Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/bPL-leOu26cAbHiYWlKbrdryIqY.roa
File: bPL-leOu26cAbHiYWlKbrdryIqY.roa (raw, json)
Hash identifier: APe2CKDPq0g//Y3YndD1lh1MJb8I/mAZaIr6kkMWtjo=
Subject key identifier: 6C:F2:FE:95:E3:AE:DB:A7:00:6C:78:98:5A:52:9B:AD:DA:F2:22:A6
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0196A4558675F4AE4CD888C4F02471AC0A1C
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/bPL-leOu26cAbHiYWlKbrdryIqY.roa
Signing time: Tue 06 May 2025 06:43:10 +0000
ROA not before: Tue 06 May 2025 06:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198610
IP address blocks: 5.35.80.0/20 maxlen: 24
5.35.80.0/24 maxlen: 24
5.101.152.0/21 maxlen: 24
5.101.152.0/24 maxlen: 24
5.101.153.0/24 maxlen: 24
5.101.153.242/32 maxlen: 32
5.101.153.244/32 maxlen: 32
5.101.154.0/24 maxlen: 24
5.101.154.191/32 maxlen: 32
5.101.155.0/24 maxlen: 24
5.101.156.0/24 maxlen: 24
5.101.157.0/24 maxlen: 24
5.101.158.0/24 maxlen: 24
5.101.159.0/24 maxlen: 24
5.181.108.0/22 maxlen: 24
5.181.108.0/24 maxlen: 24
5.181.109.0/24 maxlen: 24
5.181.110.0/24 maxlen: 24
5.181.111.0/24 maxlen: 24
31.128.32.0/20 maxlen: 24
31.128.32.0/22 maxlen: 24
31.128.36.0/22 maxlen: 24
31.129.96.0/20 maxlen: 24
31.129.96.0/24 maxlen: 24
31.129.98.0/24 maxlen: 24
31.207.74.0/23 maxlen: 24
31.207.76.0/23 maxlen: 24
45.9.40.0/22 maxlen: 24
45.9.40.0/24 maxlen: 24
45.9.41.0/24 maxlen: 24
45.9.42.0/24 maxlen: 24
45.9.43.0/24 maxlen: 24
45.12.16.0/22 maxlen: 24
45.12.16.0/24 maxlen: 24
45.12.17.0/24 maxlen: 24
45.12.18.0/24 maxlen: 24
45.12.19.0/24 maxlen: 24
45.12.72.0/22 maxlen: 24
45.12.236.0/22 maxlen: 24
45.12.236.0/24 maxlen: 24
45.12.237.0/24 maxlen: 24
45.12.238.0/24 maxlen: 24
45.12.239.0/24 maxlen: 24
45.67.56.0/22 maxlen: 24
45.67.56.0/24 maxlen: 24
45.67.57.0/24 maxlen: 24
45.67.58.0/24 maxlen: 24
45.67.59.0/24 maxlen: 24
45.80.68.0/22 maxlen: 24
45.80.68.0/24 maxlen: 24
45.80.69.0/24 maxlen: 24
45.80.70.0/24 maxlen: 24
45.80.71.0/24 maxlen: 24
45.84.224.0/22 maxlen: 24
45.84.224.0/24 maxlen: 24
45.84.225.0/24 maxlen: 24
45.84.226.0/24 maxlen: 24
45.84.227.0/24 maxlen: 24
45.90.32.0/22 maxlen: 24
45.90.32.0/24 maxlen: 24
45.90.33.0/24 maxlen: 24
45.90.34.0/24 maxlen: 24
45.90.35.0/24 maxlen: 24
45.130.40.0/22 maxlen: 24
45.130.40.0/24 maxlen: 24
45.130.41.0/24 maxlen: 24
45.130.42.0/24 maxlen: 24
45.130.43.0/24 maxlen: 24
45.141.76.0/22 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
45.146.164.0/22 maxlen: 24
45.146.164.0/24 maxlen: 24
45.146.165.0/24 maxlen: 24
