
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/98r0bNxXEDMvZ7j6PltFu8qJeJg.roa
File: 98r0bNxXEDMvZ7j6PltFu8qJeJg.roa (raw, json)
Hash identifier: EU18mwS21+icltyLGLTMkrjH38LD7S0gNFf/o4/z9BM=
Subject key identifier: F7:CA:F4:6C:DC:57:10:33:2F:67:B8:FA:3E:5B:45:BB:CA:89:78:98
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 019593D95A5A3AF0F59EE65566E3FE4CDD47
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/98r0bNxXEDMvZ7j6PltFu8qJeJg.roa
Signing time: Fri 14 Mar 2025 08:50:49 +0000
ROA not before: Fri 14 Mar 2025 08:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272809
IP address blocks: 82.86.64.0/22 maxlen: 22
82.86.64.0/24 maxlen: 24
82.86.65.0/24 maxlen: 24
82.86.66.0/24 maxlen: 24
82.86.67.0/24 maxlen: 24
82.86.68.0/22 maxlen: 22
82.86.68.0/24 maxlen: 24
82.86.69.0/24 maxlen: 24
82.86.70.0/24 maxlen: 24
82.86.71.0/24 maxlen: 24
82.86.72.0/22 maxlen: 22
82.86.72.0/24 maxlen: 24
82.86.73.0/24 maxlen: 24
82.86.74.0/24 maxlen: 24
82.86.75.0/24 maxlen: 24
82.86.76.0/22 maxlen: 22
82.86.76.0/24 maxlen: 24
82.86.77.0/24 maxlen: 24
82.86.78.0/24 maxlen: 24
82.86.79.0/24 maxlen: 24
82.86.80.0/22 maxlen: 22
82.86.80.0/24 maxlen: 24
82.86.81.0/24 maxlen: 24
82.86.82.0/24 maxlen: 24
82.86.83.0/24 maxlen: 24
82.86.84.0/22 maxlen: 22
82.86.84.0/24 maxlen: 24
82.86.85.0/24 maxlen: 24
82.86.86.0/24 maxlen: 24
82.86.87.0/24 maxlen: 24
82.86.88.0/22 maxlen: 22
82.86.88.0/24 maxlen: 24
82.86.89.0/24 maxlen: 24
82.86.90.0/24 maxlen: 24
82.86.91.0/24 maxlen: 24
82.86.92.0/22 maxlen: 22
82.86.92.0/24 maxlen: 24
82.86.93.0/24 maxlen: 24
82.86.94.0/24 maxlen: 24
82.86.95.0/24 maxlen: 24
82.86.96.0/22 maxlen: 22
82.86.96.0/24 maxlen: 24
82.86.97.0/24 maxlen: 24
82.86.98.0/24 maxlen: 24
82.86.99.0/24 maxlen: 24
82.86.100.0/22 maxlen: 22
82.86.100.0/24 maxlen: 24
82.86.101.0/24 maxlen: 24
82.86.102.0/24 maxlen: 24
82.86.103.0/24 maxlen: 24
82.86.128.0/22 maxlen: 22
82.86.128.0/24 maxlen: 24
82.86.129.0/24 maxlen: 24
82.86.130.0/24 maxlen: 24
82.86.131.0/24 maxlen: 24
82.86.132.0/22 maxlen: 22
82.86.132.0/24 maxlen: 24
82.86.133.0/24 maxlen: 24
82.86.134.0/24 maxlen: 24
82.86.135.0/24 maxlen: 24
82.86.136.0/22 maxlen: 22
82.86.136.0/24 maxlen: 24
82.86.137.0/24 maxlen: 24
82.86.138.0/24 maxlen: 24
82.86.139.0/24 maxlen: 24
82.86.140.0/22 maxlen: 22
82.86.140.0/24 maxlen: 24
82.86.141.0/24 maxlen: 24
82.86.142.0/24 maxlen: 24
82.86.143.0/24 maxlen: 24
82.86.144.0/22 maxlen: 22
82.86.144.0/24 maxlen: 24
82.86.145.0/24 maxlen: 24
82.86.146.0/24 maxlen: 24
82.86.147.0/24 maxlen: 24
82.86.148.0/22 maxlen: 22
82.86.148.0/24 maxlen: 24
82.86.149.0/24 maxlen: 24
82.86.150.0/24 maxlen: 24
82.86.151.0/24 maxlen: 24
82.86.152.0/22 maxlen: 22
82.86.152.0/24 maxlen: 24
82.86.153.0/24 maxlen: 24
82.86.154.0/24 maxlen: 24
82.86.155.0/24 maxlen: 24
82.86.156.0/22 maxlen: 22
