Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bcrTa_CtBXkWnsJA4pPVLZVrdVs.roa
File: bcrTa_CtBXkWnsJA4pPVLZVrdVs.roa (raw, json)
Hash identifier: DRWhMYCgQYpFn8R4BgQWD4qIY7P7DCPJJNALIplmb/Y=
Subject key identifier: 6D:CA:D3:6B:F0:AD:05:79:16:9E:C2:40:E2:93:D5:2D:95:6B:75:5B
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A0541B54A460365E40418E5FF91FB0473
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bcrTa_CtBXkWnsJA4pPVLZVrdVs.roa
Signing time: Tue 21 Oct 2025 05:33:03 +0000
ROA not before: Tue 21 Oct 2025 05:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 46.33.64.0/19 maxlen: 24
62.41.0.0/20 maxlen: 24
62.41.16.0/21 maxlen: 24
62.41.24.0/22 maxlen: 24
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.41.56.0/21 maxlen: 24
62.41.64.0/20 maxlen: 24
62.41.80.0/22 maxlen: 24
62.41.84.0/23 maxlen: 24
62.41.102.0/24 maxlen: 24
62.41.160.0/24 maxlen: 24
62.50.128.0/19 maxlen: 19
62.132.0.0/22 maxlen: 22
62.132.16.0/22 maxlen: 22
62.132.24.0/23 maxlen: 23
62.132.28.0/24 maxlen: 24
62.132.42.0/23 maxlen: 23
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
62.132.132.0/23 maxlen: 23
77.67.0.0/17 maxlen: 24
77.77.128.0/18 maxlen: 24
87.119.64.0/18 maxlen: 24
89.149.128.0/18 maxlen: 24
92.71.0.0/17 maxlen: 17
92.71.128.0/18 maxlen: 18
134.222.0.0/16 maxlen: 16
135.196.48.0/21 maxlen: 24
135.196.228.0/23 maxlen: 24
135.196.232.0/23 maxlen: 24
135.196.238.0/23 maxlen: 24
141.136.96.0/20 maxlen: 20
185.160.40.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
192.54.104.0/24 maxlen: 24
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
192.67.196.0/24 maxlen: 24
192.129.32.0/23 maxlen: 23
192.129.36.0/24 maxlen: 24
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
192.129.56.0/23 maxlen: 24
193.141.0.0/23 maxlen: 23
193.141.2.0/24 maxlen: 24
193.141.40.0/22 maxlen: 22
193.141.44.0/23 maxlen: 23
193.141.140.0/23 maxlen: 23
193.242.80.0/20 maxlen: 20
194.41.62.0/24 maxlen: 24
194.45.4.0/23 maxlen: 23
194.45.12.0/23 maxlen: 23
194.45.47.0/24 maxlen: 24
194.45.98.0/23 maxlen: 23
194.45.182.0/23 maxlen: 23
194.120.0.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
194.120.112.0/22 maxlen: 22
194.120.120.0/22 maxlen: 22
194.121.52.0/22 maxlen: 22
194.121.104.0/23 maxlen: 23
194.121.123.0/24 maxlen: 24
194.121.203.0/24 maxlen: 24
194.121.220.0/22 maxlen: 22
194.122.76.0/22 maxlen: 22
194.122.80.0/21 maxlen: 21
194.122.120.0/21 maxlen: 21
194.122.224.0/20 maxlen: 20
194.122.248.0/22 maxlen: 22
194.123.122.0/24 maxlen: 24
194.123.164.0/24 maxlen: 24
195.143.0.0/16 maxlen: 24
212.0.224.0/19 maxlen: 19
212.1.0.0/19 maxlen: 19
212.14.64.0/19 maxlen: 19
212.27.160.0/19 maxlen: 19
212.56.0.0/19 maxlen: 19
212.81.64.0/18 maxlen: 18
212.115.128.0/18 maxlen: 24
212.189.0.0/17 maxlen: 17
212.221.0.0/17 maxlen: 24
212.222.0.0/16 maxlen: 24
213.200.64.0/18 maxlen: 18
