Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/E8Rsl4KrJ2bB5_Rfw9PrqH-_Rww.roa
File: E8Rsl4KrJ2bB5_Rfw9PrqH-_Rww.roa (raw, json)
Hash identifier: ZghT8FZLyUyNijt6JooUTBYMS4vPsVtDcAcNCiWbMl0=
Subject key identifier: 13:C4:6C:97:82:AB:27:66:C1:E7:F4:5F:C3:D3:EB:A8:7F:BF:47:0C
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B2666C6BB0FCD1F858098AF96184
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/E8Rsl4KrJ2bB5_Rfw9PrqH-_Rww.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12654
IP address blocks: 84.205.64.0/24 maxlen: 24
84.205.65.0/24 maxlen: 24
84.205.66.0/24 maxlen: 24
84.205.67.0/24 maxlen: 24
84.205.69.0/24 maxlen: 24
84.205.70.0/24 maxlen: 24
84.205.75.0/24 maxlen: 24
84.205.76.0/24 maxlen: 24
84.205.80.0/24 maxlen: 24
84.205.81.0/24 maxlen: 24
84.205.82.0/24 maxlen: 24
84.205.85.0/24 maxlen: 24
84.205.86.0/24 maxlen: 24
84.205.88.0/24 maxlen: 24
84.205.91.0/24 maxlen: 24
84.205.92.0/24 maxlen: 24
93.175.144.0/24 maxlen: 24
93.175.146.0/24 maxlen: 24
93.175.152.0/24 maxlen: 24
93.175.153.0/24 maxlen: 24
93.175.154.0/25 maxlen: 25
93.175.154.128/28 maxlen: 28
2001:7fb:ee00::/48 maxlen: 48
2001:7fb:ee01::/48 maxlen: 48
2001:7fb:ee02::/48 maxlen: 48
2001:7fb:ee03::/48 maxlen: 48
2001:7fb:ee04::/48 maxlen: 48
2001:7fb:ee05::/48 maxlen: 48
2001:7fb:ef00::/48 maxlen: 48
2001:7fb:ef01::/48 maxlen: 48
2001:7fb:ef02::/48 maxlen: 48
2001:7fb:ef03::/48 maxlen: 48
2001:7fb:ef04::/48 maxlen: 48
2001:7fb:ef05::/48 maxlen: 48
2001:7fb:fb01:100::/56 maxlen: 56
2001:7fb:fb01:200::/64 maxlen: 64
2001:7fb:fd02::/48 maxlen: 48
2001:7fb:fd05::/48 maxlen: 48
2001:7fb:fe00::/48 maxlen: 48
2001:7fb:fe01::/48 maxlen: 48
2001:7fb:fe03::/48 maxlen: 48
2001:7fb:fe04::/48 maxlen: 48
2001:7fb:fe05::/48 maxlen: 48
2001:7fb:fe06::/48 maxlen: 48
2001:7fb:fe07::/48 maxlen: 48
2001:7fb:fe0a::/48 maxlen: 48
2001:7fb:fe0b::/48 maxlen: 48
2001:7fb:fe0c::/48 maxlen: 48
2001:7fb:fe0d::/48 maxlen: 48
2001:7fb:fe0e::/48 maxlen: 48
2001:7fb:fe0f::/48 maxlen: 48
2001:7fb:fe10::/48 maxlen: 48
2001:7fb:fe12::/48 maxlen: 48
2001:7fb:fe13::/48 maxlen: 48
2001:7fb:fe14::/48 maxlen: 48
2001:7fb:fe15::/48 maxlen: 48
2001:7fb:fe16::/48 maxlen: 48
2001:7fb:fe17::/48 maxlen: 48
2001:7fb:fe18::/48 maxlen: 48
2001:7fb:fe19::/48 maxlen: 48
2001:7fb:fe20::/48 maxlen: 48
2001:7fb:ff00::/48 maxlen: 48
2001:7fb:ff01::/48 maxlen: 48
2001:7fb:ff02::/48 maxlen: 48
2001:7fb:ff04::/48 maxlen: 48
2001:7fb:ff05::/48 maxlen: 48
2001:7fb:ff06::/48 maxlen: 48
2001:7fb:ff07::/48 maxlen: 48
2001:7fb:ff0a::/48 maxlen: 48
2001:7fb:ff0b::/48 maxlen: 48
2001:7fb:ff0c::/48 maxlen: 48
2001:7fb:ff0d::/48 maxlen: 48
