Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/7arpXzsUU8aT9_eYrYn90CLuHqA.roa (download)

Subject key identifier:   ED:AA:E9:5F:3B:14:53:C6:93:F7:F7:98:AD:89:FD:D0:22:EE:1E:A0 
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
asID:                     AS212046
Prefixes:
    1: 84.46.160.0/21 maxlen: 21
    2: 84.46.172.0/22 maxlen: 22
    3: 84.46.168.0/23 maxlen: 23
    4: 84.46.176.0/20 maxlen: 20
    5: 82.140.160.0/20 maxlen: 20
    6: 82.140.176.0/23 maxlen: 23
    7: 82.140.177.0/24 maxlen: 24
    8: 82.140.179.0/24 maxlen: 24
    9: 82.140.184.0/22 maxlen: 22
   10: 82.140.190.0/23 maxlen: 23
   11: 82.140.188.0/24 maxlen: 24
   12: 84.46.128.0/19 maxlen: 19
   13: 84.46.192.0/21 maxlen: 21
   14: 84.46.202.0/23 maxlen: 23
   15: 84.46.204.0/22 maxlen: 22
   16: 84.46.201.0/24 maxlen: 24
   17: 84.46.204.0/24 maxlen: 24
   18: 84.46.208.0/20 maxlen: 20
   19: 84.46.207.0/24 maxlen: 24
   20: 84.46.224.0/21 maxlen: 21
   21: 84.46.232.0/23 maxlen: 23
   22: 86.38.244.0/23 maxlen: 23
   23: 86.38.191.0/24 maxlen: 24
   24: 86.38.188.0/24 maxlen: 24
   25: 86.38.192.0/21 maxlen: 21
   26: 86.38.201.0/24 maxlen: 24
   27: 86.38.206.0/23 maxlen: 23
   28: 86.38.212.0/23 maxlen: 23
   29: 86.38.208.0/22 maxlen: 22
   30: 86.38.215.0/24 maxlen: 24
   31: 86.38.222.0/23 maxlen: 23
   32: 86.38.224.0/24 maxlen: 24
   33: 86.38.222.0/24 maxlen: 24
   34: 86.38.228.0/22 maxlen: 22
   35: 86.38.233.0/24 maxlen: 24
   36: 86.38.230.0/24 maxlen: 24
   37: 86.38.227.0/24 maxlen: 24
   38: 86.38.236.0/23 maxlen: 23
   39: 86.38.240.0/24 maxlen: 24
   40: 86.38.239.0/24 maxlen: 24
   41: 86.38.236.0/24 maxlen: 24
   42: 86.38.234.0/24 maxlen: 24
   43: 82.140.130.0/24 maxlen: 24
   44: 82.140.132.0/22 maxlen: 22
   45: 82.140.128.0/23 maxlen: 23
   46: 82.140.136.0/21 maxlen: 21
   47: 82.140.144.0/20 maxlen: 20
   48: 82.140.159.0/24 maxlen: 24
   49: 86.38.28.0/22 maxlen: 22
   50: 86.38.26.0/23 maxlen: 23
   51: 86.38.26.0/24 maxlen: 24
   52: 86.38.25.0/24 maxlen: 24
   53: 86.38.34.0/23 maxlen: 23
   54: 86.38.36.0/24 maxlen: 24
   55: 86.38.33.0/24 maxlen: 24
   56: 86.38.40.0/21 maxlen: 21
   57: 86.38.38.0/23 maxlen: 23
   58: 86.38.48.0/20 maxlen: 20
   59: 86.38.64.0/18 maxlen: 18
   60: 86.38.73.0/24 maxlen: 24
   61: 86.38.72.0/24 maxlen: 24
   62: 86.38.75.0/24 maxlen: 24
   63: 86.38.74.0/24 maxlen: 24
   64: 86.38.0.0/23 maxlen: 23
   65: 86.38.2.0/24 maxlen: 24
   66: 86.38.6.0/24 maxlen: 24
   67: 86.38.16.0/21 maxlen: 21
   68: 86.38.144.0/22 maxlen: 22
   69: 86.38.152.0/22 maxlen: 22
   70: 86.38.148.0/23 maxlen: 23
   71: 86.38.152.0/24 maxlen: 24
   72: 86.38.150.0/24 maxlen: 24
   73: 86.38.158.0/23 maxlen: 23
   74: 86.38.157.0/24 maxlen: 24
   75: 86.38.154.0/24 maxlen: 24
   76: 86.38.153.0/24 maxlen: 24
