Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa
File: DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa (raw, json)
Hash identifier: c3vfVLlIrAY1SyBEM3blDE+VN4LQBi0IdvidL1hF+CY=
Subject key identifier: 0E:82:44:62:DF:7B:37:6D:DE:06:FB:0C:72:72:0E:63:A6:4D:70:B4
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019F6B02FFE33C5B74BF32B826AEDA2D8452
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa
Signing time: Thu 16 Jul 2026 12:59:46 +0000
ROA not before: Thu 16 Jul 2026 12:59:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212046
IP address blocks: 82.140.133.0/24 maxlen: 24
82.140.152.0/24 maxlen: 24
82.140.176.0/24 maxlen: 24
82.140.179.0/24 maxlen: 24
82.140.184.0/24 maxlen: 24
82.140.185.0/24 maxlen: 24
84.46.136.0/24 maxlen: 24
84.46.146.0/24 maxlen: 24
84.46.147.0/24 maxlen: 24
84.46.148.0/24 maxlen: 24
84.46.149.0/24 maxlen: 24
84.46.160.0/24 maxlen: 24
84.46.161.0/24 maxlen: 24
84.46.162.0/24 maxlen: 24
84.46.163.0/24 maxlen: 24
84.46.168.0/24 maxlen: 24
84.46.169.0/24 maxlen: 24
84.46.205.0/24 maxlen: 24
86.38.6.0/24 maxlen: 24
86.38.18.0/24 maxlen: 24
86.38.28.0/24 maxlen: 24
86.38.29.0/24 maxlen: 24
86.38.30.0/24 maxlen: 24
86.38.31.0/24 maxlen: 24
86.38.33.0/24 maxlen: 24
86.38.38.0/24 maxlen: 24
86.38.39.0/24 maxlen: 24
86.38.161.0/24 maxlen: 24
86.38.165.0/24 maxlen: 24
86.38.166.0/24 maxlen: 24
86.38.167.0/24 maxlen: 24
86.38.168.0/24 maxlen: 24
86.38.169.0/24 maxlen: 24
86.38.171.0/24 maxlen: 24
86.38.173.0/24 maxlen: 24
86.38.174.0/24 maxlen: 24
86.38.176.0/24 maxlen: 24
86.38.188.0/24 maxlen: 24
86.38.201.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.128.0/24 maxlen: 24
89.117.137.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.140.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.219.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
217.9.240.0/24 maxlen: 24
217.9.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:02:ff:e3:3c:5b:74:bf:32:b8:26:ae:da:2d:84:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jul 16 12:59:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e824462df7b376dde06fb0c72720e63a64d70b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:e6:4f:6d:6f:c6:b0:f0:e9:6b:ca:de:3b:
c9:f8:a6:7f:53:34:df:8a:1d:e8:4c:2b:03:83:51:
bb:61:07:ab:cf:00:85:4f:8a:c7:8d:31:7e:e5:09:
09:6f:95:4b:a4:05:2a:d9:2f:69:ea:f9:4a:23:3d:
b2:5d:d1:79:1d:1b:e5:e1:a3:43:3d:57:ef:49:29:
67:f8:2d:59:6e:61:32:ed:04:aa:19:cd:75:99:9a:
03:84:5c:ce:20:e9:c2:44:df:21:9e:00:34:69:a6:
e9:9d:c5:5a:fb:1b:4f:b5:b9:9e:18:93:de:fe:e2:
8c:a9:e1:43:33:2d:4a:93:6a:84:02:43:20:5d:3b:
52:02:0f:1b:05:59:47:25:1f:00:6f:d2:76:41:f8:
c1:7f:f0:1b:b0:23:4d:58:84:b9:49:09:10:b0:79:
21:9e:db:3c:47:4b:19:d4:3e:63:d2:2b:43:92:59:
82:5e:ad:a9:a6:87:06:51:48:e6:a9:c9:9a:72:73:
f7:11:6c:4b:df:2d:4f:ed:bb:c2:d4:1f:86:8b:ae:
05:4b:68:64:09:c7:0c:21:96:0c:df:10:bf:97:80:
fd:1a:2a:3c:df:c2:66:78:1d:f3:67:6a:79:c6:e1:
f5:0c:9a:64:ca:64:fe:bb:f3:b4:aa:54:cb:30:54:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:44:62:DF:7B:37:6D:DE:06:FB:0C:72:72:0E:63:A6:4D:70:B4
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.133.0/24
82.140.152.0/24
82.140.176.0/24
82.140.179.0/24