45.146.166.0/24 maxlen: 24
45.146.167.0/24 maxlen: 24
45.147.176.0/22 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
45.147.179.0/24 maxlen: 24
45.153.188.0/22 maxlen: 24
46.173.24.0/22 maxlen: 24
46.173.28.0/23 maxlen: 24
62.113.96.0/20 maxlen: 24
62.113.96.0/24 maxlen: 24
62.113.97.0/24 maxlen: 24
62.113.98.0/24 maxlen: 24
62.113.99.0/24 maxlen: 24
62.113.100.0/24 maxlen: 24
62.113.101.0/24 maxlen: 24
62.113.102.0/24 maxlen: 24
62.113.103.0/24 maxlen: 24
62.113.104.0/24 maxlen: 24
62.113.105.0/24 maxlen: 24
62.113.106.0/24 maxlen: 24
62.113.107.0/24 maxlen: 24
62.113.108.0/24 maxlen: 24
62.113.109.0/24 maxlen: 24
62.113.110.0/24 maxlen: 24
62.113.111.0/24 maxlen: 24
62.217.176.0/21 maxlen: 24
62.217.176.0/24 maxlen: 24
62.217.177.0/24 maxlen: 24
62.217.178.0/24 maxlen: 24
62.217.179.0/24 maxlen: 24
62.217.180.0/24 maxlen: 24
62.217.181.0/24 maxlen: 24
62.217.182.0/24 maxlen: 24
62.217.183.0/24 maxlen: 24
81.200.112.0/21 maxlen: 24
81.200.112.0/24 maxlen: 24
81.200.113.0/24 maxlen: 24
81.200.114.0/24 maxlen: 24
81.200.115.0/24 maxlen: 24
81.200.116.0/24 maxlen: 24
81.200.117.0/24 maxlen: 24
81.200.118.0/24 maxlen: 24
81.200.119.0/24 maxlen: 24
82.202.128.0/22 maxlen: 24
83.222.16.0/22 maxlen: 24
83.222.24.0/22 maxlen: 24
87.236.16.0/21 maxlen: 24
87.236.16.0/24 maxlen: 24
87.236.17.0/24 maxlen: 24
87.236.17.122/32 maxlen: 32
87.236.18.0/24 maxlen: 24
87.236.19.0/24 maxlen: 24
87.236.20.0/24 maxlen: 24
87.236.21.0/24 maxlen: 24
87.236.22.0/24 maxlen: 24
87.236.23.0/24 maxlen: 24
89.169.38.0/23 maxlen: 24
90.156.168.0/22 maxlen: 24
91.106.200.0/21 maxlen: 24
91.106.200.0/24 maxlen: 24
91.106.201.0/24 maxlen: 24
91.106.202.0/24 maxlen: 24
91.106.203.0/24 maxlen: 24
91.106.204.0/24 maxlen: 24
91.106.205.0/24 maxlen: 24
91.106.206.0/24 maxlen: 24
91.106.207.0/24 maxlen: 24
95.214.60.0/22 maxlen: 24
95.214.60.0/24 maxlen: 24
95.214.61.0/24 maxlen: 24
95.214.62.0/24 maxlen: 24
95.214.63.0/24 maxlen: 24
109.172.36.0/22 maxlen: 24
185.19.204.0/22 maxlen: 24
185.19.204.0/24 maxlen: 24
185.19.205.0/24 maxlen: 24
185.19.206.0/24 maxlen: 24
185.19.207.0/24 maxlen: 24
185.50.24.0/22 maxlen: 24
185.50.24.0/24 maxlen: 24
185.50.25.0/24 maxlen: 24
185.50.26.0/24 maxlen: 24
185.50.27.0/24 maxlen: 24
185.78.28.0/22 maxlen: 24
185.78.28.0/24 maxlen: 24
185.78.29.0/24 maxlen: 24
185.78.30.0/24 maxlen: 24
185.78.31.0/24 maxlen: 24
185.155.118.0/24 maxlen: 24
185.207.0.0/23 maxlen: 24
185.225.32.0/22 maxlen: 24
185.225.32.0/24 maxlen: 24
185.225.33.0/24 maxlen: 24
