Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/Bdj4rWdb1WJG8M-pyMUAAxUVaQs.roa
File: Bdj4rWdb1WJG8M-pyMUAAxUVaQs.roa (raw, json)
Hash identifier: rmwADo6qE7d2lmC1YyUTdwDcrVEr8LSgVZf7an8egTs=
Subject key identifier: 05:D8:F8:AD:67:5B:D5:62:46:F0:CF:A9:C8:C5:00:03:15:15:69:0B
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 0199B85DD3223A01A35DDDAF123318A7EF39
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/Bdj4rWdb1WJG8M-pyMUAAxUVaQs.roa
Signing time: Mon 06 Oct 2025 07:13:00 +0000
ROA not before: Mon 06 Oct 2025 07:13:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 5.35.96.0/23 maxlen: 23
5.35.98.0/23 maxlen: 23
31.135.8.0/23 maxlen: 23
31.135.10.0/24 maxlen: 24
31.135.11.0/24 maxlen: 24
31.135.12.0/23 maxlen: 23
31.135.14.0/23 maxlen: 23
37.230.112.0/23 maxlen: 23
37.230.114.0/23 maxlen: 23
37.230.116.0/23 maxlen: 23
37.230.118.0/23 maxlen: 23
62.181.44.0/24 maxlen: 24
62.181.53.0/24 maxlen: 24
62.181.54.0/23 maxlen: 23
78.24.216.0/21 maxlen: 21
79.143.72.0/23 maxlen: 23
79.174.12.0/23 maxlen: 23
79.174.14.0/23 maxlen: 23
83.136.232.0/23 maxlen: 23
83.136.235.0/24 maxlen: 24
86.110.194.0/24 maxlen: 24
86.110.208.0/23 maxlen: 23
86.110.212.0/24 maxlen: 24
86.110.215.0/24 maxlen: 24
86.110.220.0/24 maxlen: 24
89.169.28.0/23 maxlen: 23
89.169.30.0/23 maxlen: 23
91.107.120.0/21 maxlen: 21
91.228.224.0/23 maxlen: 23
92.63.192.0/23 maxlen: 23
92.63.194.0/23 maxlen: 23
94.250.248.0/23 maxlen: 23
94.250.250.0/23 maxlen: 23
94.250.252.0/23 maxlen: 23
94.250.254.0/23 maxlen: 23
109.172.4.0/23 maxlen: 23
109.172.6.0/23 maxlen: 23
109.172.30.0/23 maxlen: 23
109.172.78.0/23 maxlen: 23
109.172.100.0/23 maxlen: 23
109.172.108.0/22 maxlen: 22
109.172.112.0/23 maxlen: 23
109.172.114.0/23 maxlen: 23
109.172.116.0/23 maxlen: 23
149.154.64.0/23 maxlen: 23
149.154.66.0/23 maxlen: 23
149.154.68.0/23 maxlen: 23
149.154.70.0/23 maxlen: 23
155.212.160.0/20 maxlen: 20
176.123.168.0/23 maxlen: 23
176.123.170.0/23 maxlen: 23
176.123.172.0/23 maxlen: 23
176.123.174.0/23 maxlen: 23
178.250.156.0/23 maxlen: 23
178.250.158.0/23 maxlen: 23
185.60.132.0/23 maxlen: 23
185.60.134.0/23 maxlen: 23
185.187.115.0/24 maxlen: 24
188.120.224.0/20 maxlen: 20
188.120.240.0/21 maxlen: 21
188.120.248.0/23 maxlen: 23
188.120.248.0/24 maxlen: 24
188.120.249.0/24 maxlen: 24
188.120.250.0/23 maxlen: 23
188.120.253.0/24 maxlen: 24
188.120.254.0/23 maxlen: 23
212.57.115.0/24 maxlen: 24
212.57.116.0/24 maxlen: 24
212.57.118.0/24 maxlen: 24
212.57.122.0/24 maxlen: 24