213.251.0.0/18 maxlen: 24
213.254.192.0/18 maxlen: 24
217.114.112.0/20 maxlen: 20
217.117.160.0/20 maxlen: 20
217.118.112.0/20 maxlen: 20
217.195.224.0/19 maxlen: 19
2001:668::/29 maxlen: 64
2001:680::/32 maxlen: 32
2001:680:12::/48 maxlen: 48
2001:680:16::/48 maxlen: 48
2001:680:19::/48 maxlen: 48
2001:680:20::/48 maxlen: 48
2a00:1750::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:41:b5:4a:46:03:65:e4:04:18:e5:ff:91:fb:04:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 21 05:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dcad36bf0ad0579169ec240e293d52d956b755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:8b:15:ad:a4:10:24:1a:90:8d:e6:33:db:
02:46:4d:4b:b8:69:0b:bf:8e:79:d8:46:bf:21:63:
6c:e1:eb:0b:65:ec:cf:fc:58:b0:6a:ce:bc:40:89:
53:32:3f:84:48:bf:cd:d4:80:90:79:37:56:53:a8:
80:24:aa:4a:6f:10:c1:69:43:ce:08:10:36:3f:0d:
49:c7:0b:af:82:b8:1a:0f:55:02:da:44:f9:33:97:
3f:a7:2b:df:36:f1:5f:95:0a:8a:5b:e9:da:dc:0a:
bf:6c:60:e4:a8:c0:89:f5:7f:eb:9f:99:55:8a:89:
bb:c7:9d:7c:bc:1a:04:68:88:4a:d8:d9:92:f9:0b:
da:af:1f:ff:85:31:c5:18:67:db:f3:68:e5:d5:7b:
05:bb:3d:ab:fc:c0:b6:76:b7:40:10:03:fb:e8:6f:
3d:3d:fa:80:43:ea:37:df:16:a3:1b:67:57:4c:f0:
60:c8:1f:a9:5c:68:b4:5f:a0:ca:be:4f:25:3b:c6:
a4:19:e5:ad:1f:68:65:50:01:63:1c:75:9a:a9:55:
53:85:ef:42:6e:d6:a5:8c:f5:64:d2:be:f7:e4:93:
b9:d6:3d:6e:e4:00:f0:03:f4:64:3f:dd:2c:48:42:
1a:19:d0:eb:10:66:e2:d8:f4:9f:b3:cf:d8:73:39:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CA:D3:6B:F0:AD:05:79:16:9E:C2:40:E2:93:D5:2D:95:6B:75:5B
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bcrTa_CtBXkWnsJA4pPVLZVrdVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
62.41.0.0-62.41.27.255
62.41.32.0/24
62.41.37.0/24
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.50.128.0/19
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
92.71.0.0-92.71.191.255
134.222.0.0/16
135.196.48.0/21
135.196.228.0/23
135.196.232.0/23
135.196.238.0/23
141.136.96.0/20
185.160.40.0/22
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0-193.141.2.255
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.47.0/24
194.45.98.0/23
194.45.182.0/23
194.120.0.0/24
194.120.43.0/24
194.120.112.0/22
194.120.120.0/22
194.121.52.0/22
194.121.104.0/23
194.121.123.0/24
194.121.203.0/24
194.121.220.0/22
194.122.76.0-194.122.87.255
194.122.120.0/21
194.122.224.0/20
194.122.248.0/22
194.123.122.0/24
194.123.164.0/24
195.143.0.0/16
212.0.224.0-212.1.31.255
212.14.64.0/19
212.27.160.0/19
212.56.0.0/19
212.81.64.0/18
212.115.128.0/18
212.189.0.0/17
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
217.114.112.0/20
217.117.160.0/20
217.118.112.0/20
217.195.224.0/19
IPv6:
2001:668::/29
2001:680::/32
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
04:a6:a1:99:99:21:6a:4f:3b:84:cc:e6:05:7f:62:e4:1f:9d:
e6:f9:58:70:3a:c0:e3:0e:60:1c:68:28:b1:0e:32:9b:9d:2b:
cb:49:e3:c8:55:a2:24:04:dd:96:3e:31:81:75:7c:ab:89:ac:
eb:17:06:4c:65:5d:76:9f:60:6a:f8:b0:34:ed:5e:b8:f3:e5:
ed:eb:f7:7f:5a:92:ed:83:7a:58:a7:3b:79:b4:64:0f:ec:5b:
9d:ed:4d:48:8a:6b:f6:75:5e:d5:f1:21:c6:7a:0a:7e:cb:50:
19:e1:9e:2a:6d:04:3a:a7:da:61:f8:09:e2:30:c4:61:62:f2:
ef:7a:a0:8f:ff:1e:99:2b:30:f1:10:cb:72:98:af:18:5c:65:
6b:34:40:35:cc:b0:df:ab:36:c3:71:21:fc:78:82:21:66:9c:
be:45:63:ac:91:ef:ed:49:0d:f9:14:79:04:69:b6:8d:e7:d5:
c7:42:fc:07:62:fe:9b:38:ef:24:4c:15:6a:ec:e5:f8:f1:b1:
19:b1:32:2d:8a:b3:44:e4:c2:f1:d2:bd:83:1f:22:86:79:03:
12:57:71:7e:fc:ac:c9:c9:15:8f:43:3d:5d:bb:bc:35:3a:b5:
19:23:07:70:fc:ce:1d:27:59:3f:e9:18:9c:a7:90:bc:c3:7d:
99:87:85:4e
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgISAZoFQbVKRgNl5AQY5f+R+wRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMDIxMDUzMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGNhZDM2YmYwYWQwNTc5MTY5ZWMyNDBlMjkzZDUyZDk1NmI3NTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XmLFa2kECQakI3mM9sCRk1LuGkL
v4552Ea/IWNs4esLZezP/Fiwas68QIlTMj+ESL/N1ICQeTdWU6iAJKpKbxDBaUPO
CBA2Pw1JxwuvgrgaD1UC2kT5M5c/pyvfNvFflQqKW+na3Aq/bGDkqMCJ9X/rn5lV
iom7x518vBoEaIhK2NmS+Qvarx//hTHFGGfb82jl1XsFuz2r/MC2drdAEAP76G89
PfqAQ+o33xajG2dXTPBgyB+pXGi0X6DKvk8lO8akGeWtH2hlUAFjHHWaqVVThe9C
btaljPVk0r735JO51j1u5ADwA/RkP90sSEIaGdDrEGbi2PSfs8/YczlimQIDAQAB
o4IEUDCCBEwwHQYDVR0OBBYEFG3K02vwrQV5Fp7CQOKT1S2Va3VbMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvYmNyVGFfQ3RCWGtXbnNKQTRwUFZMWlZyZFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICZAYIKwYBBQUHAQcBAf8EggJTMIICTzCCAi4EAgABMIIC
JgMEBS4hQDALAwMAPikDBAI+KRgDBAA+KSADBAA+KSUwDAMEAz4pOAMEAT4pVAME
AD4pZgMEAD4poAMEBT4ygAMEAj6EAAMEAj6EEAMEAT6EGAMEAD6EHAMEAT6EKjAM
AwQBPoRyAwQBPoR0AwQBPoSEAwQHTUMAAwQGTU2AAwQGV3dAAwQGWZWAMAsDAwBc
RwMEBlxHgAMDAIbeAwQDh8QwAwQBh8TkAwQBh8ToAwQBh8TuAwQEjYhgAwQCuaAo
AwQAwBDKAwQAwDZoMAwDBAHAQ74DBADAQ8QDBAHAgSADBADAgSQwDAMEAMCBKwME
AMCBLDAMAwQBwIEuAwQBwIEwAwQAwIE2AwQBwIE4MAsDAwDBjQMEAMGNAjAMAwQD
wY0oAwQBwY0sAwQBwY2MAwQEwfJQAwQAwik+AwQBwi0EAwQBwi0MAwQAwi0vAwQB
wi1iAwQBwi22AwQAwngAAwQAwngrAwQCwnhwAwQCwnh4AwQCwnk0AwQBwnloAwQA
wnl7AwQAwnnLAwQCwnncMAwDBALCekwDBAPCelADBAPCengDBATCeuADBALCevgD
BADCe3oDBADCe6QDAwDDjzAMAwQF1ADgAwQF1AEAAwQF1A5AAwQF1BugAwQF1DgA
AwQG1FFAAwQG1HOAAwQH1L0AAwQH1N0AAwMA1N4DBAbVyEADBAbV+wADBAbV/sAD
BATZcnADBATZdaADBATZdnADBAXZw+AwGwQCAAIwFQMFAyABBmgDBQAgAQaAAwUA
KgAXUDANBgkqhkiG9w0BAQsFAAOCAQEABKahmZkhak87hMzmBX9i5B+d5vlYcDrA
4w5gHGgosQ4ym50ry0njyFWiJATdlj4xgXV8q4ms6xcGTGVddp9gaviwNO1euPPl
7ev3f1qS7YN6WKc7ebRkD+xbne1NSIpr9nVe1fEhxnoKfstQGeGeKm0EOqfaYfgJ
4jDEYWLy73qgj/8emSsw8RDLcpivGFxlazRANcyw36s2w3Eh/HiCIWacvkVjrJHv
7UkN+RR5BGm2jefVx0L8B2L+mzjvJEwVauzl+PGxGbEyLYqzROTC8dK9gx8ihnkD
EldxfvysyckVj0M9Xbu8NTq1GSMHcPzOHSdZP+kYnKeQvMN9mYeFTg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 15:16:58 2025 by rpki-client