Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/cxK58b8OqyweEEX7ZSzNThByzJ4.roa
File: cxK58b8OqyweEEX7ZSzNThByzJ4.roa (raw, json)
Hash identifier: ksTlPnVTNF8gujtMt/7QmPYDNk3NsHykT5fC5mx0yFE=
Subject key identifier: 73:12:B9:F1:BF:0E:AB:2C:1E:10:45:FB:65:2C:CD:4E:10:72:CC:9E
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019F18441BCEBE6F8490F5A2242DD0890F78
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/cxK58b8OqyweEEX7ZSzNThByzJ4.roa
Signing time: Tue 30 Jun 2026 11:22:24 +0000
ROA not before: Tue 30 Jun 2026 11:22:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13194
IP address blocks: 82.140.129.0/24 maxlen: 24
84.15.0.0/16 maxlen: 24
84.15.12.0/24 maxlen: 32
84.15.223.0/24 maxlen: 24
84.46.139.0/24 maxlen: 24
84.46.204.0/24 maxlen: 24
84.46.207.0/24 maxlen: 24
86.38.1.0/24 maxlen: 24
86.38.41.0/24 maxlen: 24
86.38.52.0/24 maxlen: 24
86.38.62.0/24 maxlen: 24
86.38.72.0/24 maxlen: 24
86.38.73.0/24 maxlen: 24
86.38.74.0/24 maxlen: 24
86.38.75.0/24 maxlen: 24
86.38.81.0/24 maxlen: 24
86.38.84.0/24 maxlen: 24
86.38.89.0/24 maxlen: 24
86.38.97.0/24 maxlen: 24
86.38.108.0/24 maxlen: 24
86.38.152.0/24 maxlen: 24
86.38.153.0/24 maxlen: 24
86.38.215.0/24 maxlen: 24
86.38.228.0/24 maxlen: 24
86.38.230.0/24 maxlen: 24
86.38.245.0/24 maxlen: 24
89.116.124.0/24 maxlen: 24
89.116.129.0/24 maxlen: 24
89.116.143.0/24 maxlen: 24
89.116.151.0/24 maxlen: 24
89.116.155.0/24 maxlen: 24
89.116.160.0/24 maxlen: 24
89.116.162.0/24 maxlen: 24
89.116.174.0/24 maxlen: 24
89.116.176.0/24 maxlen: 24
89.116.178.0/24 maxlen: 24
89.116.232.0/24 maxlen: 24
89.116.235.0/24 maxlen: 24
89.116.238.0/24 maxlen: 24
89.116.240.0/24 maxlen: 24
89.116.245.0/24 maxlen: 24
89.116.249.0/24 maxlen: 24
89.117.10.0/24 maxlen: 24
89.117.14.0/24 maxlen: 24
89.117.69.0/24 maxlen: 24
89.117.92.0/24 maxlen: 24
89.117.93.0/24 maxlen: 24
89.117.125.0/24 maxlen: 24
89.117.127.0/24 maxlen: 24
89.117.138.0/24 maxlen: 24
89.117.141.0/24 maxlen: 24
89.117.156.0/24 maxlen: 24
89.117.165.0/24 maxlen: 24
89.117.220.0/24 maxlen: 24
89.117.221.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.225.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.247.0/24 maxlen: 24
89.117.249.0/24 maxlen: 24
89.117.255.0/24 maxlen: 24
185.189.154.0/24 maxlen: 24
213.226.128.0/18 maxlen: 24
213.226.161.0/24 maxlen: 24
213.252.192.0/20 maxlen: 20
213.252.194.0/24 maxlen: 24
213.252.200.0/22 maxlen: 22
213.252.220.0/24 maxlen: 24
