Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SOyLC_1Y0MJARNsDzTEb2NyJJz8.roa
File: SOyLC_1Y0MJARNsDzTEb2NyJJz8.roa (raw, json)
Hash identifier: pbDsbaxhS/qMJinkUHHnHNNKXpBbmZHggzDK7gmo6G4=
Subject key identifier: 48:EC:8B:0B:FD:58:D0:C2:40:44:DB:03:CD:31:1B:D8:DC:89:27:3F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F464C2A1AEFE40452FCF7E569E46652E3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SOyLC_1Y0MJARNsDzTEb2NyJJz8.roa
Signing time: Thu 09 Jul 2026 09:53:44 +0000
ROA not before: Thu 09 Jul 2026 09:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.108.10.0/23 maxlen: 23
82.108.48.0/23 maxlen: 23
82.108.62.0/23 maxlen: 23
82.108.64.0/22 maxlen: 22
82.108.96.0/23 maxlen: 23
82.108.136.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
82.108.220.0/24 maxlen: 24
86.53.5.0/24 maxlen: 24
86.53.22.0/24 maxlen: 24
86.53.25.0/24 maxlen: 24
86.53.26.0/24 maxlen: 24
86.53.166.0/24 maxlen: 24
87.82.200.0/22 maxlen: 22
87.82.204.0/23 maxlen: 23
87.82.208.0/23 maxlen: 23
87.82.211.0/24 maxlen: 24
87.83.37.0/24 maxlen: 24
87.83.38.0/24 maxlen: 24
87.83.40.0/24 maxlen: 24
87.83.42.0/23 maxlen: 23
87.83.76.0/22 maxlen: 22
87.84.50.0/23 maxlen: 23
87.84.72.0/24 maxlen: 24
87.84.74.0/23 maxlen: 23
87.84.136.0/24 maxlen: 24
87.84.138.0/24 maxlen: 24
87.84.148.0/23 maxlen: 23
87.84.155.0/24 maxlen: 24
87.84.181.0/24 maxlen: 24
87.84.184.0/23 maxlen: 23
87.85.254.0/24 maxlen: 24
87.86.6.0/23 maxlen: 23
87.86.15.0/24 maxlen: 24
87.86.26.0/24 maxlen: 24
195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.132.0/23 maxlen: 23
195.172.146.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.134.206.0/24 maxlen: 24
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:4c:2a:1a:ef:e4:04:52:fc:f7:e5:69:e4:66:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 9 09:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48ec8b0bfd58d0c24044db03cd311bd8dc89273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:10:c0:c9:7e:c6:e1:6d:9c:5f:3b:c3:bc:
4d:a6:c2:ae:6f:1e:21:64:94:dc:7f:b8:d1:7a:6f:
69:1d:8e:95:e0:e2:5d:8d:4e:c9:1f:7d:95:03:f4:
54:b9:07:4e:10:52:88:2d:59:7f:42:66:84:5d:2f:
54:9c:a3:b0:a9:d5:a8:71:e6:84:f3:31:0a:12:8d:
4a:45:c4:25:aa:9d:f9:56:7f:45:49:2b:14:25:d8:
81:9e:c1:fa:cb:a0:cc:1e:90:4f:47:80:15:74:cd:
75:53:49:47:ed:8e:0f:61:03:69:31:2c:e1:1b:3e:
02:9a:f9:40:6a:08:ca:9d:6e:5b:97:22:a5:1d:c0:
c0:13:fc:bf:0d:16:cf:25:50:58:a7:24:f4:f8:3c:
50:c7:18:b9:59:cb:27:d7:94:86:3c:ca:e6:ee:26:
31:80:b7:25:c1:11:39:f0:86:11:92:4e:2a:a4:8f:
7b:96:74:ce:1e:8b:4a:07:bf:ca:47:eb:fa:a6:2e:
32:ab:69:69:8e:c1:d2:34:93:64:5b:bd:9d:f6:b9:
3a:17:f9:c8:36:f6:f3:40:8e:95:48:50:bb:4e:89:
76:22:87:31:e2:d8:8d:fd:2f:be:24:29:35:6a:4c:
d5:c7:33:6f:0f:d6:39:a9:e6:de:f6:a9:06:4a:c2:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EC:8B:0B:FD:58:D0:C2:40:44:DB:03:CD:31:1B:D8:DC:89:27:3F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/SOyLC_1Y0MJARNsDzTEb2NyJJz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.10.0/23
82.108.48.0/23
82.108.62.0-82.108.67.255
82.108.96.0/23
82.108.136.0/23
82.108.192.0/23
82.108.220.0/24
86.53.5.0/24
86.53.22.0/24
86.53.25.0-86.53.26.255
86.53.166.0/24