   77: 86.38.160.0/21 maxlen: 21
   78: 86.38.160.0/24 maxlen: 24
   79: 86.38.168.0/22 maxlen: 22
   80: 86.38.172.0/23 maxlen: 23
   81: 86.38.176.0/24 maxlen: 24
   82: 86.38.174.0/24 maxlen: 24
   83: 86.38.128.0/20 maxlen: 20
   84: 86.38.129.0/24 maxlen: 24
   85: 86.38.128.0/24 maxlen: 24
   86: 86.38.130.0/24 maxlen: 24
   87: 89.117.232.0/21 maxlen: 21
   88: 89.117.240.0/22 maxlen: 22
   89: 89.117.252.0/23 maxlen: 23
   90: 89.117.248.0/23 maxlen: 23
   91: 89.117.251.0/24 maxlen: 24
   92: 89.117.249.0/24 maxlen: 24
   93: 89.117.248.0/24 maxlen: 24
   94: 89.117.247.0/24 maxlen: 24
   95: 89.117.69.0/24 maxlen: 24
   96: 89.117.86.0/24 maxlen: 24
   97: 89.117.92.0/23 maxlen: 23
   98: 89.117.100.0/24 maxlen: 24
   99: 89.117.110.0/24 maxlen: 24
  100: 89.117.108.0/24 maxlen: 24
  101: 89.117.14.0/24 maxlen: 24
  102: 89.117.26.0/24 maxlen: 24
  103: 89.117.39.0/24 maxlen: 24
  104: 89.117.176.0/21 maxlen: 21
  105: 89.117.184.0/22 maxlen: 22
  106: 217.9.240.0/24 maxlen: 24
  107: 217.9.244.0/22 maxlen: 22
  108: 89.117.192.0/20 maxlen: 20
  109: 217.9.243.0/24 maxlen: 24
  110: 217.9.248.0/22 maxlen: 22
  111: 217.9.252.0/23 maxlen: 23
  112: 89.117.208.0/22 maxlen: 22
  113: 89.117.212.0/23 maxlen: 23
  114: 89.117.214.0/24 maxlen: 24
  115: 89.117.219.0/24 maxlen: 24
  116: 89.117.223.0/24 maxlen: 24
  117: 89.117.224.0/23 maxlen: 23
  118: 89.117.220.0/23 maxlen: 23
  119: 89.117.125.0/24 maxlen: 24
  120: 89.117.119.0/24 maxlen: 24
  121: 89.117.128.0/24 maxlen: 24
  122: 89.117.127.0/24 maxlen: 24
  123: 89.117.138.0/24 maxlen: 24
  124: 89.117.137.0/24 maxlen: 24
  125: 89.117.140.0/23 maxlen: 23
  126: 89.117.156.0/24 maxlen: 24
  127: 89.117.166.0/24 maxlen: 24
  128: 89.117.165.0/24 maxlen: 24
  129: 89.117.170.0/24 maxlen: 24
  130: 89.116.124.0/24 maxlen: 24
  131: 89.116.129.0/24 maxlen: 24
  132: 89.116.143.0/24 maxlen: 24
  133: 89.116.151.0/24 maxlen: 24
  134: 89.116.155.0/24 maxlen: 24
  135: 89.116.57.0/24 maxlen: 24
  136: 89.116.55.0/24 maxlen: 24
  137: 89.116.71.0/24 maxlen: 24
  138: 89.116.78.0/24 maxlen: 24
  139: 89.116.77.0/24 maxlen: 24
  140: 89.116.79.0/24 maxlen: 24
  141: 89.116.90.0/24 maxlen: 24
  142: 89.116.94.0/23 maxlen: 23
  143: 89.116.98.0/24 maxlen: 24
  144: 89.116.97.0/24 maxlen: 24
  145: 89.116.93.0/24 maxlen: 24
  146: 89.116.232.0/24 maxlen: 24
  147: 89.116.235.0/24 maxlen: 24
  148: 89.117.10.0/24 maxlen: 24
  149: 89.116.160.0/24 maxlen: 24
  150: 89.116.162.0/24 maxlen: 24
  151: 89.116.174.0/24 maxlen: 24
  152: 89.116.178.0/24 maxlen: 24
  153: 89.116.176.0/24 maxlen: 24
  154: 89.116.195.0/24 maxlen: 24
  155: 89.116.0.0/24 maxlen: 24
  156: 89.116.14.0/24 maxlen: 24
  157: 89.116.18.0/24 maxlen: 24
