:1F:CD:5A:F7:A7:E8:58:72:76:02:76:9F:FE:41:CD:51:E2:D1
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A00FEF2CF152D39339E300ED764C6E5366
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oIAfzVr3p-hYcnYCdp_-Qc1R4tE.roa
Signing time: Mon 17 Aug 2026 13:35:27 +0000
ROA not before: Mon 17 Aug 2026 13:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 130.49.4.0/24 maxlen: 24
130.49.7.0/24 maxlen: 24
130.49.13.0/24 maxlen: 24
130.49.18.0/24 maxlen: 24
130.49.19.0/24 maxlen: 24
130.49.23.0/24 maxlen: 24
130.49.26.0/24 maxlen: 24
130.49.28.0/24 maxlen: 24
130.49.33.0/24 maxlen: 24
130.49.34.0/24 maxlen: 24
130.49.38.0/24 maxlen: 24
130.49.41.0/24 maxlen: 24
130.49.43.0/24 maxlen: 24
130.49.48.0/24 maxlen: 24
130.49.49.0/24 maxlen: 24
130.49.54.0/24 maxlen: 24
130.49.56.0/24 maxlen: 24
130.49.59.0/24 maxlen: 24
130.49.63.0/24 maxlen: 24
130.49.64.0/24 maxlen: 24
130.49.69.0/24 maxlen: 24
130.49.71.0/24 maxlen: 24
130.49.74.0/24 maxlen: 24
130.49.82.0/24 maxlen: 24
130.49.83.0/24 maxlen: 24
130.49.88.0/24 maxlen: 24
130.49.90.0/24 maxlen: 24
130.49.93.0/24 maxlen: 24
130.49.97.0/24 maxlen: 24
130.49.98.0/24 maxlen: 24
130.49.103.0/24 maxlen: 24
130.49.105.0/24 maxlen: 24
130.49.109.0/24 maxlen: 24
130.49.116.0/24 maxlen: 24
130.49.118.0/24 maxlen: 24
130.49.123.0/24 maxlen: 24
130.49.124.0/24 maxlen: 24
138.249.29.0/24 maxlen: 24
138.249.30.0/24 maxlen: 24
138.249.31.0/24 maxlen: 24
138.249.36.0/24 maxlen: 24
138.249.38.0/24 maxlen: 24
138.249.39.0/24 maxlen: 24
138.249.44.0/24 maxlen: 24
138.249.45.0/24 maxlen: 24
138.249.47.0/24 maxlen: 24
138.249.48.0/24 maxlen: 24
138.249.49.0/24 maxlen: 24
138.249.50.0/24 maxlen: 24
138.249.51.0/24 maxlen: 24
138.249.53.0/24 maxlen: 24
138.249.55.0/24 maxlen: 24
138.249.57.0/24 maxlen: 24
138.249.60.0/24 maxlen: 24
138.249.61.0/24 maxlen: 24
138.249.62.0/24 maxlen: 24
138.249.64.0/24 maxlen: 24
138.249.65.0/24 maxlen: 24
138.249.66.0/24 maxlen: 24
138.249.67.0/24 maxlen: 24
138.249.68.0/24 maxlen: 24
138.249.69.0/24 maxlen: 24
138.249.70.0/24 maxlen: 24
138.249.71.0/24 maxlen: 24
138.249.72.0/24 maxlen: 24
138.249.73.0/24 maxlen: 24
138.249.74.0/24 maxlen: 24
138.249.76.0/24 maxlen: 24
138.249.78.0/24 maxlen: 24
138.249.79.0/24 maxlen: 24
138.249.80.0/24 maxlen: 24
138.249.81.0/24 maxlen: 24
138.249.82.0/24 maxlen: 24
138.249.83.0/24 maxlen: 24
138.249.85.0/24 maxlen: 24
138.249.87.0/24 maxlen: 24
138.249.89.0/24 maxlen: 24
