Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BpdwUCdXTGETLrOo2fdAyTxHkaE.roa
File: BpdwUCdXTGETLrOo2fdAyTxHkaE.roa (raw, json)
Hash identifier: Ese+//NgDIj91pzB6jsn62hlnX6K0Av4+3KyTS4//gQ=
Subject key identifier: 06:97:70:50:27:57:4C:61:13:2E:B3:A8:D9:F7:40:C9:3C:47:91:A1
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019CB85A3BC9FBD33A22016524BCE49ABCB2
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BpdwUCdXTGETLrOo2fdAyTxHkaE.roa
Signing time: Wed 04 Mar 2026 10:17:27 +0000
ROA not before: Wed 04 Mar 2026 10:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57169
IP address blocks: 5.180.114.0/24 maxlen: 24
5.187.33.0/24 maxlen: 24
37.235.48.0/20 maxlen: 20
37.235.48.0/24 maxlen: 24
37.235.50.0/23 maxlen: 23
37.235.50.0/24 maxlen: 24
37.235.52.0/24 maxlen: 24
37.235.56.0/24 maxlen: 24
37.235.57.0/24 maxlen: 24
37.235.58.0/24 maxlen: 24
37.235.59.0/24 maxlen: 24
37.235.60.0/24 maxlen: 24
37.235.61.0/24 maxlen: 24
37.235.62.0/24 maxlen: 24
37.235.63.0/24 maxlen: 24
45.153.125.0/24 maxlen: 24
46.183.187.0/24 maxlen: 24
83.172.134.0/24 maxlen: 24
83.172.135.0/24 maxlen: 24
83.172.150.0/24 maxlen: 24
83.172.151.0/24 maxlen: 24
83.172.153.0/24 maxlen: 24
83.172.169.0/24 maxlen: 24
83.243.120.0/24 maxlen: 24
83.243.122.0/24 maxlen: 24
83.243.123.0/24 maxlen: 24
84.247.61.0/24 maxlen: 24
86.106.119.0/24 maxlen: 24
89.31.123.0/24 maxlen: 24
89.40.105.0/24 maxlen: 24
89.46.235.0/24 maxlen: 24
89.46.238.0/24 maxlen: 24
91.132.94.0/24 maxlen: 24
91.227.204.0/23 maxlen: 23
91.227.204.0/24 maxlen: 24
91.227.205.0/24 maxlen: 24
92.243.64.0/24 maxlen: 24
92.243.66.0/24 maxlen: 24
95.156.204.0/24 maxlen: 24
95.156.205.0/24 maxlen: 24
103.57.249.0/24 maxlen: 24
103.57.250.0/24 maxlen: 24
134.255.210.0/24 maxlen: 24
149.154.152.0/24 maxlen: 24
149.154.153.0/24 maxlen: 24
149.154.154.0/24 maxlen: 24
149.154.155.0/24 maxlen: 24
149.154.156.0/24 maxlen: 24
151.236.0.0/19 maxlen: 19
151.236.0.0/24 maxlen: 24
151.236.1.0/24 maxlen: 24
151.236.2.0/24 maxlen: 24
151.236.3.0/24 maxlen: 24
151.236.4.0/24 maxlen: 24
151.236.5.0/24 maxlen: 24
151.236.6.0/24 maxlen: 24
151.236.7.0/24 maxlen: 24
151.236.8.0/24 maxlen: 24
151.236.9.0/24 maxlen: 24
151.236.10.0/24 maxlen: 24
151.236.11.0/24 maxlen: 24
151.236.12.0/24 maxlen: 24
151.236.13.0/24 maxlen: 24
151.236.14.0/24 maxlen: 24
151.236.16.0/24 maxlen: 24
151.236.20.0/24 maxlen: 24
151.236.25.0/24 maxlen: 24
151.236.26.0/23 maxlen: 23
151.236.28.0/24 maxlen: 24
151.236.30.0/24 maxlen: 24
158.255.209.0/24 maxlen: 24
158.255.211.0/24 maxlen: 24
158.255.212.0/24 maxlen: 24
176.126.99.0/24 maxlen: 24
185.26.236.0/24 maxlen: 24
185.26.237.0/24 maxlen: 24
