Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bdv-08ybQ4eHd8QqHfsi6al1i1s.roa
File: bdv-08ybQ4eHd8QqHfsi6al1i1s.roa (raw, json)
Hash identifier: ifM6feW+2grYGiCjF9HDSZ9sfJovFJZYygghzeCieUE=
Subject key identifier: 6D:DB:FE:D3:CC:9B:43:87:87:77:C4:2A:1D:FB:22:E9:A9:75:8B:5B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199BD031FF853455FB3470D150178625BA4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bdv-08ybQ4eHd8QqHfsi6al1i1s.roa
Signing time: Tue 07 Oct 2025 04:52:02 +0000
ROA not before: Tue 07 Oct 2025 04:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.241.220.0/24 maxlen: 24
151.241.222.0/24 maxlen: 24
151.241.223.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.140.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.141.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
151.244.238.0/24 maxlen: 24
151.244.239.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.89.0/24 maxlen: 24
151.245.90.0/24 maxlen: 24
151.245.132.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
151.247.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 14:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:03:1f:f8:53:45:5f:b3:47:0d:15:01:78:62:5b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 04:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ddbfed3cc9b43878777c42a1dfb22e9a9758b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:41:fb:f8:69:d4:f4:e1:be:eb:7d:26:54:
8b:dc:73:ae:e6:5c:d9:91:d2:d6:56:71:a0:2b:c2:
80:db:eb:a8:4d:a3:85:1f:61:67:0f:3e:64:62:e3:
05:dc:8f:8e:44:4d:5d:8e:b8:4d:d1:fb:ec:ff:c5:
eb:df:f7:27:c6:35:88:df:26:a3:64:81:b9:f0:fd:
23:26:74:88:43:73:7b:84:ea:f4:1e:37:67:15:ed:
12:0a:be:d0:21:3e:97:e4:25:ea:3e:ce:18:66:ba:
0d:0a:37:c3:20:a9:d6:d0:2b:f5:6f:e0:48:85:c9:
9d:33:13:96:d2:26:7b:4d:34:51:11:6f:74:d1:d8:
b1:6e:f5:2e:be:22:54:f0:83:a1:38:3d:10:ed:bd:
8a:36:6f:d4:ce:85:68:c7:ec:ac:0b:d5:87:8b:a7:
b8:f5:12:e8:73:de:ab:ff:ce:bf:a8:4f:fa:97:39:
2c:13:29:bf:cc:05:18:a0:c8:24:f5:fc:af:0d:be:
81:24:b9:e7:26:f1:4e:3a:0d:f6:3b:7c:39:50:07:
b9:98:20:4f:7f:c6:5b:b4:86:bd:53:00:47:13:e9:
91:3b:65:d6:c5:a2:b2:86:39:0b:c3:49:2b:21:8d:
6a:cd:b2:92:35:fa:2e:3b:f0:d4:c2:5a:7d:6f:cc:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DB:FE:D3:CC:9B:43:87:87:77:C4:2A:1D:FB:22:E9:A9:75:8B:5B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bdv-08ybQ4eHd8QqHfsi6al1i1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.23.255
151.240.25.0/24
151.240.31.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.74.255
151.240.78.0/24
151.240.80.0/23
151.240.83.0-151.240.90.255
151.240.126.0-151.240.143.255
151.240.145.0/24
151.240.148.0/23
151.240.152.0/23
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0-151.240.164.255
151.240.166.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.32.0/24
151.241.220.0/24
151.241.222.0/23
151.242.18.0/24
151.242.140.0/24
151.242.145.0/24
151.243.45.0/24
151.243.88.0/23
151.244.4.0/24
151.244.141.0/24
151.244.187.0/24
151.244.238.0/23
151.245.68.0/24
151.245.89.0-151.245.90.255
151.245.132.0/24
151.245.203.0/24
151.247.251.0/24
Signature Algorithm: sha256WithRSAEncryption
65:82:25:6b:5a:d7:9b:6e:9c:db:67:91:5c:5b:ba:9a:7c:91:
80:c5:b2:cc:70:e4:d6:3e:57:c4:1f:13:ec:2c:a8:1f:b1:d6:
86:b1:f8:72:76:2c:6a:d6:43:3a:d5:1c:f0:ef:c1:68:1f:e3:
87:ca:01:65:56:64:09:94:f0:4b:27:dd:7d:19:6f:db:f8:fa:
27:81:3a:6c:c7:1e:bc:66:9f:66:60:42:cc:bb:c4:2b:91:e3:
9c:28:f0:90:ad:3a:bf:de:e5:ad:b3:73:6d:5e:73:12:7c:36:
e0:44:0a:2a:d6:e1:fb:94:1e:68:33:3a:4d:0d:2c:b6:c3:9b:
55:37:25:65:e0:90:97:d2:38:db:09:1b:45:ab:74:8a:b0:52:
af:2c:6d:db:e1:c5:59:46:8b:87:e6:bb:38:24:d5:81:24:c9:
71:fa:36:84:14:3c:71:a0:e4:47:ca:a5:b6:98:28:37:eb:d1:
1f:b4:49:72:65:ca:e9:06:80:05:58:cd:0f:14:ef:22:8b:dc:
bd:c2:5b:6a:38:7b:91:f3:05:2d:32:dd:7d:26:2d:2c:80:3c:
53:1c:a7:1c:31:71:89:73:0e:57:99:9f:25:e6:34:5c:5d:33:
81:1f:d7:9e:23:11:7a:af:8b:51:2c:c4:64:4f:88:3b:7d:e0:
18:1f:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:45 2025 by rpki-client