2001:7fb:ff0e::/48 maxlen: 48
2001:7fb:ff0f::/48 maxlen: 48
2001:7fb:ff10::/48 maxlen: 48
2001:7fb:ff12::/48 maxlen: 48
2001:7fb:ff13::/48 maxlen: 48
2001:7fb:ff14::/48 maxlen: 48
2001:7fb:ff15::/48 maxlen: 48
2001:7fb:ff16::/48 maxlen: 48
2001:7fb:ff17::/48 maxlen: 48
2001:7fb:ff18::/48 maxlen: 48
2001:7fb:ff19::/48 maxlen: 48
2001:7fb:ff20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b2:66:6c:6b:b0:fc:d1:f8:58:09:8a:f9:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13c46c9782ab2766c1e7f45fc3d3eba87fbf470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:a2:f6:1a:84:13:18:f2:38:a5:70:f8:06:
06:8d:98:c0:c0:08:ed:74:2b:3e:0c:c5:d7:20:08:
fd:88:be:0a:84:e9:93:14:43:a3:b6:f1:4c:03:1c:
08:c2:e6:e4:6c:88:0b:9b:34:86:f6:3a:35:da:84:
83:e8:92:86:00:8d:07:e7:15:96:cb:20:a8:68:91:
66:17:9c:8e:fe:56:a0:f4:97:eb:7c:f1:88:57:ae:
fe:b2:4f:ce:7c:b3:f9:a7:7f:4f:99:53:05:f1:70:
39:be:5b:70:56:17:9d:72:7c:29:34:85:a9:e6:aa:
fb:13:41:2b:aa:61:bd:ac:7d:a8:62:ab:c0:f0:f8:
29:bc:b7:c4:1d:3c:82:5a:3d:67:af:c0:42:53:2a:
ed:bd:55:0a:e9:d4:3f:cb:ae:f9:6c:63:0d:cc:5d:
ec:c7:67:b8:ed:13:85:97:c0:5f:e1:f7:da:16:af:
f4:72:aa:31:01:6d:32:85:9c:8c:5c:83:ab:2f:fd:
31:35:fb:f2:fc:a0:ea:77:21:1b:b8:ba:04:2a:ac:
eb:43:e6:37:0a:d8:7a:1d:cd:39:5f:65:50:66:02:
f3:b8:25:eb:19:54:96:1e:a7:69:1f:2b:78:cd:05:
a2:0f:ed:42:a1:6f:17:aa:d9:d5:1e:b4:09:80:9e:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:6C:97:82:AB:27:66:C1:E7:F4:5F:C3:D3:EB:A8:7F:BF:47:0C
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/E8Rsl4KrJ2bB5_Rfw9PrqH-_Rww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.64.0/22
84.205.69.0-84.205.70.255
84.205.75.0-84.205.76.255
84.205.80.0-84.205.82.255
84.205.85.0-84.205.86.255
84.205.88.0/24
84.205.91.0-84.205.92.255
93.175.144.0/24
93.175.146.0/24
93.175.152.0-93.175.154.143
IPv6:
2001:7fb:ee00::-2001:7fb:ee05:ffff:ffff:ffff:ffff:ffff
2001:7fb:ef00::-2001:7fb:ef05:ffff:ffff:ffff:ffff:ffff
2001:7fb:fb01:100::-2001:7fb:fb01:200:ffff:ffff:ffff:ffff
2001:7fb:fd02::/48
2001:7fb:fd05::/48
2001:7fb:fe00::/47
2001:7fb:fe03::-2001:7fb:fe07:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe0a::-2001:7fb:fe10:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe12::-2001:7fb:fe19:ffff:ffff:ffff:ffff:ffff
2001:7fb:fe20::/48
2001:7fb:ff00::-2001:7fb:ff02:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff04::/46
2001:7fb:ff0a::-2001:7fb:ff10:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff12::-2001:7fb:ff19:ffff:ffff:ffff:ffff:ffff
2001:7fb:ff20::/48
Signature Algorithm: sha256WithRSAEncryption
15:11:8c:02:7f:e7:81:c6:f0:4a:5e:f5:32:80:70:0c:6a:f5:
b1:90:6f:56:a5:2b:4e:08:38:ea:6b:d4:4c:8e:9f:b9:f9:d8:
8d:17:86:af:f1:6c:97:0e:41:67:df:17:3c:cb:26:ba:e7:a1:
dd:14:bd:05:02:fd:dc:50:2b:7d:65:db:63:b4:21:f7:a6:6c:
cd:54:22:20:7b:9b:fe:c8:0e:25:41:02:76:a9:6b:55:ac:15:
76:ba:58:c1:47:c7:9e:60:ae:ed:17:4b:2a:52:80:7a:d8:9b:
71:d6:1b:52:da:93:e3:2b:ab:6c:f7:28:0c:d8:bf:58:a6:3f:
6c:48:d9:43:b8:50:d3:bc:35:aa:41:02:db:d8:af:e5:14:36:
b9:43:81:46:5d:5d:a5:27:66:0e:5d:65:c7:f5:81:d2:0e:39:
f4:de:39:4e:21:61:8d:a5:aa:1c:e2:f5:02:b3:2f:23:26:56:
b6:21:f8:de:88:47:af:fe:60:76:d1:d8:fe:aa:67:69:b6:c7:
d3:47:1a:11:75:ad:31:de:89:b6:da:d3:46:dd:91:1f:03:68:
7d:3c:ac:84:0a:4a:17:56:fa:ab:98:cd:93:96:d3:96:d5:a0:
51:df:b6:bb:d6:8f:29:a4:72:b3:fe:0e:e6:ee:03:84:67:06:
ff:e7:87:71
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISAZ8jaLJmbGuw/NH4WAmK+WGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkzYTgxMDBkNGIzN2VkM2NkOGJiYzFhNzllOWYyMGQw
NjRhOTkwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2M0NmM5NzgyYWIyNzY2YzFlN2Y0NWZjM2QzZWJhODdmYmY0NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JWi9hqEExjyOKVw+AYGjZjAwAjt
dCs+DMXXIAj9iL4KhOmTFEOjtvFMAxwIwubkbIgLmzSG9jo12oSD6JKGAI0H5xWW
yyCoaJFmF5yO/lag9JfrfPGIV67+sk/OfLP5p39PmVMF8XA5vltwVhedcnwpNIWp
5qr7E0ErqmG9rH2oYqvA8PgpvLfEHTyCWj1nr8BCUyrtvVUK6dQ/y675bGMNzF3s
x2e47ROFl8Bf4ffaFq/0cqoxAW0yhZyMXIOrL/0xNfvy/KDqdyEbuLoEKqzrQ+Y3
Cth6Hc05X2VQZgLzuCXrGVSWHqdpHyt4zQWiD+1CoW8XqtnVHrQJgJ6ZQQIDAQAB
o4IDajCCA2YwHQYDVR0OBBYEFBPEbJeCqydmwef0X8PT66h/v0cMMB8GA1UdIwQY
MBaAFCXZOoEA1LN+082LvBp56fINBkqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvRThSc2w0S3JKMmJCNV9SZnc5UHJxSC1fUnd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBfgYIKwYBBQUHAQcBAf8EggFtMIIBaTBzBAIAATBtAwQC
VM1AMAwDBABUzUUDBABUzUYwDAMEAFTNSwMEAFTNTDAMAwQEVM1QAwQAVM1SMAwD
BABUzVUDBABUzVYDBABUzVgwDAMEAFTNWwMEAFTNXAMEAF2vkAMEAF2vkjANAwQD
Xa+YAwUEXa+agDCB8QQCAAIwgeowEQMGASABB/vuAwcBIAEH++4EMBEDBgAgAQf7
7wMHASABB/vvBDAVAwgAIAEH+/sBAQMJACABB/v7AQIAAwcAIAEH+/0CAwcAIAEH
+/0FAwcBIAEH+/4AMBIDBwAgAQf7/gMDBwMgAQf7/gAwEgMHASABB/v+CgMHACAB
B/v+EDASAwcBIAEH+/4SAwcBIAEH+/4YAwcAIAEH+/4gMBEDBgAgAQf7/wMHACAB
B/v/AgMHAiABB/v/BDASAwcBIAEH+/8KAwcAIAEH+/8QMBIDBwEgAQf7/xIDBwEg
AQf7/xgDBwAgAQf7/yAwDQYJKoZIhvcNAQELBQADggEBABURjAJ/54HG8Epe9TKA
cAxq9bGQb1alK04IOOpr1EyOn7n52I0Xhq/xbJcOQWffFzzLJrrnod0UvQUC/dxQ
K31l22O0IfembM1UIiB7m/7IDiVBAnapa1WsFXa6WMFHx55gru0XSypSgHrYm3HW
G1Lak+Mrq2z3KAzYv1imP2xI2UO4UNO8NapBAtvYr+UUNrlDgUZdXaUnZg5dZcf1
gdIOOfTeOU4hYY2lqhzi9QKzLyMmVrYh+N6IR6/+YHbR2P6qZ2m2x9NHGhF1rTHe
ibba00bdkR8DaH08rIQKShdW+quYzZOW05bVoFHftrvWjymkcrP+DubuA4RnBv/n
h3E=
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:05 2026 by rpki-client