185.26.238.0/24 maxlen: 24
185.76.79.0/24 maxlen: 24
185.122.184.0/24 maxlen: 24
185.193.48.0/24 maxlen: 24
185.193.51.0/24 maxlen: 24
185.195.65.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.3.0/24 maxlen: 24
188.190.6.0/24 maxlen: 24
188.190.7.0/24 maxlen: 24
188.190.8.0/24 maxlen: 24
188.190.9.0/24 maxlen: 24
188.190.10.0/24 maxlen: 24
188.190.11.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.211.166.0/24 maxlen: 24
188.214.33.0/24 maxlen: 24
188.214.34.0/24 maxlen: 24
188.214.38.0/24 maxlen: 24
188.214.39.0/24 maxlen: 24
193.3.55.0/24 maxlen: 24
213.111.177.0/24 maxlen: 24
213.111.180.0/24 maxlen: 24
213.111.182.0/24 maxlen: 24
213.111.183.0/24 maxlen: 24
213.111.184.0/24 maxlen: 24
213.111.186.0/24 maxlen: 24
213.111.187.0/24 maxlen: 24
213.111.188.0/24 maxlen: 24
213.111.191.0/24 maxlen: 24
213.183.54.0/24 maxlen: 24
213.183.55.0/24 maxlen: 24
213.183.56.0/24 maxlen: 24
213.183.57.0/24 maxlen: 24
2a03:f80:7::/48 maxlen: 48
2a03:f80:31::/48 maxlen: 48
2a03:f80:32::/48 maxlen: 48
2a03:f80:48::/48 maxlen: 48
2a03:f80:56::/48 maxlen: 48
2a03:f80:57::/48 maxlen: 48
2a03:f80:61::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:354::/48 maxlen: 48
2a03:f80:357::/48 maxlen: 48
2a03:f80:358::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:370::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:491::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:ad15::/48 maxlen: 48
2a03:f80:ed15::/48 maxlen: 48
2a03:f80:ed16::/48 maxlen: 48
2a03:f80:ed17::/48 maxlen: 48
2a03:f80:ed31::/48 maxlen: 48
2a03:f80:ed51::/48 maxlen: 48
2a03:f80:ed91::/48 maxlen: 48
2a03:f82:abcd::/48 maxlen: 48
2a03:f82:abcd:43::/64 maxlen: 64
2a03:f87:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:5a:3b:c9:fb:d3:3a:22:01:65:24:bc:e4:9a:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Mar 4 10:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0697705027574c61132eb3a8d9f740c93c4791a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:ee:88:6e:0e:94:a5:b2:d8:0f:12:28:f3:
2d:8c:dc:7a:c8:e7:83:30:2f:c9:7d:fb:dd:18:54:
d9:b4:db:9a:7b:89:58:0a:7f:f7:22:a6:2d:ed:7d:
27:e0:fd:1f:96:58:60:61:40:3c:bc:d2:92:71:9f:
c7:be:f8:8c:35:49:c8:55:ae:bb:35:f5:67:53:d8:
64:03:d0:e8:e7:c1:e3:5a:80:b0:8b:8f:bd:b5:84:
91:50:6d:b7:af:fb:a7:eb:23:19:3f:74:08:fb:e8:
89:02:b4:94:90:83:81:13:a0:67:ed:3e:f5:e8:fe:
65:02:39:6a:5d:70:1e:e6:8a:67:a9:8e:39:72:eb:
6d:7b:e4:08:91:8f:6a:c5:65:5f:f4:e4:54:85:8a:
a8:47:72:ad:09:e1:56:88:5c:95:c2:9a:03:0c:de:
e1:3e:f2:c5:06:58:b0:16:bc:96:fb:73:51:50:78:
09:fc:f2:14:53:34:40:50:8d:2e:40:d2:9d:6e:22:
bb:36:b3:ab:e5:6f:cb:0e:5b:42:d3:46:28:80:40:
e3:09:ae:0e:19:68:7c:24:a0:e8:49:f8:0f:c7:e1:
c9:34:f4:d9:f6:70:a1:8e:f3:d5:e9:51:83:bc:7e:
c5:d9:67:ec:4c:3a:4a:aa:b7:d6:78:fd:0d:8f:1d:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:97:70:50:27:57:4C:61:13:2E:B3:A8:D9:F7:40:C9:3C:47:91:A1
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BpdwUCdXTGETLrOo2fdAyTxHkaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.114.0/24
5.187.33.0/24
37.235.48.0/20
45.153.125.0/24
46.183.187.0/24
83.172.134.0/23
83.172.150.0/23
83.172.153.0/24
83.172.169.0/24
83.243.120.0/24
83.243.122.0/23
84.247.61.0/24
86.106.119.0/24
89.31.123.0/24
89.40.105.0/24
89.46.235.0/24
89.46.238.0/24
91.132.94.0/24
91.227.204.0/23
92.243.64.0/24
92.243.66.0/24
95.156.204.0/23
103.57.249.0-103.57.250.255
134.255.210.0/24
149.154.152.0-149.154.156.255
151.236.0.0/19
158.255.209.0/24
158.255.211.0-158.255.212.255
176.126.99.0/24
185.26.236.0-185.26.238.255
185.76.79.0/24
185.122.184.0/24
185.193.48.0/24
185.193.51.0/24
185.195.65.0/24
188.190.1.0/24
188.190.3.0/24
188.190.6.0-188.190.11.255
188.190.14.0-188.190.17.255
188.190.19.0-188.190.22.255
188.190.26.0-188.190.29.255
188.211.166.0/24
188.214.33.0-188.214.34.255
188.214.38.0/23
193.3.55.0/24
213.111.177.0/24
213.111.180.0/24
213.111.182.0-213.111.184.255
213.111.186.0-213.111.188.255
213.111.191.0/24
213.183.54.0-213.183.57.255
IPv6:
2a03:f80:7::/48
2a03:f80:31::-2a03:f80:32:ffff:ffff:ffff:ffff:ffff
2a03:f80:48::/48
2a03:f80:56::/47
2a03:f80:61::/48
2a03:f80:70::/48
2a03:f80:354::/48
2a03:f80:357::-2a03:f80:359:ffff:ffff:ffff:ffff:ffff
2a03:f80:370::/47
2a03:f80:491::/48
2a03:f80:3991::/48
2a03:f80:ad15::/48
2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff
2a03:f80:ed31::/48
2a03:f80:ed51::/48
2a03:f80:ed91::/48
2a03:f82:abcd::/48
2a03:f87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
2a:43:1f:0b:94:f7:14:86:cf:b4:d7:ff:12:c6:81:61:40:5a:
69:20:26:e1:fc:08:52:68:c9:3f:bd:cd:a3:9f:cf:05:5b:e4:
ac:a5:01:b0:6a:0c:9e:16:f2:68:72:00:ec:61:95:fd:66:cb:
7c:53:8a:a0:a0:ae:b7:28:f2:cb:c1:49:03:16:62:d3:67:bd:
e5:0e:c2:ee:35:c0:72:be:fd:64:49:d9:f9:24:4c:ae:f3:b5:
44:ea:c7:a0:7e:8d:3c:1e:f9:d4:25:f7:47:fb:11:9d:6c:b0:
d1:97:61:53:d0:9c:98:8f:e9:e6:46:c9:8a:61:54:30:72:e5:
0d:37:17:d4:b8:a8:df:75:b0:0a:14:1d:61:c4:82:17:46:1e:
9d:8a:b6:bb:16:29:a8:b4:d3:9a:88:b9:4e:09:1a:a3:2b:f5:
e3:3d:35:68:eb:29:ef:0a:dd:1d:25:a7:94:8e:a1:c6:e8:59:
6e:e6:c8:98:21:ea:9d:70:e1:15:7b:07:3d:d9:5b:75:3c:81:
56:cb:03:fb:77:2f:e4:8c:bc:36:3e:e5:59:06:66:8b:f6:14:
34:35:4c:c3:ee:9d:36:db:d7:da:38:00:76:21:13:67:f5:21:
52:8e:df:82:9e:9c:9a:88:5f:10:7f:ee:dd:4b:2b:25:08:25:
68:82:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 01:55:20 2026 by rpki-client