Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHBfjKcXeJikW-ugkMlq5kfXIRE.roa
File: bHBfjKcXeJikW-ugkMlq5kfXIRE.roa (raw, json)
Hash identifier: sCbTbonLwxQiwcuGNHP7JgeZd0KqfwzrYs2QkKyU2cA=
Subject key identifier: 6C:70:5F:8C:A7:17:78:98:A4:5B:EB:A0:90:C9:6A:E6:47:D7:21:11
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F2FE3770E21A7D8EEC0E90202589B6B4B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHBfjKcXeJikW-ugkMlq5kfXIRE.roa
Signing time: Sun 05 Jul 2026 01:27:43 +0000
ROA not before: Sun 05 Jul 2026 01:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.192.0/24 maxlen: 24
194.87.193.0/24 maxlen: 24
194.87.194.0/24 maxlen: 24
194.87.195.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.57.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.95.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:e3:77:0e:21:a7:d8:ee:c0:e9:02:02:58:9b:6b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 5 01:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c705f8ca7177898a45beba090c96ae647d72111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:5b:9e:42:f4:12:04:c0:fb:76:e2:5e:2b:
5b:4c:63:17:26:97:fe:45:c4:ad:df:fe:d1:5a:e2:
fd:07:bd:c4:83:52:49:61:b1:bf:41:c4:e8:53:fb:
84:a9:3f:ab:39:5b:ed:e9:26:54:8a:a2:1e:5c:a2:
18:c6:1e:c7:75:71:85:34:45:04:bb:09:94:22:69:
bc:31:3a:65:10:10:26:6d:b3:f1:67:17:44:ad:9b:
f6:99:0b:74:c4:41:2e:f1:54:6d:b9:6f:ea:e5:4b:
cc:0f:a6:c8:ed:2e:05:55:d8:9a:aa:a3:bb:b1:16:
84:55:58:84:26:85:3e:7e:03:0e:e4:ab:1a:44:c0:
92:28:e3:e7:8c:0f:9d:ea:dd:b5:f2:34:e0:c8:79:
2a:7d:7d:3e:cc:c7:0f:da:33:ec:7e:96:7c:61:e2:
d6:dc:75:5c:88:dd:47:52:2c:80:14:92:dc:aa:cf:
0d:5c:1d:01:0c:30:98:0d:7b:86:78:ea:bf:08:19:
21:54:15:03:fe:a9:e4:16:47:a5:be:32:8d:18:98:
d2:73:61:5d:65:b9:80:67:e7:4b:91:ed:d6:37:d7:
b6:d9:3c:59:e6:c7:fa:68:3e:55:33:83:25:d1:66:
75:42:c8:24:f1:75:bd:fc:00:ea:4b:14:01:05:8b:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:5F:8C:A7:17:78:98:A4:5B:EB:A0:90:C9:6A:E6:47:D7:21:11
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHBfjKcXeJikW-ugkMlq5kfXIRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0-193.124.8.255
193.124.94.0/24
194.58.43.0/24
194.58.58.0/24
194.58.67.0/24
194.58.155.0/24
194.87.3.0/24
194.87.6.0/23
194.87.34.0/24
194.87.36.0/24
194.87.42.0/24
194.87.53.0/24
194.87.59.0/24
194.87.63.0/24
194.87.75.0/24
194.87.116.0/23
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.152.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.176.0/23
194.87.179.0-194.87.183.255
194.87.185.0/24
194.87.192.0/22
194.87.211.0-194.87.212.255
194.87.229.0/24
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.57.0-195.133.58.255
195.133.72.0/24
195.133.80.0/24
195.133.82.0/24
195.133.92.0/23
195.133.95.0/24
212.192.241.0-212.192.242.255
212.192.247.0/24
212.192.249.0/24
212.192.251.0/24