  158: 89.116.40.0/24 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/7arpXzsUU8aT9_eYrYn90CLuHqA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135028854 (0x80c6076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan  1 11:54:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edaae95f3b1453c693f7f798ad89fdd022ee1ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:31:81:26:38:b0:95:a0:63:22:a5:c4:ec:
                    be:0f:10:f6:02:fd:88:6c:f2:c4:9c:d3:89:05:61:
                    84:48:a4:ef:6a:70:05:ee:f8:63:10:6a:c1:da:c6:
                    e7:7e:dc:be:a8:38:e4:7c:08:66:a5:0b:00:6a:ce:
                    c4:97:aa:07:85:21:ee:84:8e:6a:56:33:21:bc:0d:
                    ab:b5:8f:46:4f:c6:60:17:3b:af:cd:9e:46:6e:5a:
                    8a:c6:0e:4a:1e:8d:09:35:ce:26:ad:4e:05:93:c5:
                    e2:ba:fe:23:fc:da:1c:55:48:9b:ec:a7:01:c3:0d:
                    7e:d0:0a:b4:dd:da:43:3d:ff:9c:74:57:7a:15:70:
                    c3:ee:d6:a8:c1:1e:32:f8:67:c3:9d:b6:a8:ef:11:
                    ac:30:4c:1f:13:30:c5:34:92:9c:b8:64:0b:ae:1e:
                    18:6f:9d:36:43:a5:5d:bf:e2:5a:3c:02:0f:bd:bf:
                    4a:b2:fc:54:6b:69:84:f3:26:9a:c6:2f:20:48:0e:
                    0c:fb:bb:64:34:53:fe:64:72:ba:3e:04:7e:4a:2e:
                    92:55:87:89:d1:0b:77:7d:2d:ba:ab:1e:2b:3e:b4:
                    56:6a:8f:42:a7:29:b0:a3:49:95:46:85:6d:1e:9a:
                    1a:8b:21:e0:f2:a9:4b:9e:e6:0f:df:54:90:24:41:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:AA:E9:5F:3B:14:53:C6:93:F7:F7:98:AD:89:FD:D0:22:EE:1E:A0
            X509v3 Authority Key Identifier: 
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/7arpXzsUU8aT9_eYrYn90CLuHqA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.128.0-82.140.130.255
                  82.140.132.0-82.140.177.255
                  82.140.179.0/24
                  82.140.184.0-82.140.188.255
                  82.140.190.0/23
                  84.46.128.0-84.46.169.255
                  84.46.172.0-84.46.199.255
                  84.46.201.0-84.46.233.255
                  86.38.0.0-86.38.2.255
                  86.38.6.0/24
                  86.38.16.0/21
                  86.38.25.0-86.38.31.255
                  86.38.33.0-86.38.36.255
                  86.38.38.0-86.38.150.255
                  86.38.152.0/22
                  86.38.157.0-86.38.174.255
                  86.38.176.0/24
                  86.38.188.0/24
                  86.38.191.0-86.38.199.255
                  86.38.201.0/24
                  86.38.206.0-86.38.213.255
                  86.38.215.0/24
                  86.38.222.0-86.38.224.255
                  86.38.227.0-86.38.231.255
                  86.38.233.0-86.38.234.255
                  86.38.236.0/23
                  86.38.239.0-86.38.240.255
                  86.38.244.0/23