213.252.223.0/24 maxlen: 24
213.252.224.0/22 maxlen: 22
213.252.234.0/23 maxlen: 23
213.252.236.0/23 maxlen: 23
213.252.252.0/24 maxlen: 24
213.252.254.0/24 maxlen: 24
217.9.248.0/23 maxlen: 23
2a00:f500::/29 maxlen: 29
2a00:f502:150::/44 maxlen: 44
2a00:f502:160::/44 maxlen: 44
2a00:f502:170::/47 maxlen: 47
2a00:f502:172::/47 maxlen: 47
2a00:f502:174::/47 maxlen: 47
2a00:f502:176::/47 maxlen: 47
2a00:f502:178::/47 maxlen: 47
2a00:f502:17a::/47 maxlen: 47
2a00:f502:17c::/47 maxlen: 47
2a00:f502:17e::/47 maxlen: 47
2a00:f502:180::/47 maxlen: 47
2a00:f502:250::/44 maxlen: 44
2a00:f502:260::/44 maxlen: 44
2a00:f502:270::/47 maxlen: 47
2a00:f502:272::/47 maxlen: 47
2a00:f502:274::/47 maxlen: 47
2a00:f502:276::/47 maxlen: 47
2a00:f502:278::/47 maxlen: 47
2a00:f502:27a::/47 maxlen: 47
2a00:f502:27c::/47 maxlen: 47
2a00:f502:27e::/47 maxlen: 47
2a00:f502:280::/47 maxlen: 47
2a00:f503:150::/45 maxlen: 45
2a00:f503:158::/45 maxlen: 45
2a00:f503:160::/45 maxlen: 45
2a00:f503:168::/45 maxlen: 45
2a00:f503:170::/47 maxlen: 47
2a00:f503:172::/47 maxlen: 47
2a00:f503:174::/47 maxlen: 47
2a00:f503:176::/47 maxlen: 47
2a00:f503:178::/47 maxlen: 47
2a00:f503:17a::/47 maxlen: 47
2a00:f503:17c::/47 maxlen: 47
2a00:f503:17e::/47 maxlen: 47
2a00:f503:180::/47 maxlen: 47
2a00:f503:250::/45 maxlen: 45
2a00:f503:258::/45 maxlen: 45
2a00:f503:260::/45 maxlen: 45
2a00:f503:268::/45 maxlen: 45
2a00:f503:270::/47 maxlen: 47
2a00:f503:272::/47 maxlen: 47
2a00:f503:274::/47 maxlen: 47
2a00:f503:276::/47 maxlen: 47
2a00:f503:278::/47 maxlen: 47
2a00:f503:27a::/47 maxlen: 47
2a00:f503:27c::/47 maxlen: 47
2a00:f503:27e::/47 maxlen: 47
2a00:f503:280::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:44:1b:ce:be:6f:84:90:f5:a2:24:2d:d0:89:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jun 30 11:22:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7312b9f1bf0eab2c1e1045fb652ccd4e1072cc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:0f:d5:26:21:90:37:d1:6a:c8:ce:3a:06:
48:d9:22:0b:9a:3e:93:42:31:b9:c1:58:69:0d:6c:
7b:c9:aa:6a:19:b9:34:b2:05:3d:0e:fd:36:cf:61:
75:3c:bd:06:c9:c8:3e:81:0e:7f:6a:a2:8d:be:5e:
53:f2:92:b2:04:df:a6:57:7a:c8:81:26:1f:db:de:
6c:97:bf:38:e7:23:1a:d5:58:61:81:0b:93:05:3c:
a5:27:3d:26:9e:40:9c:f3:4a:81:a7:92:b0:e4:e6:
54:2a:65:63:78:19:1e:e1:06:e9:17:42:76:d2:9f:
01:a8:fb:39:e7:58:b4:81:c0:e6:f4:44:e5:a7:22:
8c:43:cd:18:cb:fd:b7:c2:20:ef:e9:2f:35:06:9f:
d2:c7:4c:5c:fd:3a:4c:e4:81:57:3f:94:01:3c:57:
74:ad:d1:0a:54:3b:37:ef:62:e7:b9:c4:4a:b2:f7:
a5:55:73:e8:fb:f0:05:ed:60:54:0b:8d:ed:60:77:
7c:90:da:e9:c9:1a:ee:5a:19:52:60:45:f6:92:f8:
03:41:dd:c5:67:30:37:12:15:97:a1:e8:8e:bf:8b:
34:d7:10:e5:36:ef:41:08:4e:68:01:e5:b9:96:bc:
74:dd:a9:b0:c5:71:83:33:5a:54:ea:fa:11:7b:51:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:12:B9:F1:BF:0E:AB:2C:1E:10:45:FB:65:2C:CD:4E:10:72:CC:9E
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/cxK58b8OqyweEEX7ZSzNThByzJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.129.0/24
84.15.0.0/16
84.46.139.0/24
84.46.204.0/24
84.46.207.0/24
86.38.1.0/24
86.38.41.0/24
86.38.52.0/24
86.38.62.0/24
86.38.72.0/22
86.38.81.0/24
86.38.84.0/24
86.38.89.0/24
86.38.97.0/24
86.38.108.0/24
86.38.152.0/23
86.38.215.0/24
86.38.228.0/24
86.38.230.0/24
86.38.245.0/24
89.116.124.0/24
89.116.129.0/24
89.116.143.0/24
89.116.151.0/24
89.116.155.0/24
89.116.160.0/24
89.116.162.0/24
89.116.174.0/24
89.116.176.0/24
89.116.178.0/24
89.116.232.0/24
89.116.235.0/24
89.116.238.0/24
89.116.240.0/24
89.116.245.0/24
89.116.249.0/24
89.117.10.0/24
89.117.14.0/24
89.117.69.0/24
89.117.92.0/23
89.117.125.0/24
89.117.127.0/24
89.117.138.0/24
89.117.141.0/24
89.117.156.0/24
89.117.165.0/24
89.117.220.0/23
89.117.223.0/24
89.117.225.0/24
89.117.243.0/24
89.117.247.0/24
89.117.249.0/24
89.117.255.0/24
185.189.154.0/24
213.226.128.0/18
213.252.192.0/20
213.252.220.0/24
213.252.223.0-213.252.227.255
213.252.234.0-213.252.237.255
213.252.252.0/24
213.252.254.0/24
217.9.248.0/23
IPv6:
2a00:f500::/29
Signature Algorithm: sha256WithRSAEncryption
17:c0:60:63:b9:76:de:0b:ef:c7:6d:2d:fb:33:90:ab:73:3b:
8d:55:ed:8b:f8:4f:b1:63:e2:f3:d5:a1:fa:3b:c9:fb:fe:d2:
9f:4a:24:d1:20:06:c2:2c:33:a0:83:df:3c:a4:37:49:4e:d3:
bf:bd:38:43:b0:16:97:95:00:7a:00:a5:53:52:a3:32:fe:b1:
0b:5c:ef:4d:ec:ed:40:e2:7c:4f:54:d8:60:10:1c:ee:ea:81:
e0:2d:8d:16:46:11:7e:52:be:2a:53:26:7e:76:42:e8:7a:f8:
fc:70:c6:fd:6b:c5:04:99:63:e3:bf:e4:73:1b:25:92:89:02:
31:5f:d8:d3:07:88:bd:18:13:3c:5c:84:76:8c:a1:2b:34:30:
6b:ed:f3:16:d5:20:36:91:bd:5c:a5:df:2e:a8:c3:36:c8:a9:
ae:d4:e9:a4:01:70:2c:51:26:cb:8c:80:ab:7e:11:01:b3:85:
db:f7:44:7b:c9:46:6e:2f:e9:3b:cf:c8:b5:11:31:35:cf:fc:
70:1d:af:66:ac:48:d3:ff:14:17:71:76:84:b4:b6:94:ed:4a:
0d:fa:38:9e:81:cb:b4:8a:1d:70:78:04:64:2f:f0:71:00:e3:
ba:a9:04:91:0f:1e:99:0d:4e:62:41:9d:52:d2:d1:1b:55:7b:
6d:34:5e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:35:24 2026 by rpki-client