212.57.124.0/23 maxlen: 23
212.57.126.0/23 maxlen: 23
217.28.220.0/23 maxlen: 23
217.28.222.0/23 maxlen: 23
2a01:230:1::/48 maxlen: 48
2a01:230:2::/48 maxlen: 48
2a01:230:3::/48 maxlen: 48
2a01:230:4::/48 maxlen: 48
2a01:230:5::/48 maxlen: 48
2a01:230:6::/48 maxlen: 48
2a01:230:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:5d:d3:22:3a:01:a3:5d:dd:af:12:33:18:a7:ef:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Oct 6 07:13:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05d8f8ad675bd56246f0cfa9c8c500031515690b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:3b:e0:de:df:9a:bb:50:fe:3c:50:eb:3f:
81:68:40:1e:ba:ff:34:39:fb:57:74:77:81:d4:e7:
cb:c7:52:6e:a2:9e:07:6c:77:ea:90:e9:29:77:d3:
7b:6e:5c:76:71:52:2d:e0:1b:97:7c:74:83:c4:0b:
30:37:f8:2a:ad:47:5c:30:64:c7:15:44:04:e8:4b:
6b:e3:02:3f:39:23:d9:78:ca:f6:cb:3e:6b:70:d4:
a6:02:e0:e6:04:a2:c3:f2:70:15:8b:27:ac:7b:67:
2a:b1:a2:cb:ad:e4:01:c1:db:04:28:74:51:09:71:
f0:1b:fa:1e:06:49:4f:fe:16:06:d4:8c:8a:bc:4e:
c9:1b:b6:cd:c1:f3:1d:0c:6a:3b:53:06:7a:55:7a:
e4:f1:6f:b8:c4:79:ce:d8:de:9b:56:1e:fb:d0:8c:
45:6a:0c:86:70:08:b5:99:92:53:04:b7:7d:a6:53:
c0:3b:3f:b4:99:39:ff:04:46:d0:60:23:dc:04:09:
2a:60:df:5e:7e:85:f4:4e:f9:1c:16:c1:88:d2:f1:
b7:55:74:0b:35:13:cb:a8:ed:6a:3b:da:61:39:1a:
35:8c:f9:f8:01:b3:e0:93:8d:a6:98:c7:5a:87:8e:
c4:1e:8a:4a:d0:07:af:af:8a:b6:26:ff:5a:c0:5d:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:F8:AD:67:5B:D5:62:46:F0:CF:A9:C8:C5:00:03:15:15:69:0B
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/Bdj4rWdb1WJG8M-pyMUAAxUVaQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.96.0/22
31.135.8.0/21
37.230.112.0/21
62.181.44.0/24
62.181.53.0-62.181.55.255
78.24.216.0/21
79.143.72.0/23
79.174.12.0/22
83.136.232.0/23
83.136.235.0/24
86.110.194.0/24
86.110.208.0/23
86.110.212.0/24
86.110.215.0/24
86.110.220.0/24
89.169.28.0/22
91.107.120.0/21
91.228.224.0/23
92.63.192.0/22
94.250.248.0/21
109.172.4.0/22
109.172.30.0/23
109.172.78.0/23
109.172.100.0/23
109.172.108.0-109.172.117.255
149.154.64.0/21
155.212.160.0/20
176.123.168.0/21
178.250.156.0/22
185.60.132.0/22
185.187.115.0/24
188.120.224.0-188.120.251.255
188.120.253.0-188.120.255.255
212.57.115.0-212.57.116.255
212.57.118.0/24
212.57.122.0/24
212.57.124.0/22
217.28.220.0/22
IPv6:
2a01:230:1::-2a01:230:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:01:e6:43:6c:a0:e9:af:9a:44:9f:8f:1b:f2:50:6e:2c:97:
09:65:f2:65:1a:96:49:c8:d5:8e:53:42:b6:0b:77:45:f0:1a:
c6:30:7c:57:68:ad:1c:b5:7d:58:ed:5e:d3:2d:27:a6:7f:68:
