Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/v4bpHyawzRWnm8RqdJExgbPJfr0.roa
File: v4bpHyawzRWnm8RqdJExgbPJfr0.roa (raw, json)
Hash identifier: sC7/VOkCbRGWzAVmIlTymUCvG6bGOihVG6LZ6ZpxHR4=
Subject key identifier: BF:86:E9:1F:26:B0:CD:15:A7:9B:C4:6A:74:91:31:81:B3:C9:7E:BD
Certificate issuer: /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial: 019FF49DD1668F6FA417D56795C75237B02D
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/v4bpHyawzRWnm8RqdJExgbPJfr0.roa
Signing time: Wed 12 Aug 2026 06:16:51 +0000
ROA not before: Wed 12 Aug 2026 06:16:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
46.189.116.0/24 maxlen: 24
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.144.37.0/24 maxlen: 24
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/19 maxlen: 19
83.135.128.0/19 maxlen: 22
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.192.0/19 maxlen: 19
83.135.224.0/22 maxlen: 22
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.192.0/22 maxlen: 22
87.123.196.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.32.0/20 maxlen: 20
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.192.0/21 maxlen: 21
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/20 maxlen: 20
89.246.160.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.216.0/22 maxlen: 22
89.247.228.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.240.0/21 maxlen: 21
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.64.0/18 maxlen: 23
94.134.128.0/17 maxlen: 22
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
153.60.32.0/19 maxlen: 19
153.60.192.0/18 maxlen: 18
153.76.32.0/19 maxlen: 19
167.104.0.0/19 maxlen: 19
167.104.128.0/19 maxlen: 19
167.104.224.0/19 maxlen: 19
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
202.89.144.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:9d:d1:66:8f:6f:a4:17:d5:67:95:c7:52:37:b0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Validity
Not Before: Aug 12 06:16:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf86e91f26b0cd15a79bc46a74913181b3c97ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:38:d2:f2:66:f9:7d:1f:fd:a3:22:3c:5b:
b0:bb:80:fc:f7:18:a9:0d:93:ef:45:e2:66:08:db:
a7:01:14:ae:ae:ad:35:63:a2:02:42:ce:49:5d:dd:
1e:99:52:f7:43:10:a8:b0:12:d8:ee:a9:1f:63:83:
0f:17:86:b2:79:b5:b4:01:e9:ae:aa:c1:b3:75:e8:
b6:ea:ce:a5:1c:83:18:e1:32:7a:e6:b7:64:2d:f1:
ed:bc:79:97:43:f4:ce:c3:a4:83:9e:19:0c:17:b9:
19:31:8d:0c:28:4d:c3:89:a6:18:4a:3f:e0:7b:1b:
cd:86:f5:01:42:c3:6c:9a:c9:9a:d0:3e:71:b7:69:
46:51:c7:10:6a:e7:88:dd:2e:26:c1:20:9a:7b:27:
db:fe:55:94:1a:0a:16:fa:80:e6:0b:55:a7:64:b9:
fb:29:d2:d6:f6:a3:47:a7:44:40:51:5f:73:cb:06:
8f:6a:d0:6d:f5:cd:15:30:6f:3b:bf:95:5a:32:f7:
54:30:a7:be:a8:31:3e:c3:69:d9:30:b8:f1:86:4f:
60:e9:57:d1:c2:02:e9:cf:9d:5e:2c:69:33:64:7a:
88:11:11:11:62:6a:15:fe:e7:2a:a5:6e:ef:c2:91:
a6:ac:67:b9:9b:f6:7a:f8:de:23:12:96:80:06:bd:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:E9:1F:26:B0:CD:15:A7:9B:C4:6A:74:91:31:81:B3:C9:7E:BD
X509v3 Authority Key Identifier:
keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/v4bpHyawzRWnm8RqdJExgbPJfr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