87.82.200.0-87.82.205.255
87.82.208.0/23
87.82.211.0/24
87.83.37.0-87.83.38.255
87.83.40.0/24
87.83.42.0/23
87.83.76.0/22
87.84.50.0/23
87.84.72.0/24
87.84.74.0/23
87.84.136.0/24
87.84.138.0/24
87.84.148.0/23
87.84.155.0/24
87.84.181.0/24
87.84.184.0/23
87.85.254.0/24
87.86.6.0/23
87.86.15.0/24
87.86.26.0/24
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.132.0/23
195.172.146.0-195.172.149.255
195.172.208.0/23
212.134.206.0/24
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:c8:70:a3:e7:e7:71:ca:c6:15:0d:c6:0f:06:8a:b8:14:f9:
43:c3:1d:39:44:dc:e4:b5:2d:89:b0:42:2f:c0:0a:77:73:39:
f4:87:b8:df:0f:fe:fe:cc:9c:ab:c6:9b:6c:c9:6b:1a:d9:39:
11:1f:4c:bf:7b:20:b5:7d:b2:ef:da:63:d5:5d:6e:58:e9:59:
99:53:a1:f5:d0:c5:72:dd:1a:5e:22:29:a2:6e:ba:04:de:36:
77:fd:e6:ec:7d:a3:3d:05:ae:ed:d0:07:24:41:9d:62:f5:1a:
b3:d9:86:11:45:59:a6:e6:4f:e9:3e:7c:05:14:78:4c:f5:77:
c4:50:7d:08:b5:d3:eb:57:a6:f2:c9:53:e4:40:22:3a:f1:9c:
46:a3:1b:a3:4a:fb:a9:44:84:b8:07:fd:24:e1:b0:03:52:ac:
f9:1d:ca:a1:f4:2b:b8:b9:ed:d3:0b:ef:25:6d:90:26:e7:dd:
3b:19:43:e5:30:bc:1d:f6:1d:0b:6e:ec:0d:65:67:6a:f1:bc:
61:c4:cc:42:4d:c9:be:d5:bd:07:f6:46:a1:3d:dd:19:33:81:
12:5f:68:e4:c2:c0:2c:86:29:13:c7:7c:e2:0e:4e:ad:fd:79:
b3:8b:74:19:87:14:70:4f:d0:17:68:43:c7:33:51:55:80:1a:
1b:4b:f7:47
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgISAZ9GTCoa7+QEUvz35WnkZlLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzA5MDk1MzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGVjOGIwYmZkNThkMGMyNDA0NGRiMDNjZDMxMWJkOGRjODkyNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGkQwMl+xuFtnF87w7xNpsKubx4h
ZJTcf7jRem9pHY6V4OJdjU7JH32VA/RUuQdOEFKILVl/QmaEXS9UnKOwqdWoceaE
8zEKEo1KRcQlqp35Vn9FSSsUJdiBnsH6y6DMHpBPR4AVdM11U0lH7Y4PYQNpMSzh
Gz4CmvlAagjKnW5blyKlHcDAE/y/DRbPJVBYpyT0+DxQxxi5Wcsn15SGPMrm7iYx
gLclwRE58IYRkk4qpI97lnTOHotKB7/KR+v6pi4yq2lpjsHSNJNkW72d9rk6F/nI
NvbzQI6VSFC7Tol2Iocx4tiN/S++JCk1akzVxzNvD9Y5qebe9qkGSsKqXQIDAQAB
o4IDozCCA58wHQYDVR0OBBYEFEjsiwv9WNDCQETbA80xG9jciSc/MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvU095TENfMVkwTUpBUk5zRHpURWIyTnlKSno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBtwYIKwYBBQUHAQcBAf8EggGmMIIBojCCAZ4EAgABMIIB
lgMEAVJsCgMEAVJsMDAMAwQBUmw+AwQCUmxAAwQBUmxgAwQBUmyIAwQBUmzAAwQA
UmzcAwQAVjUFAwQAVjUWMAwDBABWNRkDBABWNRoDBABWNaYwDAMEA1dSyAMEAVdS
zAMEAVdS0AMEAFdS0zAMAwQAV1MlAwQAV1MmAwQAV1MoAwQBV1MqAwQCV1NMAwQB
V1QyAwQAV1RIAwQBV1RKAwQAV1SIAwQAV1SKAwQBV1SUAwQAV1SbAwQAV1S1AwQB
V1S4AwQAV1X+AwQBV1YGAwQAV1YPAwQAV1YaAwQAwygDAwQBwygOMAwDBAbDKEAD
BAHDKEQDBADDKE8DBADDKFEDBADDKFQDBADDKFoDBADDKF0DBAHDKGIDBAHDKGYD
BALDKHwDBAHDKKQDBAPDKKgDBAHDKL4DBAHDrH4DBAHDrIQwDAMEAcOskgMEAcOs
lAMEAcOs0AMEANSGzgMEAdSHDgMEAdSHsDAMAwQB1Ie2AwQA1Ie8AwQB1IfYAwQC
1IfgMAwDBADUh+UDBAHUh+gDBAHUh+4wDQYJKoZIhvcNAQELBQADggEBAEzIcKPn
53HKxhUNxg8GirgU+UPDHTlE3OS1LYmwQi/ACndzOfSHuN8P/v7MnKvGm2zJaxrZ
OREfTL97ILV9su/aY9VdbljpWZlTofXQxXLdGl4iKaJuugTeNnf95ux9oz0Fru3Q
ByRBnWL1GrPZhhFFWabmT+k+fAUUeEz1d8RQfQi10+tXpvLJU+RAIjrxnEajG6NK
+6lEhLgH/SThsANSrPkdyqH0K7i57dML7yVtkCbn3TsZQ+UwvB32HQtu7A1lZ2rx
vGHEzEJNyb7VvQf2RqE93RkzgRJfaOTCwCyGKRPHfOIOTq39ebOLdBmHFHBP0Bdo
Q8czUVWAGhtL90c=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:21 2026 by rpki-client