138.249.92.0/24 maxlen: 24
138.249.93.0/24 maxlen: 24
138.249.94.0/24 maxlen: 24
138.249.95.0/24 maxlen: 24
138.249.96.0/24 maxlen: 24
138.249.97.0/24 maxlen: 24
138.249.99.0/24 maxlen: 24
138.249.100.0/24 maxlen: 24
138.249.101.0/24 maxlen: 24
138.249.114.0/24 maxlen: 24
138.249.247.0/24 maxlen: 24
155.212.33.0/24 maxlen: 24
155.212.40.0/24 maxlen: 24
155.212.42.0/24 maxlen: 24
155.212.47.0/24 maxlen: 24
155.212.48.0/24 maxlen: 24
155.212.52.0/24 maxlen: 24
155.212.54.0/24 maxlen: 24
155.212.57.0/24 maxlen: 24
155.212.61.0/24 maxlen: 24
155.212.62.0/24 maxlen: 24
155.212.68.0/24 maxlen: 24
155.212.69.0/24 maxlen: 24
155.212.73.0/24 maxlen: 24
155.212.76.0/24 maxlen: 24
155.212.78.0/24 maxlen: 24
155.212.83.0/24 maxlen: 24
155.212.84.0/24 maxlen: 24
155.212.88.0/24 maxlen: 24
155.212.90.0/24 maxlen: 24
155.212.93.0/24 maxlen: 24
155.212.97.0/24 maxlen: 24
155.212.98.0/24 maxlen: 24
155.212.103.0/24 maxlen: 24
155.212.105.0/24 maxlen: 24
155.212.112.0/24 maxlen: 24
155.212.116.0/24 maxlen: 24
155.212.118.0/24 maxlen: 24
155.212.123.0/24 maxlen: 24
155.212.124.0/24 maxlen: 24
170.168.41.0/24 maxlen: 24
170.168.43.0/24 maxlen: 24
170.168.48.0/24 maxlen: 24
170.168.205.0/24 maxlen: 24
170.168.213.0/24 maxlen: 24
170.168.214.0/24 maxlen: 24
170.168.222.0/24 maxlen: 24
170.168.229.0/24 maxlen: 24
170.168.231.0/24 maxlen: 24
170.168.239.0/24 maxlen: 24
170.168.249.0/24 maxlen: 24
193.108.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:ef:2c:f1:52:d3:93:39:e3:00:ed:76:4c:6e:53:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 17 13:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0801fcd5af7a7e858727602769ffe41cd51e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:6a:a5:fb:a2:23:ad:5c:42:e4:44:6f:2e:
75:65:c9:7c:22:bd:93:4f:a0:6f:92:fd:24:6f:47:
ea:57:21:4f:48:a8:2b:fe:b6:60:49:14:3e:8c:5c:
61:3e:9e:4d:d8:32:95:26:7f:32:60:2e:2b:7e:f3:
47:ff:3f:cd:13:ae:59:07:19:a8:77:27:9f:bd:7a:
84:d8:39:96:19:a3:dd:b3:59:9b:2a:31:7a:a9:c8:
1f:2a:9d:b3:ae:65:7a:b1:53:7e:32:78:e6:4f:1b:
bc:a2:63:75:2f:9f:22:82:d3:42:b4:fa:b9:fd:5f:
93:0f:1c:01:dc:07:1e:b2:ae:1f:36:b6:a1:33:fd:
4e:3a:a5:5c:37:0e:2c:d8:c6:a8:b4:23:bf:bb:c9:
62:96:23:4d:a0:9c:04:1f:b9:3e:4e:cd:4f:94:d3:
b1:f0:37:1f:30:ad:56:78:4d:81:00:96:6d:cc:fc:
1b:46:cb:38:10:29:86:ec:8d:93:9d:1d:e9:87:b7:
4a:6f:b2:68:14:96:01:5e:e1:e9:82:67:7d:57:54:
7b:02:3f:5e:6c:40:e8:0a:7f:a5:e4:9f:57:c5:81:
f8:71:fb:2f:75:fe:2e:96:47:4f:67:ec:c3:aa:31:
78:47:3d:0a:f5:19:57:84:26:5b:ae:88:c5:c6:bb:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:80:1F:CD:5A:F7:A7:E8:58:72:76:02:76:9F:FE:41:CD:51:E2:D1
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oIAfzVr3p-hYcnYCdp_-Qc1R4tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.4.0/24
130.49.7.0/24
130.49.13.0/24
130.49.18.0/23
130.49.23.0/24
130.49.26.0/24
130.49.28.0/24
130.49.33.0-130.49.34.255
130.49.38.0/24
130.49.41.0/24
130.49.43.0/24
130.49.48.0/23
130.49.54.0/24
130.49.56.0/24
130.49.59.0/24
130.49.63.0-130.49.64.255
130.49.69.0/24
130.49.71.0/24
130.49.74.0/24
130.49.82.0/23
130.49.88.0/24
130.49.90.0/24
130.49.93.0/24
130.49.97.0-130.49.98.255
130.49.103.0/24
130.49.105.0/24
130.49.109.0/24
130.49.116.0/24
130.49.118.0/24
130.49.123.0-130.49.124.255
138.249.29.0-138.249.31.255
138.249.36.0/24
138.249.38.0/23
138.249.44.0/23
138.249.47.0-138.249.51.255
138.249.53.0/24
138.249.55.0/24
138.249.57.0/24
138.249.60.0-138.249.62.255
138.249.64.0-138.249.74.255
138.249.76.0/24
138.249.78.0-138.249.83.255
138.249.85.0/24
138.249.87.0/24
138.249.89.0/24
138.249.92.0-138.249.97.255
138.249.99.0-138.249.101.255
138.249.114.0/24
138.249.247.0/24
155.212.33.0/24
155.212.40.0/24
155.212.42.0/24
155.212.47.0-155.212.48.255
155.212.52.0/24
155.212.54.0/24
155.212.57.0/24
155.212.61.0-155.212.62.255
155.212.68.0/23
155.212.73.0/24
155.212.76.0/24
155.212.78.0/24
155.212.83.0-155.212.84.255
155.212.88.0/24
155.212.90.0/24
155.212.93.0/24
155.212.97.0-155.212.98.255
155.212.103.0/24
155.212.105.0/24
155.212.112.0/24
155.212.116.0/24
155.212.118.0/24
155.212.123.0-155.212.124.255
170.168.41.0/24
170.168.43.0/24
170.168.48.0/24
170.168.205.0/24
170.168.213.0-170.168.214.255
170.168.222.0/24
170.168.229.0/24
170.168.231.0/24
170.168.239.0/24
170.168.249.0/24
193.108.191.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d5:d9:3d:b5:38:c1:7d:b9:1a:94:bb:11:f2:e0:bc:dd:34:
c5:c3:48:de:a7:75:3d:fd:3f:50:80:ee:78:47:cb:62:95:3a:
52:0a:2e:3a:57:f5:96:33:19:82:cf:0d:c9:fd:d6:98:20:45:
4e:cd:e6:c7:8a:6f:4b:10:82:9e:74:e9:a1:7c:ac:1d:75:10:
a3:a2:ee:54:14:88:db:56:56:83:ff:78:ab:d4:60:67:3c:ef:
16:6b:42:f0:5c:7d:06:26:01:6c:b7:cc:bb:71:f3:86:aa:cb:
dd:39:bd:41:4b:e6:70:3c:b0:47:a1:69:41:e9:8e:e4:11:88:
d5:e4:7e:52:57:b4:d7:79:67:a7:3b:9e:03:75:c8:4e:2e:b8:
c6:6b:05:07:4d:62:16:29:c3:b0:20:2e:2f:a7:f0:3f:78:63:
d1:46:f8:a6:e4:c6:60:1c:80:50:7b:eb:b5:ce:18:0b:6e:87:
87:88:eb:ac:aa:34:f5:76:27:71:46:bb:ce:8a:b8:03:23:12:
74:07:79:95:ff:de:6b:a3:3a:7d:f7:34:7b:ad:6f:ff:6a:b6:
a4:a1:fd:aa:3c:ba:fe:a6:08:24:66:24:dd:03:fb:1d:bd:ce:
e0:24:67:0d:39:d5:80:30:e1:20:dc:cf:1f:2e:06:ba:02:83:
b4:eb:c2:d0
-----BEGIN CERTIFICATE-----
MIIHezCCBmOgAwIBAgISAaAP7yzxUtOTOeMA7XZMblNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwODE3MTMzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDgwMWZjZDVhZjdhN2U4NTg3Mjc2MDI3NjlmZmU0MWNkNTFlMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgRqpfuiI61cQuREby51Zcl8Ir2T
T6Bvkv0kb0fqVyFPSKgr/rZgSRQ+jFxhPp5N2DKVJn8yYC4rfvNH/z/NE65ZBxmo
dyefvXqE2DmWGaPds1mbKjF6qcgfKp2zrmV6sVN+MnjmTxu8omN1L58igtNCtPq5
/V+TDxwB3Acesq4fNrahM/1OOqVcNw4s2MaotCO/u8liliNNoJwEH7k+Ts1PlNOx
8DcfMK1WeE2BAJZtzPwbRss4ECmG7I2TnR3ph7dKb7JoFJYBXuHpgmd9V1R7Aj9e
bEDoCn+l5J9XxYH4cfsvdf4ulkdPZ+zDqjF4Rz0K9RlXhCZbrojFxrte0QIDAQAB
o4IEhzCCBIMwHQYDVR0OBBYEFKCAH81a96foWHJ2Anaf/kHNUeLRMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvb0lBZnpWcjNwLWhZY25ZQ2RwXy1RYzFSNHRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICmwYIKwYBBQUHAQcBAf8EggKKMIIChjCCAoIEAgABMIIC
egMEAIIxBAMEAIIxBwMEAIIxDQMEAYIxEgMEAIIxFwMEAIIxGgMEAIIxHDAMAwQA
gjEhAwQAgjEiAwQAgjEmAwQAgjEpAwQAgjErAwQBgjEwAwQAgjE2AwQAgjE4AwQA
gjE7MAwDBACCMT8DBACCMUADBACCMUUDBACCMUcDBACCMUoDBAGCMVIDBACCMVgD
BACCMVoDBACCMV0wDAMEAIIxYQMEAIIxYgMEAIIxZwMEAIIxaQMEAIIxbQMEAIIx
dAMEAIIxdjAMAwQAgjF7AwQAgjF8MAwDBACK+R0DBAWK+QADBACK+SQDBAGK+SYD
BAGK+SwwDAMEAIr5LwMEAor5MAMEAIr5NQMEAIr5NwMEAIr5OTAMAwQCivk8AwQA
ivk+MAwDBAaK+UADBACK+UoDBACK+UwwDAMEAYr5TgMEAor5UAMEAIr5VQMEAIr5
VwMEAIr5WTAMAwQCivlcAwQBivlgMAwDBACK+WMDBAGK+WQDBACK+XIDBACK+fcD
BACb1CEDBACb1CgDBACb1CowDAMEAJvULwMEAJvUMAMEAJvUNAMEAJvUNgMEAJvU
OTAMAwQAm9Q9AwQAm9Q+AwQBm9REAwQAm9RJAwQAm9RMAwQAm9ROMAwDBACb1FMD
BACb1FQDBACb1FgDBACb1FoDBACb1F0wDAMEAJvUYQMEAJvUYgMEAJvUZwMEAJvU
aQMEAJvUcAMEAJvUdAMEAJvUdjAMAwQAm9R7AwQAm9R8AwQAqqgpAwQAqqgrAwQA
qqgwAwQAqqjNMAwDBACqqNUDBACqqNYDBACqqN4DBACqqOUDBACqqOcDBACqqO8D
BACqqPkDBADBbL8wDQYJKoZIhvcNAQELBQADggEBAFjV2T21OMF9uRqUuxHy4Lzd
NMXDSN6ndT39P1CA7nhHy2KVOlIKLjpX9ZYzGYLPDcn91pggRU7N5seKb0sQgp50
6aF8rB11EKOi7lQUiNtWVoP/eKvUYGc87xZrQvBcfQYmAWy3zLtx84aqy905vUFL
5nA8sEehaUHpjuQRiNXkflJXtNd5Z6c7ngN1yE4uuMZrBQdNYhYpw7AgLi+n8D94
Y9FG+KbkxmAcgFB767XOGAtuh4eI66yqNPV2J3FGu86KuAMjEnQHeZX/3mujOn33
NHutb/9qtqSh/ao8uv6mCCRmJN0D+x29zuAkZw051YAw4SDczx8uBroCg7TrwtA=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:07 2026 by rpki-client