153.60.32.0/19
153.60.192.0/18
153.76.32.0/19
167.104.0.0/19
167.104.128.0/19
167.104.224.0/19
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
18:61:5c:fe:40:23:9c:f5:8c:55:e1:6e:61:82:49:1b:34:cb:
fa:24:b5:b1:75:67:42:1b:5d:6a:26:6e:21:ac:80:7f:4c:53:
89:19:23:5f:d5:7d:9a:03:17:82:0f:9d:7a:d1:ef:15:b2:d8:
6b:7f:ae:ed:a2:21:de:73:32:f5:5d:bc:92:bd:22:0c:9e:d9:
32:9e:e0:ac:ba:28:90:a4:94:42:4c:ce:70:33:1f:ab:9b:a7:
22:25:b5:19:2a:15:f7:19:85:9e:5b:13:bd:eb:c2:66:07:63:
05:00:3f:62:51:d7:fc:68:7b:e6:31:2a:07:86:84:5c:b7:22:
59:f4:49:d1:b9:bd:c0:59:5b:7f:c1:7d:b1:27:6a:e2:24:5e:
b0:20:4e:f8:77:3d:80:c6:49:62:93:ac:20:b1:2d:a6:6a:de:
6e:bd:9f:96:aa:47:4a:7b:67:c0:68:a2:7f:ae:b7:99:81:9d:
f0:fe:22:61:dd:80:a1:0c:b4:2b:fa:71:1a:fa:11:37:34:dc:
5f:b9:22:8e:38:75:f2:8d:fd:01:b4:45:34:17:33:f4:fc:1d:
6f:d4:50:b8:9e:6b:86:84:64:2e:cc:a9:0e:60:95:ff:fb:86:
0b:cd:5e:8e:3d:44:46:88:47:fb:b2:28:bf:da:cc:90:0f:13:
5b:06:2b:43
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISAZ/0ndFmj2+kF9VnlcdSN7AtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWZlMmE2NDk2ZDJhNDM5YWE0ZjdiMjFkNjk5NmJiZmJi
ZjBiMzUwHhcNMjYwODEyMDYxNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjg2ZTkxZjI2YjBjZDE1YTc5YmM0NmE3NDkxMzE4MWIzYzk3ZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeU40vJm+X0f/aMiPFuwu4D89xip
DZPvReJmCNunARSurq01Y6ICQs5JXd0emVL3QxCosBLY7qkfY4MPF4ayebW0Aemu
qsGzdei26s6lHIMY4TJ65rdkLfHtvHmXQ/TOw6SDnhkMF7kZMY0MKE3DiaYYSj/g
exvNhvUBQsNsmsma0D5xt2lGUccQaueI3S4mwSCaeyfb/lWUGgoW+oDmC1WnZLn7
KdLW9qNHp0RAUV9zywaPatBt9c0VMG87v5VaMvdUMKe+qDE+w2nZMLjxhk9g6VfR
wgLpz51eLGkzZHqIERERYmoV/ucqpW7vwpGmrGe5m/Z6+N4jEpaABr0q4wIDAQAB
o4IDezCCA3cwHQYDVR0OBBYEFL+G6R8msM0Vp5vEanSRMYGzyX69MB8GA1UdIwQY
MBaAFL5f4qZJbSpDmqT3sh1plrv7vws1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxfaXBrbHRLa09hcFBleUhXbVd1X3VfQ3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvdjRicEh5YXd6UldubThScWRKRXhnYlBKZnIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvdmxfaXBrbHRLa09hcFBleUhXbVd1X3VfQ3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBjwYIKwYBBQUHAQcBAf8EggF+MIIBejCCAUsEAgABMIIB
QwMEBhgogAMDAC6OAwQHLr0AAwQFPQiAAwQFPkhAAwMAPtYDBAU+2SADBAU+3AAD
BARQ8cADBAVQ8qADBAVSd6ADBAZSjAADBAVSkCADBAVSkQADBAVSwmADBAdSz4AD
AwBThwMEBVQTwAMDAVd6AwMAWIIDBAdZG4ADBANZz8gDAwJZ9AMDAV6GAwQHaJcA
AwQGjzpAAwQFmTwgAwQGmTzAAwQFmUwgAwQFp2gAAwQFp2iAAwQFp2jgAwQBuWzk
AwQCuYBEAwQAwdsPAwQEw6fQAwQFw8ogAwQFw+JgAwQFw+KgAwQEykeAAwQEylmQ
AwQF1AeAAwQF1FDgAwQF1F0AAwQF1MwAAwQG1R7AAwQF1YogAwQF1YuAAwQF1baA
AwQF2QkgAwQF2QlgAwQE2RvAAwQE2UEQAwQE2U6AAwQE2cdAMCkEAgACMCMDBQAg
AQewAwUAIAEJ6AMFACABFDgDBQAgARa4AwUDKgAPuDANBgkqhkiG9w0BAQsFAAOC
AQEAGGFc/kAjnPWMVeFuYYJJGzTL+iS1sXVnQhtdaiZuIayAf0xTiRkjX9V9mgMX
gg+detHvFbLYa3+u7aIh3nMy9V28kr0iDJ7ZMp7grLookKSUQkzOcDMfq5unIiW1
GSoV9xmFnlsTvevCZgdjBQA/YlHX/Gh75jEqB4aEXLciWfRJ0bm9wFlbf8F9sSdq
4iResCBO+Hc9gMZJYpOsILEtpmrebr2flqpHSntnwGiif663mYGd8P4iYd2AoQy0
K/pxGvoRNzTcX7kijjh18o39AbRFNBcz9Pwdb9RQuJ5rhoRkLsypDmCV//uGC81e
jj1ERohH+7Iov9rMkA8TWwYrQw==
-----END CERTIFICATE-----
Generated at Fri Sep 18 14:36:32 2026 by rpki-client