                  89.116.0.0/24
                  89.116.14.0/24
                  89.116.18.0/24
                  89.116.40.0/24
                  89.116.55.0/24
                  89.116.57.0/24
                  89.116.71.0/24
                  89.116.77.0-89.116.79.255
                  89.116.90.0/24
                  89.116.93.0-89.116.95.255
                  89.116.97.0-89.116.98.255
                  89.116.124.0/24
                  89.116.129.0/24
                  89.116.143.0/24
                  89.116.151.0/24
                  89.116.155.0/24
                  89.116.160.0/24
                  89.116.162.0/24
                  89.116.174.0/24
                  89.116.176.0/24
                  89.116.178.0/24
                  89.116.195.0/24
                  89.116.232.0/24
                  89.116.235.0/24
                  89.117.10.0/24
                  89.117.14.0/24
                  89.117.26.0/24
                  89.117.39.0/24
                  89.117.69.0/24
                  89.117.86.0/24
                  89.117.92.0/23
                  89.117.100.0/24
                  89.117.108.0/24
                  89.117.110.0/24
                  89.117.119.0/24
                  89.117.125.0/24
                  89.117.127.0-89.117.128.255
                  89.117.137.0-89.117.138.255
                  89.117.140.0/23
                  89.117.156.0/24
                  89.117.165.0-89.117.166.255
                  89.117.170.0/24
                  89.117.176.0-89.117.187.255
                  89.117.192.0-89.117.214.255
                  89.117.219.0-89.117.221.255
                  89.117.223.0-89.117.225.255
                  89.117.232.0-89.117.243.255
                  89.117.247.0-89.117.249.255
                  89.117.251.0-89.117.253.255
                  217.9.240.0/24
                  217.9.243.0-217.9.253.255

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:82:da:e5:ce:6c:55:3d:12:45:3b:e8:eb:0c:b3:13:a8:
         93:33:e8:c1:07:bd:60:74:25:28:c6:51:ab:3c:d9:b8:c6:98:
         a2:de:7f:99:fa:9f:3b:b9:d4:8a:62:07:c5:58:68:37:18:f2:
         82:bc:90:01:8d:e0:2e:3c:26:99:ff:8f:95:ab:65:47:7a:15:
         95:85:24:d9:76:d9:d9:c3:3f:19:25:2e:90:5c:88:4c:9e:06:
         83:58:7b:bb:95:5a:bc:b4:2b:23:51:da:bb:82:9a:5a:79:1a:
         21:b6:89:fc:91:cc:b7:9f:73:3b:0b:2c:50:83:4a:98:68:51:
         60:89:ce:46:b4:13:00:39:12:be:0c:ab:c7:83:2a:1f:df:28:
         1d:14:95:3c:ef:bc:56:cd:e6:8a:19:3f:af:7f:bf:51:c6:b5:
         30:f1:4b:97:03:d6:79:29:91:42:3f:f5:0b:00:d9:2b:59:f3:
         5c:b1:1e:e6:bf:91:45:60:c9:b2:e7:f8:d8:56:5d:2d:e2:23:
         b4:bb:0a:80:59:7e:5b:29:b4:88:8a:92:11:ba:cc:15:94:74:
         d8:00:8e:69:6a:d1:5c:32:66:71:cd:67:5f:4b:8e:41:e0:69:
         0a:cd:e5:93:80:e7:fb:93:81:0d:91:91:88:25:dc:b6:2e:e9:
         bb:ba:44:fe
-----BEGIN CERTIFICATE-----
MIIHxDCCBqygAwIBAgIECAxgdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGRkODFhODMzZDliMDQzYzdmZmQ2MzVhNTk4N2Y1MzY5NzExODBkMB4XDTIyMDEw
MTExNTQxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRhYWU5NWYzYjE0
NTNjNjkzZjdmNzk4YWQ4OWZkZDAyMmVlMWVhMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsJMYEmOLCVoGMipcTsvg8Q9gL9iGzyxJzTiQVhhEik72pw
Be74YxBqwdrG537cvqg45HwIZqULAGrOxJeqB4Uh7oSOalYzIbwNq7WPRk/GYBc7
r82eRm5aisYOSh6NCTXOJq1OBZPF4rr+I/zaHFVIm+ynAcMNftAKtN3aQz3/nHRX
ehVww+7WqMEeMvhnw522qO8RrDBMHxMwxTSSnLhkC64eGG+dNkOlXb/iWjwCD72/
SrL8VGtphPMmmsYvIEgODPu7ZDRT/mRyuj4EfkouklWHidELd30tuqseKz60VmqP
QqcpsKNJlUaFbR6aGosh4PKpS57mD99UkCRBRK8CAwEAAaOCBN4wggTaMB0GA1Ud
DgQWBBTtqulfOxRTxpP395itif3QIu4eoDAfBgNVHSMEGDAWgBTw3YGoM9mwQ8f/
1jWlmH9TaXEYDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhOMkJxRFBac0VQSF85WTFwWmhfVTJseEdBMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvYThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8x
LzdhcnBYenNVVThhVDlfZVlyWW45MENMdUhxQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
YThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZkYy8xLzhOMkJxRFBac0VQ
SF85WTFwWmhfVTJseEdBMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AvIGCCsGAQUFBwEHAQH/BIIC4TCCAt0wggLZBAIAATCCAtEwDAMEB1KMgAMEAFKM
gjAMAwQCUoyEAwQBUoywAwQAUoyzMAwDBANSjLgDBABSjLwDBAFSjL4wDAMEB1Qu
gAMEAVQuqDAMAwQCVC6sAwQDVC7AMAwDBABULskDBAFULugwCwMDAVYmAwQAViYC
AwQAViYGAwQDViYQMAwDBABWJhkDBAVWJgAwDAMEAFYmIQMEAFYmJDAMAwQBViYm
AwQAViaWAwQCViaYMAwDBABWJp0DBABWJq4DBABWJrADBABWJrwwDAMEAFYmvwME
A1YmwAMEAFYmyTAMAwQBVibOAwQBVibUAwQAVibXMAwDBAFWJt4DBABWJuAwDAME
AFYm4wMEA1Ym4DAMAwQAVibpAwQAVibqAwQBVibsMAwDBABWJu8DBABWJvADBAFW
JvQDBABZdAADBABZdA4DBABZdBIDBABZdCgDBABZdDcDBABZdDkDBABZdEcwDAME
AFl0TQMEBFl0QAMEAFl0WjAMAwQAWXRdAwQFWXRAMAwDBABZdGEDBABZdGIDBABZ
dHwDBABZdIEDBABZdI8DBABZdJcDBABZdJsDBABZdKADBABZdKIDBABZdK4DBABZ
dLADBABZdLIDBABZdMMDBABZdOgDBABZdOsDBABZdQoDBABZdQ4DBABZdRoDBABZ
dScDBABZdUUDBABZdVYDBAFZdVwDBABZdWQDBABZdWwDBABZdW4DBABZdXcDBABZ
dX0wDAMEAFl1fwMEAFl1gDAMAwQAWXWJAwQAWXWKAwQBWXWMAwQAWXWcMAwDBABZ
daUDBABZdaYDBABZdaowDAMEBFl1sAMEAll1uDAMAwQGWXXAAwQAWXXWMAwDBABZ
ddsDBAFZddwwDAMEAFl13wMEAVl14DAMAwQDWXXoAwQCWXXwMAwDBABZdfcDBAFZ
dfgwDAMEAFl1+wMEAVl1/AMEANkJ8DAMAwQA2QnzAwQB2Qn8MA0GCSqGSIb3DQEB
CwUAA4IBAQA+b4La5c5sVT0SRTvo6wyzE6iTM+jBB71gdCUoxlGrPNm4xpii3n+Z
+p87udSKYgfFWGg3GPKCvJABjeAuPCaZ/4+Vq2VHehWVhSTZdtnZwz8ZJS6QXIhM
ngaDWHu7lVq8tCsjUdq7gppaeRohton8kcy3n3M7CyxQg0qYaFFgic5GtBMAORK+
DKvHgyof3ygdFJU877xWzeaKGT+vf79RxrUw8UuXA9Z5KZFCP/ULANkrWfNcsR7m
v5FFYMmy5/jYVl0t4iO0uwqAWX5bKbSIipIRuswVlHTYAI5patFcMmZxzWdfS45B
4GkKzeWTgOf7k4ENkZGIJdy2Lum7ukT+
-----END CERTIFICATE-----

Generated at Sat Jan 1 13:43:53 2022 by LibreSSL & rpki-client.