Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/bcAIwuJO8aDrVEXNrt-8O6on-lo.roa
File: bcAIwuJO8aDrVEXNrt-8O6on-lo.roa (raw, json)
Hash identifier: Q91/Ln+O0FS/Y8Cqj8uQ0UCV73gOKZK5ODen/j5W9Oo=
Subject key identifier: 6D:C0:08:C2:E2:4E:F1:A0:EB:54:45:CD:AE:DF:BC:3B:AA:27:FA:5A
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 01A024949D6ABDB0370C801AF68CB6C787DF
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/bcAIwuJO8aDrVEXNrt-8O6on-lo.roa
Signing time: Fri 21 Aug 2026 13:48:34 +0000
ROA not before: Fri 21 Aug 2026 13:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211183
IP address blocks: 5.35.124.0/24 maxlen: 24
5.35.125.0/24 maxlen: 24
5.35.126.0/24 maxlen: 24
5.35.127.0/24 maxlen: 24
5.253.62.0/24 maxlen: 24
37.140.241.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.183.0/24 maxlen: 24
89.191.225.0/24 maxlen: 24
91.200.84.0/24 maxlen: 24
94.154.11.0/24 maxlen: 24
130.49.128.0/24 maxlen: 24
130.49.129.0/24 maxlen: 24
130.49.140.0/24 maxlen: 24
130.49.143.0/24 maxlen: 24
130.49.146.0/24 maxlen: 24
130.49.153.0/24 maxlen: 24
138.16.152.0/24 maxlen: 24
138.16.153.0/24 maxlen: 24
138.16.154.0/24 maxlen: 24
138.16.155.0/24 maxlen: 24
138.16.224.0/24 maxlen: 24
138.16.225.0/24 maxlen: 24
138.16.226.0/24 maxlen: 24
138.16.227.0/24 maxlen: 24
153.80.184.0/24 maxlen: 24
153.80.185.0/24 maxlen: 24
153.80.245.0/24 maxlen: 24
153.80.246.0/24 maxlen: 24
153.80.247.0/24 maxlen: 24
153.80.250.0/24 maxlen: 24
153.80.251.0/24 maxlen: 24
155.212.245.0/24 maxlen: 24
155.212.246.0/24 maxlen: 24
155.212.247.0/24 maxlen: 24
157.22.172.0/24 maxlen: 24
157.22.173.0/24 maxlen: 24
157.22.174.0/24 maxlen: 24
157.22.175.0/24 maxlen: 24
157.22.230.0/24 maxlen: 24
157.22.231.0/24 maxlen: 24
157.22.252.0/24 maxlen: 24
157.22.253.0/24 maxlen: 24
168.113.208.0/24 maxlen: 24
168.113.209.0/24 maxlen: 24
168.113.210.0/24 maxlen: 24
168.113.211.0/24 maxlen: 24
185.198.152.0/24 maxlen: 24
185.219.41.0/24 maxlen: 24
185.233.185.0/24 maxlen: 24
185.239.50.0/24 maxlen: 24
185.239.51.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
185.244.51.0/24 maxlen: 24
185.250.44.0/24 maxlen: 24
185.250.46.0/24 maxlen: 24
185.250.47.0/24 maxlen: 24
193.187.96.0/24 maxlen: 24
194.5.78.0/24 maxlen: 24
194.5.79.0/24 maxlen: 24
195.93.252.0/24 maxlen: 24
217.171.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:94:9d:6a:bd:b0:37:0c:80:1a:f6:8c:b6:c7:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Aug 21 13:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dc008c2e24ef1a0eb5445cdaedfbc3baa27fa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:d3:5c:06:ed:c2:8f:fb:8a:b5:ae:2b:ca:
1e:34:0e:16:98:78:fd:be:ae:09:a1:3d:bd:ae:75:
ca:06:c8:8a:cd:f1:ef:87:da:fc:2b:86:5e:e5:32:
67:ae:bb:65:f5:4d:d3:84:69:60:44:48:80:33:fb:
c6:a4:05:f9:71:ae:70:ab:78:2e:f7:05:85:76:ea:
99:18:5f:8b:4c:6f:c9:d7:f6:70:fc:a9:78:ac:1f:
a3:83:64:16:5a:e1:77:35:85:67:e1:77:c2:53:88:
f9:00:1d:3f:c4:1f:68:51:35:f9:e8:d3:b6:ce:23:
16:3c:ff:fd:f9:c7:e3:e4:0e:63:da:a8:1b:6d:94:
7e:85:8c:50:1a:56:aa:0e:4a:c7:ed:ab:19:a4:81:
2c:27:5f:ed:5e:6a:19:bb:01:7f:bf:f6:7f:bf:9c:
2e:4a:c0:1d:c0:dd:07:5d:6f:f8:da:bd:c3:56:d1:
8b:69:2d:e7:3b:7d:f9:99:4c:85:ce:93:c1:20:ee:
5f:83:1f:67:5b:da:a1:68:1d:c8:73:76:ac:a0:a4:
c8:1e:93:d2:65:3c:50:a5:94:c0:ff:62:fa:66:95:
8f:4c:d8:61:bb:35:56:4a:02:d4:08:ec:d3:b2:b6:
be:8d:59:72:7f:80:3e:42:13:e1:99:33:d3:63:f3:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:08:C2:E2:4E:F1:A0:EB:54:45:CD:AE:DF:BC:3B:AA:27:FA:5A
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/bcAIwuJO8aDrVEXNrt-8O6on-lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.124.0/22
5.253.62.0/24
37.140.241.0/24
45.128.204.0/24
79.133.181.0-79.133.183.255
89.191.225.0/24
91.200.84.0/24
94.154.11.0/24
130.49.128.0/23
130.49.140.0/24
130.49.143.0/24
130.49.146.0/24
130.49.153.0/24
138.16.152.0/22
138.16.224.0/22
153.80.184.0/23
153.80.245.0-153.80.247.255
153.80.250.0/23
155.212.245.0-155.212.247.255
157.22.172.0/22
157.22.230.0/23
157.22.252.0/23
168.113.208.0/22
185.198.152.0/24
185.219.41.0/24
185.233.185.0/24
185.239.50.0/23
185.240.103.0/24
185.244.51.0/24
185.250.44.0/24
185.250.46.0/23
193.187.96.0/24
194.5.78.0/23
195.93.252.0/24
217.171.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3b:21:6d:84:87:17:51:3b:91:8d:ab:63:71:41:5f:e7:a1:
00:c5:d7:01:cd:21:ac:99:5e:cb:46:fe:d9:e6:07:a9:7d:1d:
42:0a:3a:05:78:bd:0a:ee:b7:bb:94:63:e4:bd:94:4b:cf:92:
b6:4e:91:19:aa:fa:19:a9:ba:14:df:e1:58:29:c4:73:c0:47:
59:64:ec:0d:8c:cc:07:c0:b5:07:58:ec:ba:de:99:45:fc:a9:
5d:76:c9:4b:ce:47:e1:2b:94:83:78:8f:e8:6b:2e:a9:79:25:
87:2f:e3:14:af:99:1f:6b:ed:ee:d7:1a:12:dd:99:0a:fa:86:
97:c4:30:f9:9f:7b:e7:aa:7f:98:08:c6:4e:5d:46:79:34:42:
18:86:8b:23:00:e1:91:8b:d9:e8:56:d5:4e:64:59:91:5f:40:
5a:33:02:20:0d:49:5f:82:31:b5:b3:5b:c5:9c:7e:8a:9e:07:
a2:7c:c2:2b:1f:d0:b2:39:83:ba:fe:39:db:e0:3f:e5:0f:d9:
6f:c0:7d:01:f3:93:9a:c5:b4:ce:b1:af:12:98:52:dc:c6:b6:
40:87:86:90:de:18:8e:f2:a1:cb:c4:55:7e:52:2e:8e:de:57:
06:82:ba:95:9b:5e:3a:84:ff:2c:02:ba:06:40:96:65:f0:40:
b8:b2:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:39 2026 by rpki-client