82.86.156.0/24 maxlen: 24
82.86.157.0/24 maxlen: 24
82.86.158.0/24 maxlen: 24
82.86.159.0/24 maxlen: 24
82.86.160.0/22 maxlen: 22
82.86.160.0/24 maxlen: 24
82.86.161.0/24 maxlen: 24
82.86.162.0/24 maxlen: 24
82.86.163.0/24 maxlen: 24
82.86.164.0/22 maxlen: 22
82.86.164.0/24 maxlen: 24
82.86.165.0/24 maxlen: 24
82.86.166.0/24 maxlen: 24
82.86.167.0/24 maxlen: 24
82.86.224.0/19 maxlen: 19
82.86.224.0/20 maxlen: 20
82.86.224.0/21 maxlen: 21
82.86.224.0/22 maxlen: 22
82.86.224.0/23 maxlen: 23
82.86.224.0/24 maxlen: 24
82.86.225.0/24 maxlen: 24
82.86.226.0/23 maxlen: 23
82.86.226.0/24 maxlen: 24
82.86.227.0/24 maxlen: 24
82.86.228.0/22 maxlen: 22
82.86.228.0/23 maxlen: 23
82.86.228.0/24 maxlen: 24
82.86.229.0/24 maxlen: 24
82.86.230.0/23 maxlen: 23
82.86.230.0/24 maxlen: 24
82.86.231.0/24 maxlen: 24
82.86.232.0/21 maxlen: 21
82.86.232.0/22 maxlen: 22
82.86.232.0/23 maxlen: 23
82.86.232.0/24 maxlen: 24
82.86.233.0/24 maxlen: 24
82.86.234.0/23 maxlen: 23
82.86.234.0/24 maxlen: 24
82.86.235.0/24 maxlen: 24
82.86.236.0/22 maxlen: 22
82.86.236.0/23 maxlen: 23
82.86.236.0/24 maxlen: 24
82.86.237.0/24 maxlen: 24
82.86.238.0/24 maxlen: 24
82.86.239.0/24 maxlen: 24
82.86.240.0/20 maxlen: 20
82.86.240.0/21 maxlen: 21
82.86.240.0/22 maxlen: 22
82.86.240.0/23 maxlen: 23
82.86.240.0/24 maxlen: 24
82.86.241.0/24 maxlen: 24
82.86.242.0/23 maxlen: 23
82.86.242.0/24 maxlen: 24
82.86.243.0/24 maxlen: 24
82.86.244.0/22 maxlen: 22
82.86.244.0/23 maxlen: 23
82.86.244.0/24 maxlen: 24
82.86.245.0/24 maxlen: 24
82.86.246.0/23 maxlen: 23
82.86.246.0/24 maxlen: 24
82.86.247.0/24 maxlen: 24
82.86.248.0/21 maxlen: 21
82.86.248.0/22 maxlen: 22
82.86.248.0/23 maxlen: 23
82.86.248.0/24 maxlen: 24
82.86.249.0/24 maxlen: 24
82.86.250.0/23 maxlen: 23
82.86.250.0/24 maxlen: 24
82.86.251.0/24 maxlen: 24
82.86.252.0/22 maxlen: 22
82.86.252.0/23 maxlen: 23
82.86.252.0/24 maxlen: 24
82.86.253.0/24 maxlen: 24
82.86.254.0/23 maxlen: 23
82.86.254.0/24 maxlen: 24
82.86.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:d9:5a:5a:3a:f0:f5:9e:e6:55:66:e3:fe:4c:dd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Mar 14 08:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7caf46cdc5710332f67b8fa3e5b45bbca897898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:92:f8:1a:63:ca:08:ff:92:b9:ea:7f:27:
b9:81:c4:2f:61:49:de:73:39:30:41:fa:4e:71:5d:
09:e6:85:43:00:ef:10:a4:26:73:59:b7:bc:20:56:
41:b6:67:c4:4d:56:08:ab:1f:aa:50:15:90:61:d8:
ef:83:1f:bb:3b:8d:d3:50:d2:4d:1f:cd:1e:35:8b:
c4:3d:cd:13:97:98:cf:56:19:b5:e2:cd:1a:54:1c:
45:73:a0:79:f0:e9:6e:07:af:97:8a:71:a9:1e:42:
bb:2a:27:c6:3d:f4:fd:21:ec:8f:6b:71:3c:c1:c0:
97:51:fe:c0:88:e7:49:8e:19:82:31:87:cb:37:e5:
a9:c2:8e:09:e6:a8:57:31:3c:cd:cb:d5:8e:6a:63:
88:b6:ef:2b:ff:a0:36:da:ac:24:a0:76:07:f6:fa:
75:68:03:cf:31:47:12:e8:77:e1:b2:fd:3c:1e:29:
1c:43:d5:de:69:fa:27:ac:38:38:68:c9:ff:76:58:
4d:3e:d2:e6:ee:8d:6d:71:00:3e:75:3a:eb:70:20:
2b:34:5e:46:1c:e0:01:75:85:00:6f:b9:d9:92:b1:
9f:d1:88:4e:bf:b7:01:c3:e6:1d:ec:99:16:cb:03:
2f:56:60:e5:e2:c4:d6:e5:04:7c:ff:37:1b:d9:45:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:F4:6C:DC:57:10:33:2F:67:B8:FA:3E:5B:45:BB:CA:89:78:98
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/98r0bNxXEDMvZ7j6PltFu8qJeJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.64.0-82.86.103.255
82.86.128.0-82.86.167.255
82.86.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:17:ef:75:2d:8f:b7:4a:aa:93:e8:e8:26:14:cf:82:18:a2:
88:72:ae:0a:db:0a:8c:12:a7:b5:d6:43:77:07:bc:82:11:eb:
45:6b:53:85:d1:0e:36:16:d1:1b:3a:f1:ea:ed:68:a9:6f:3d:
a3:e3:8b:5c:fe:76:b4:40:1e:06:12:cb:7e:b3:22:9c:92:5d:
75:14:f3:cb:2f:0f:05:a7:cb:08:16:69:bd:68:17:37:5c:48:
a3:5c:42:b3:ca:f6:4c:de:ba:cc:45:65:19:9c:35:9e:73:9e:
a8:fa:7c:48:d2:e8:0a:38:26:90:99:0e:d6:71:e4:62:0b:99:
7c:b6:73:d8:10:e2:d9:2d:c7:53:87:29:87:b6:b5:0d:34:b7:
73:2f:b2:a4:77:3c:50:2f:14:cf:d3:c7:5e:38:1e:ff:b5:37:
ee:fe:e6:7c:62:82:22:ca:d5:5b:2a:ed:af:5f:f1:55:6c:f8:
8b:59:eb:23:3d:bc:4b:10:f8:cd:97:72:a2:c7:ac:42:a7:05:
9c:18:33:60:23:e3:d5:e8:ff:36:a9:4d:ea:57:72:1d:4c:1b:
b1:e0:d2:c1:e1:e0:b5:67:32:94:98:f2:b5:af:72:9e:41:fc:
90:e4:a7:1f:ed:53:db:ba:cd:cd:db:61:7f:49:5c:19:c3:bf:
20:81:cc:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZWT2VpaOvD1nuZVZuP+TN1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4
NzQzZTUwHhcNMjUwMzE0MDg1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2NhZjQ2Y2RjNTcxMDMzMmY2N2I4ZmEzZTViNDViYmNhODk3ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OeS+Bpjygj/krnqfye5gcQvYUne
czkwQfpOcV0J5oVDAO8QpCZzWbe8IFZBtmfETVYIqx+qUBWQYdjvgx+7O43TUNJN
H80eNYvEPc0Tl5jPVhm14s0aVBxFc6B58OluB6+XinGpHkK7KifGPfT9IeyPa3E8
wcCXUf7AiOdJjhmCMYfLN+Wpwo4J5qhXMTzNy9WOamOItu8r/6A22qwkoHYH9vp1
aAPPMUcS6Hfhsv08HikcQ9XeafonrDg4aMn/dlhNPtLm7o1tcQA+dTrrcCArNF5G
HOABdYUAb7nZkrGf0YhOv7cBw+Yd7JkWywMvVmDl4sTW5QR8/zcb2UXTSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPfK9GzcVxAzL2e4+j5bRbvKiXiYMB8GA1UdIwQY
MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut
ODIyZWE0M2RjMThkLzEvOThyMGJOeFhFRE12WjdqNlBsdEZ1OHFKZUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk
LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAZSVkAD
BANSVmAwDAMEB1JWgAMEA1JWoAMEBVJW4DANBgkqhkiG9w0BAQsFAAOCAQEAKxfv
dS2Pt0qqk+joJhTPghiiiHKuCtsKjBKntdZDdwe8ghHrRWtThdEONhbRGzrx6u1o
qW89o+OLXP52tEAeBhLLfrMinJJddRTzyy8PBafLCBZpvWgXN1xIo1xCs8r2TN66
zEVlGZw1nnOeqPp8SNLoCjgmkJkO1nHkYguZfLZz2BDi2S3HU4cph7a1DTS3cy+y
pHc8UC8Uz9PHXjge/7U37v7mfGKCIsrVWyrtr1/xVWz4i1nrIz28SxD4zZdyoses
QqcFnBgzYCPj1ej/NqlN6ldyHUwbseDSweHgtWcylJjyta9ynkH8kOSnH+1T27rN
zdthf0lcGcO/IIHMNw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:36:23 2025 by rpki-client