ea:0e:2a:4f:47:5a:c3:af:e9:dd:21:50:21:0b:27:c7:88:5e:
26:33:29:80:3b:ab:1a:c9:ef:e3:b4:75:16:7f:4f:69:55:92:
67:e2:c0:a7:99:1c:9c:f9:32:8f:f0:2a:88:94:a7:c8:30:56:
37:e5:cd:fe:a5:24:3a:6c:82:ac:99:b2:93:44:f8:68:a9:86:
4f:73:c8:37:89:b5:ae:a1:20:64:0d:77:34:9c:24:60:81:48:
6a:db:16:89:1f:c1:db:45:4b:12:c5:7f:a3:18:2c:89:41:b1:
d7:ac:b3:2e:40:f4:7f:30:9d:46:37:f1:08:c7:58:67:9e:92:
a0:19:e2:0a:db:c6:4f:73:7e:90:a5:9a:bb:16:f2:e9:89:65:
2f:bc:d4:72:36:8e:7b:67:ba:bc:a0:3b:de:38:75:28:26:2b:
ff:28:56:f8:55:97:e4:b6:d8:e2:71:4c:bd:b7:3d:0d:d0:0b:
1b:b3:e5:c3:64:1e:7a:1f:12:7d:18:11:06:dc:93:cf:25:f0:
19:84:b1:73
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgISAZm4XdMiOgGjXd2vEjMYp+85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz
NDEyMTMwHhcNMjUxMDA2MDcxMzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWQ4ZjhhZDY3NWJkNTYyNDZmMGNmYTljOGM1MDAwMzE1MTU2OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIc74N7fmrtQ/jxQ6z+BaEAeuv80
OftXdHeB1OfLx1Juop4HbHfqkOkpd9N7blx2cVIt4BuXfHSDxAswN/gqrUdcMGTH
FUQE6Etr4wI/OSPZeMr2yz5rcNSmAuDmBKLD8nAViyese2cqsaLLreQBwdsEKHRR
CXHwG/oeBklP/hYG1IyKvE7JG7bNwfMdDGo7UwZ6VXrk8W+4xHnO2N6bVh770IxF
agyGcAi1mZJTBLd9plPAOz+0mTn/BEbQYCPcBAkqYN9efoX0TvkcFsGI0vG3VXQL
NRPLqO1qO9phORo1jPn4AbPgk42mmMdah47EHopK0Aevr4q2Jv9awF2DswIDAQAB
o4IDNDCCAzAwHQYDVR0OBBYEFAXY+K1nW9ViRvDPqcjFAAMVFWkLMB8GA1UdIwQY
MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt
NGE2ODU5NjJmM2U4LzEvQmRqNHJXZGIxV0pHOE0tcHlNVUFBeFVWYVFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4
LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBSAYIKwYBBQUHAQcBAf8EggE3MIIBMzCCARMEAgABMIIB
CwMEAgUjYAMEAx+HCAMEAyXmcAMEAD61LDAMAwQAPrU1AwQDPrUwAwQDThjYAwQB
T49IAwQCT64MAwQBU4joAwQAU4jrAwQAVm7CAwQBVm7QAwQAVm7UAwQAVm7XAwQA
Vm7cAwQCWakcAwQDW2t4AwQBW+TgAwQCXD/AAwQDXvr4AwQCbawEAwQBbaweAwQB
baxOAwQBbaxkMAwDBAJtrGwDBAFtrHQDBAOVmkADBASb1KADBAOwe6gDBAKy+pwD
BAK5PIQDBAC5u3MwDAMEBbx44AMEArx4+DALAwQAvHj9AwMAvHgwDAMEANQ5cwME
ANQ5dAMEANQ5dgMEANQ5egMEAtQ5fAMEAtkc3DAaBAIAAjAUMBIDBwAqAQIwAAED
BwMqAQIwAAAwDQYJKoZIhvcNAQELBQADggEBAKgB5kNsoOmvmkSfjxvyUG4slwll
8mUalknI1Y5TQrYLd0XwGsYwfFdorRy1fVjtXtMtJ6Z/aOoOKk9HWsOv6d0hUCEL
J8eIXiYzKYA7qxrJ7+O0dRZ/T2lVkmfiwKeZHJz5Mo/wKoiUp8gwVjflzf6lJDps
gqyZspNE+Giphk9zyDeJta6hIGQNdzScJGCBSGrbFokfwdtFSxLFf6MYLIlBsdes
sy5A9H8wnUY38QjHWGeekqAZ4grbxk9zfpClmrsW8umJZS+81HI2jntnurygO944
dSgmK/8oVvhVl+S22OJxTL23PQ3QCxuz5cNkHnofEn0YEQbck88l8BmEsXM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:11 2025 by rpki-client