Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/bhcb_qBHRZj6EL8EdyfRALgtejA.roa
File: bhcb_qBHRZj6EL8EdyfRALgtejA.roa (raw, json)
Hash identifier: D9lqn4IcBQAznodDRVODSeIF2q0ScXhC7fmch1+xADw=
Subject key identifier: 6E:17:1B:FE:A0:47:45:98:FA:10:BF:04:77:27:D1:00:B8:2D:7A:30
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 019F22635780759F46D3C359B26C215B4820
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/bhcb_qBHRZj6EL8EdyfRALgtejA.roa
Signing time: Thu 02 Jul 2026 10:32:43 +0000
ROA not before: Thu 02 Jul 2026 10:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
46.189.116.0/24 maxlen: 24
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.144.37.0/24 maxlen: 24
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/19 maxlen: 19
83.135.128.0/19 maxlen: 22
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/19 maxlen: 19
83.135.224.0/22 maxlen: 22
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.192.0/22 maxlen: 22
87.123.196.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.32.0/20 maxlen: 20
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.192.0/21 maxlen: 21
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/20 maxlen: 20
89.246.160.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.216.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.240.0/21 maxlen: 21
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.64.0/18 maxlen: 23
94.134.128.0/17 maxlen: 23
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
153.60.32.0/19 maxlen: 19
153.60.192.0/18 maxlen: 18
153.76.32.0/19 maxlen: 19
167.104.0.0/19 maxlen: 19
167.104.128.0/19 maxlen: 19
167.104.224.0/19 maxlen: 19
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
202.89.144.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:63:57:80:75:9f:46:d3:c3:59:b2:6c:21:5b:48:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Jul 2 10:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e171bfea0474598fa10bf047727d100b82d7a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:65:7f:0e:c0:8b:10:d3:e7:9d:aa:0d:10:
ec:78:a8:e6:37:c5:1f:0f:6c:b9:01:33:8c:71:2c:
11:f4:05:3f:f1:2a:19:26:e4:ea:48:e1:8a:8a:1d:
30:cc:5e:70:10:71:46:6d:3c:f3:02:be:0c:cd:19:
0a:86:2f:2a:78:43:1a:34:30:81:e5:ad:63:07:3e:
b9:be:bd:1c:d6:44:86:4e:88:ba:d1:88:e8:de:8d:
8e:1e:38:28:ff:47:cd:82:d7:d7:f4:29:b0:b1:35:
8f:56:15:21:e4:84:e6:4e:91:1e:17:79:5a:8e:b1:
c5:55:42:30:cf:4f:2c:f3:a7:7b:ae:02:f3:3f:28:
90:5d:5e:d6:04:8b:b4:05:bf:61:54:e7:0b:75:d7:
d5:7f:c9:2f:87:cd:f5:2c:bb:17:94:78:cf:7f:35:
64:eb:a0:5c:c7:fb:26:40:4c:ab:b7:6a:fc:af:10:
e0:da:96:08:7d:89:49:f7:8b:f7:77:58:17:0c:de:
bb:aa:47:18:e9:3e:2f:ea:cd:a9:46:9d:09:0f:fe:
21:30:ac:fc:d5:4b:56:88:f5:fc:f6:1d:1e:65:51:
33:a9:c6:86:2a:dd:10:3c:4d:c3:8a:5b:e9:04:a7:
90:54:f1:78:21:6d:5a:7b:ef:ad:c8:f1:19:ba:1d:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:17:1B:FE:A0:47:45:98:FA:10:BF:04:77:27:D1:00:B8:2D:7A:30
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/bhcb_qBHRZj6EL8EdyfRALgtejA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
153.60.32.0/19
153.60.192.0/18
153.76.32.0/19
167.104.0.0/19
167.104.128.0/19
167.104.224.0/19
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
09:79:e1:58:bd:e4:ac:7d:e8:62:3c:aa:47:a3:1f:03:d4:66:
04:32:5b:e3:f8:dd:9d:b9:a6:56:0d:10:5a:f8:8d:ee:a4:e9:
a3:b0:7e:9d:cd:28:f4:4e:d2:5e:bc:3d:81:b0:83:c0:05:d2:
ef:60:b2:a7:a0:f0:c3:3e:0e:36:78:d5:d7:f3:e3:72:42:e8:
42:23:0f:98:67:49:57:cd:3b:97:f3:1f:71:22:2e:76:fd:8d:
8c:39:d3:b5:38:4a:69:ca:f1:c9:13:f6:10:2f:b3:a3:e8:96:
59:25:8e:6e:36:71:65:10:8e:ab:3f:e2:ee:ad:a4:f8:b2:f1:
ee:7a:3d:8e:43:86:13:ab:a7:10:ae:ce:18:25:3f:02:d9:7a:
39:3a:19:e5:64:81:e8:2b:13:78:6f:51:da:98:a9:9f:2c:ae:
1d:18:95:26:37:a3:e4:43:d2:18:32:e4:61:39:af:28:67:17:
7d:cd:d6:a0:ed:01:c8:dc:11:d8:bc:09:88:3e:25:bd:52:7f:
7c:cf:c6:26:de:e6:cf:74:df:fb:d1:6f:a1:64:f0:2f:01:e2:
d7:fe:c0:bb:d5:a2:43:e4:aa:99:61:8b:15:a8:fc:8c:cf:8a:
9e:d2:73:39:6a:f1:b9:9d:48:d7:c7:b6:da:41:b6:0a:69:dd:
70:c5:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:36 2026 by rpki-client