212.193.0.0/24
212.193.10.0/24
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
85:da:45:59:b0:bc:86:c6:98:c3:8f:27:dc:f1:66:07:f1:9c:
91:57:8e:89:69:4e:38:73:3c:48:5d:ac:3b:de:1a:fc:9a:7e:
3b:cb:e2:c5:c1:00:80:6e:6a:18:f6:87:27:c7:13:4b:4a:f9:
e9:a7:19:bd:a2:84:07:40:73:19:16:9b:f3:b0:ad:59:7b:a6:
c2:b2:b9:c1:f9:95:08:62:31:31:75:40:7e:95:9d:d2:7f:7f:
c9:37:0e:59:2a:b5:2f:25:2e:c9:59:0c:31:31:c4:5f:11:8c:
3e:8f:d6:7c:12:9f:82:01:75:f5:be:3f:02:67:c8:cb:69:11:
83:1f:1a:6f:0a:90:d5:35:e3:08:51:cc:22:1b:89:46:24:48:
16:0e:61:64:14:29:82:bd:f4:3a:d1:24:61:3b:b7:8b:06:e5:
92:70:8e:0f:91:d8:42:df:4f:3a:03:e5:f8:2d:da:9c:87:40:
65:7d:6b:d7:49:0b:a9:a3:ee:06:fc:76:56:02:9c:10:e8:a6:
7b:21:14:ff:82:fa:c7:c6:06:63:fd:15:84:9d:bd:16:b5:96:
46:f3:b9:68:d5:77:d1:cc:7d:bd:4e:4f:3f:1b:e0:ec:4c:56:
ab:3c:57:d5:17:e1:4e:20:d5:cd:7e:f9:8d:dc:fe:c8:ce:21:
b3:62:73:2f
-----BEGIN CERTIFICATE-----
MIIGvTCCBaWgAwIBAgISAZ8v43cOIafY7sDpAgJYm2tLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNzA1MDEyNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzcwNWY4Y2E3MTc3ODk4YTQ1YmViYTA5MGM5NmFlNjQ3ZDcyMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVRbnkL0EgTA+3biXitbTGMXJpf+
RcSt3/7RWuL9B73Eg1JJYbG/QcToU/uEqT+rOVvt6SZUiqIeXKIYxh7HdXGFNEUE
uwmUImm8MTplEBAmbbPxZxdErZv2mQt0xEEu8VRtuW/q5UvMD6bI7S4FVdiaqqO7
sRaEVViEJoU+fgMO5KsaRMCSKOPnjA+d6t218jTgyHkqfX0+zMcP2jPsfpZ8YeLW
3HVciN1HUiyAFJLcqs8NXB0BDDCYDXuGeOq/CBkhVBUD/qnkFkelvjKNGJjSc2Fd
ZbmAZ+dLke3WN9e22TxZ5sf6aD5VM4Ml0WZ1Qsgk8XW9/ADqSxQBBYsEQwIDAQAB
o4IDyTCCA8UwHQYDVR0OBBYEFGxwX4ynF3iYpFvroJDJauZH1yERMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYkhCZmpLY1hlSmlrVy11Z2tNbHE1a2ZYSVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB3QYIKwYBBQUHAQcBAf8EggHMMIIByDCCAa4EAgABMIIB
pgMEALlICgMEAMB8vgMEAMF8BTAMAwQAwXwHAwQAwXwIAwQAwXxeAwQAwjorAwQA
wjo6AwQAwjpDAwQAwjqbAwQAwlcDAwQBwlcGAwQAwlciAwQAwlckAwQAwlcqAwQA
wlc1AwQAwlc7AwQAwlc/AwQAwldLAwQBwld0MAwDBADCV3cDBADCV3gDBADCV3oD
BADCV4gDBADCV5gDBADCV6ADBADCV6MwDAMEAMJXpQMEAMJXpgMEAcJXsDAMAwQA
wlezAwQDwlewAwQAwle5AwQCwlfAMAwDBADCV9MDBADCV9QDBADCV+UDBADCV+cw
DAMEAMKHFwMEAMKHGDAMAwQAwzo3AwQAwzo4AwQAwzo7AwQAwzo+AwQAw4UMAwQA
w4UTAwQBw4UYAwQAw4UdAwQBw4UoAwQBw4UyMAwDBADDhTkDBADDhToDBADDhUgD
BADDhVADBADDhVIDBAHDhVwDBADDhV8wDAMEANTA8QMEANTA8gMEANTA9wMEANTA
+QMEANTA+wMEANTBAAMEANTBCgMEANTBDzAMAwQB1MEaAwQA1MEcMBQEAgACMA4D
BQMqAVfAAwUDKgz/QDANBgkqhkiG9w0BAQsFAAOCAQEAhdpFWbC8hsaYw48n3PFm
B/GckVeOiWlOOHM8SF2sO94a/Jp+O8vixcEAgG5qGPaHJ8cTS0r56acZvaKEB0Bz
GRab87CtWXumwrK5wfmVCGIxMXVAfpWd0n9/yTcOWSq1LyUuyVkMMTHEXxGMPo/W
fBKfggF19b4/AmfIy2kRgx8abwqQ1TXjCFHMIhuJRiRIFg5hZBQpgr30OtEkYTu3
iwblknCOD5HYQt9POgPl+C3anIdAZX1r10kLqaPuBvx2VgKcEOimeyEU/4L6x8YG
Y/0VhJ29FrWWRvO5aNV30cx9vU5PPxvg7ExWqzxX1RfhTiDVzX75jdz+yM4hs2Jz
Lw==
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:26 2026 by rpki-client