82.140.184.0/23
84.46.136.0/24
84.46.146.0-84.46.149.255
84.46.160.0/22
84.46.168.0/23
84.46.205.0/24
86.38.6.0/24
86.38.18.0/24
86.38.28.0/22
86.38.33.0/24
86.38.38.0/23
86.38.161.0/24
86.38.165.0-86.38.169.255
86.38.171.0/24
86.38.173.0-86.38.174.255
86.38.176.0/24
86.38.188.0/24
86.38.201.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.125.0/24
89.117.127.0-89.117.128.255
89.117.137.0-89.117.138.255
89.117.140.0/24
89.117.165.0/24
89.117.219.0/24
89.117.223.0/24
89.117.247.0/24
89.117.249.0/24
217.9.240.0/24
217.9.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:51:de:67:5f:06:ed:9f:98:be:4f:b3:9e:2c:f4:bf:64:5a:
2b:bb:52:ed:c8:8f:42:f1:b8:59:42:d9:09:90:ac:2e:0c:c9:
a9:09:19:e9:f9:6a:8f:48:79:7f:1b:79:36:01:c2:09:e5:16:
9d:70:d6:bb:c6:e5:b2:e4:c7:a5:bf:ed:f8:e6:fa:1c:ea:44:
79:ae:8f:6b:dd:78:e3:d7:b0:28:3a:fc:1f:6c:3e:0c:5c:7c:
bc:87:cf:ae:25:bd:c3:a6:4c:73:d1:0e:0d:32:a4:92:40:7d:
df:71:34:bc:ea:6d:5f:8a:3b:b5:49:f7:1c:fb:ac:4b:21:c8:
f0:ec:e4:af:d9:a8:df:e6:c0:88:e9:22:28:70:9f:cd:ec:16:
9b:99:95:49:ca:ff:e4:ac:29:c2:cf:eb:32:72:83:6a:1f:9a:
78:4e:56:2a:ee:08:f0:8a:fa:87:93:05:af:cc:26:35:9a:b3:
82:5f:12:88:4b:3d:d3:9c:e0:db:3d:05:9d:9e:6a:89:0c:7f:
36:17:d0:61:b7:ae:3c:b4:47:81:a5:85:14:8c:d8:56:68:f0:
50:01:a6:fa:b7:49:a5:67:86:52:5c:61:6d:ab:83:3d:cd:a9:
16:f8:cf:a8:8f:41:a0:e6:c9:db:67:bc:a7:bd:4c:cd:86:5c:
3e:f7:8d:ed
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISAZ9rAv/jPFt0vzK4Jq7aLYRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjYwNzE2MTI1OTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTgyNDQ2MmRmN2IzNzZkZGUwNmZiMGM3MjcyMGU2M2E2NGQ3MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwrmT21vxrDw6WvK3jvJ+KZ/UzTf
ih3oTCsDg1G7YQerzwCFT4rHjTF+5QkJb5VLpAUq2S9p6vlKIz2yXdF5HRvl4aND
PVfvSSln+C1ZbmEy7QSqGc11mZoDhFzOIOnCRN8hngA0aabpncVa+xtPtbmeGJPe
/uKMqeFDMy1Kk2qEAkMgXTtSAg8bBVlHJR8Ab9J2QfjBf/AbsCNNWIS5SQkQsHkh
nts8R0sZ1D5j0itDklmCXq2ppocGUUjmqcmacnP3EWxL3y1P7bvC1B+Gi64FS2hk
CccMIZYM3xC/l4D9Gio838JmeB3zZ2p5xuH1DJpkymT+u/O0qlTLMFS4owIDAQAB
o4IDYTCCA10wHQYDVR0OBBYEFA6CRGLfezdt3gb7DHJyDmOmTXC0MB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvRG9KRVl0OTdOMjNlQnZzTWNuSU9ZNlpOY0xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBdQYIKwYBBQUHAQcBAf8EggFkMIIBYDCCAVwEAgABMIIB
VAMEAFKMhQMEAFKMmAMEAFKMsAMEAFKMswMEAVKMuAMEAFQuiDAMAwQBVC6SAwQB
VC6UAwQCVC6gAwQBVC6oAwQAVC7NAwQAViYGAwQAViYSAwQCViYcAwQAViYhAwQB
ViYmAwQAViahMAwDBABWJqUDBAFWJqgDBABWJqswDAMEAFYmrQMEAFYmrgMEAFYm
sAMEAFYmvAMEAFYmyQMEAFl0jwMEAFl0lwMEAFl0mwMEAFl0oAMEAFl0ogMEAFl0
rgMEAFl0sAMEAFl0sgMEAFl06AMEAFl06wMEAFl07gMEAFl08AMEAFl09QMEAFl0
+QMEAFl1CgMEAFl1DgMEAFl1RQMEAFl1fTAMAwQAWXV/AwQAWXWAMAwDBABZdYkD
BABZdYoDBABZdYwDBABZdaUDBABZddsDBABZdd8DBABZdfcDBABZdfkDBADZCfAD
BADZCfMwDQYJKoZIhvcNAQELBQADggEBAJtR3mdfBu2fmL5Ps54s9L9kWiu7Uu3I
j0LxuFlC2QmQrC4MyakJGen5ao9IeX8beTYBwgnlFp1w1rvG5bLkx6W/7fjm+hzq
RHmuj2vdeOPXsCg6/B9sPgxcfLyHz64lvcOmTHPRDg0ypJJAfd9xNLzqbV+KO7VJ
9xz7rEshyPDs5K/ZqN/mwIjpIihwn83sFpuZlUnK/+SsKcLP6zJyg2ofmnhOViru
CPCK+oeTBa/MJjWas4JfEohLPdOc4Ns9BZ2eaokMfzYX0GG3rjy0R4GlhRSM2FZo
8FABpvq3SaVnhlJcYW2rgz3NqRb4z6iPQaDmydtnvKe9TM2GXD73je0=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:35:02 2026 by rpki-client