Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/oxzELWFJkdzsTKqDFJwNzL0N7AQ.roa
File: oxzELWFJkdzsTKqDFJwNzL0N7AQ.roa (raw, json)
Hash identifier: CYKz7T4s6quVEcy44p9N3rA7vn+Am2lY+a9Hz6zcmtg=
Subject key identifier: A3:1C:C4:2D:61:49:91:DC:EC:4C:AA:83:14:9C:0D:CC:BD:0D:EC:04
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019FE602CD6FC34E3FB008FC62840690A54F
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/oxzELWFJkdzsTKqDFJwNzL0N7AQ.roa
Signing time: Sun 09 Aug 2026 10:12:51 +0000
ROA not before: Sun 09 Aug 2026 10:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 24
82.206.4.0/22 maxlen: 24
82.206.8.0/23 maxlen: 24
82.206.16.0/22 maxlen: 24
82.206.72.0/21 maxlen: 21
82.206.76.0/22 maxlen: 24
82.206.80.0/21 maxlen: 21
82.206.88.0/21 maxlen: 24
82.206.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:02:cd:6f:c3:4e:3f:b0:08:fc:62:84:06:90:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Aug 9 10:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a31cc42d614991dcec4caa83149c0dccbd0dec04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:70:5f:c9:b8:9a:cd:c2:ee:94:b7:8d:69:
18:76:0a:8b:26:f5:41:3d:63:24:70:3d:56:24:1c:
e8:08:79:83:86:1b:50:b0:59:9e:1d:c8:27:c4:91:
53:f1:28:3f:74:71:54:5c:28:de:df:cf:0d:32:60:
af:d6:f8:9e:13:87:25:bb:e2:b1:65:8c:c5:6d:cc:
f8:3f:e2:91:6f:d1:fb:ba:65:f6:06:fa:a7:b3:ab:
c1:cf:4e:5e:70:58:bb:3e:0c:44:8c:aa:6a:f5:56:
ff:97:f6:6e:95:fa:99:1e:9a:b2:86:ea:c3:d8:ec:
e7:d2:22:e4:8b:1e:02:97:c2:ae:57:87:e8:56:b1:
5a:ab:74:8d:05:97:f6:fe:83:ae:46:7d:f7:9c:78:
ed:33:46:9a:8c:65:bf:4b:41:6c:e9:cc:24:b8:27:
58:6b:89:61:e4:7c:6b:9a:fb:f4:db:b7:f3:f9:8f:
54:dc:58:c9:b7:fc:78:51:c0:91:21:ce:90:2c:62:
66:8b:6b:ff:8c:1d:80:d3:e9:cb:34:ab:56:02:db:
bd:0d:9b:d5:e2:0e:d7:5b:55:3c:75:34:70:e1:97:
1b:ac:6d:f7:2f:94:eb:55:97:27:06:af:cb:b7:9a:
6b:59:4d:cd:29:a5:d3:c0:1d:05:76:a3:0d:56:b6:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1C:C4:2D:61:49:91:DC:EC:4C:AA:83:14:9C:0D:CC:BD:0D:EC:04
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/oxzELWFJkdzsTKqDFJwNzL0N7AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.9.255
82.206.16.0/22
82.206.72.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
4a:84:83:ab:27:aa:94:47:76:a3:bf:6f:cd:02:ef:74:a9:f6:
b9:fe:0f:5d:c1:75:76:e0:0d:0e:1c:bf:43:90:7b:bf:fe:a1:
f1:c0:63:23:02:84:ab:51:57:0a:c2:e5:22:78:3b:fb:52:2b:
6f:6b:ae:24:11:5c:87:ca:41:29:81:16:bf:15:fa:66:4c:0e:
b7:8a:e1:d2:08:c9:66:b2:6b:77:66:5f:f7:33:eb:fb:6f:b0:
73:9b:4b:5a:b9:e6:d6:af:f5:dc:30:0e:b6:35:70:98:55:90:
ea:1b:15:ef:5a:d4:d7:64:ab:0a:9e:42:59:3a:42:a3:42:96:
12:df:5f:bb:ff:3a:1e:cf:a7:9a:e2:72:21:37:6d:72:e6:9a:
d2:a2:4e:1a:17:63:23:67:bc:b7:b5:4a:5c:0d:f6:c8:1b:fb:
29:50:85:7e:94:44:2c:8f:ba:dd:61:71:2e:b8:87:b4:b2:32:
b1:18:93:4d:0b:25:ac:1e:d8:16:3e:c2:65:e6:a6:05:8c:cc:
7a:db:1b:c5:b8:92:cc:d2:a4:f0:a3:ea:bd:7a:65:46:9d:50:
c8:78:ef:61:ed:0d:99:62:dc:56:e3:bf:c8:2a:11:43:f0:f2:
10:ba:f4:27:50:99:bb:52:27:9e:17:ee:ce:86:fb:d3:77:46:
66:51:20:c3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ/mAs1vw04/sAj8YoQGkKVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjYwODA5MTAxMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzFjYzQyZDYxNDk5MWRjZWM0Y2FhODMxNDljMGRjY2JkMGRlYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRVwX8m4ms3C7pS3jWkYdgqLJvVB
PWMkcD1WJBzoCHmDhhtQsFmeHcgnxJFT8Sg/dHFUXCje388NMmCv1vieE4clu+Kx
ZYzFbcz4P+KRb9H7umX2Bvqns6vBz05ecFi7PgxEjKpq9Vb/l/ZulfqZHpqyhurD
2Ozn0iLkix4Cl8KuV4foVrFaq3SNBZf2/oOuRn33nHjtM0aajGW/S0Fs6cwkuCdY
a4lh5Hxrmvv027fz+Y9U3FjJt/x4UcCRIc6QLGJmi2v/jB2A0+nLNKtWAtu9DZvV
4g7XW1U8dTRw4ZcbrG33L5TrVZcnBq/Lt5prWU3NKaXTwB0FdqMNVrZjRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKMcxC1hSZHc7EyqgxScDcy9DewEMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvb3h6RUxXRkprZHpzVEtxREZKd056TDBON0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAFSzgID
BAFSzggDBAJSzhAwDAMEA1LOSAMEB1LOADANBgkqhkiG9w0BAQsFAAOCAQEASoSD
qyeqlEd2o79vzQLvdKn2uf4PXcF1duANDhy/Q5B7v/6h8cBjIwKEq1FXCsLlIng7
+1Irb2uuJBFch8pBKYEWvxX6ZkwOt4rh0gjJZrJrd2Zf9zPr+2+wc5tLWrnm1q/1
3DAOtjVwmFWQ6hsV71rU12SrCp5CWTpCo0KWEt9fu/86Hs+nmuJyITdtcuaa0qJO
GhdjI2e8t7VKXA32yBv7KVCFfpRELI+63WFxLriHtLIysRiTTQslrB7YFj7CZeam
BYzMetsbxbiSzNKk8KPqvXplRp1QyHjvYe0NmWLcVuO/yCoRQ/DyELr0J1CZu1In
nhfuzob703dGZlEgww==
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:55 2026 by rpki-client