185.225.34.0/24 maxlen: 24
185.225.35.0/24 maxlen: 24
193.168.46.0/23 maxlen: 24
193.168.46.0/24 maxlen: 24
193.168.47.0/24 maxlen: 24
193.168.48.0/23 maxlen: 24
193.168.48.0/24 maxlen: 24
193.168.49.0/24 maxlen: 24
193.176.76.0/22 maxlen: 24
193.176.76.0/24 maxlen: 24
193.176.77.0/24 maxlen: 24
193.176.78.0/24 maxlen: 24
193.176.79.0/24 maxlen: 24
193.200.72.0/22 maxlen: 24
193.200.72.0/24 maxlen: 24
193.200.73.0/24 maxlen: 24
193.200.74.0/24 maxlen: 24
193.200.75.0/24 maxlen: 24
212.67.8.0/21 maxlen: 24
213.139.208.0/22 maxlen: 24
213.139.208.0/24 maxlen: 24
213.139.209.0/24 maxlen: 24
213.139.210.0/24 maxlen: 24
213.139.211.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.114.0.0/21 maxlen: 24
217.114.8.0/21 maxlen: 24
217.172.24.0/22 maxlen: 24
217.172.24.0/24 maxlen: 24
217.172.25.0/24 maxlen: 24
217.172.26.0/24 maxlen: 24
217.172.27.0/24 maxlen: 24
2a04:bac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:55:86:75:f4:ae:4c:d8:88:c4:f0:24:71:ac:0a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: May 6 06:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cf2fe95e3aedba7006c78985a529baddaf222a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:f0:22:5b:dc:c8:07:79:de:d5:7c:40:cf:
83:ed:1c:a2:5b:1f:06:30:50:52:7b:e4:1e:0e:41:
1f:ad:e0:79:cd:5f:64:d0:be:d0:b7:19:10:59:0a:
12:00:06:5f:e7:e2:0b:67:90:cf:6b:42:37:d5:ba:
eb:e9:be:a1:33:fe:57:7e:1d:1f:d5:c4:29:0f:0f:
bb:ec:5b:00:05:78:4f:ad:99:68:66:e4:d3:ce:95:
ce:6b:4d:b6:da:9c:90:cd:15:da:54:c4:e8:9f:08:
18:58:ae:64:cc:db:5b:0d:64:de:3a:0d:c6:22:87:
0e:ff:52:3c:96:86:f5:06:fe:17:ec:a2:4b:96:86:
a9:21:d9:0b:a4:a2:09:ea:fc:ce:3c:31:0f:cd:0e:
16:7a:4f:1f:1b:6c:73:3a:71:fd:4c:36:2d:41:a2:
4d:be:d6:7d:3d:f5:d0:7d:df:d1:d7:bd:8d:f3:00:
7d:cb:6c:ef:1d:90:3b:ec:55:15:6e:d3:17:e4:54:
a0:d4:c7:36:e0:d3:c3:f2:bd:8b:17:72:22:0f:73:
3a:44:76:86:82:67:ca:6c:b0:d0:9d:5a:eb:a5:ee:
2f:50:cd:4e:2e:2c:8d:37:ee:85:f3:cd:dc:70:e1:
87:d2:b0:f9:d1:64:6f:6b:40:62:1e:97:0e:66:16:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:FE:95:E3:AE:DB:A7:00:6C:78:98:5A:52:9B:AD:DA:F2:22:A6
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/bPL-leOu26cAbHiYWlKbrdryIqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/20
5.101.152.0/21
5.181.108.0/22
31.128.32.0/20
31.129.96.0/20
31.207.74.0-31.207.77.255
45.9.40.0/22
45.12.16.0/22
45.12.72.0/22
45.12.236.0/22
45.67.56.0/22
45.80.68.0/22
45.84.224.0/22
45.90.32.0/22
45.130.40.0/22
45.141.76.0/22
45.146.164.0/22
45.147.176.0/22
45.153.188.0/22
46.173.24.0-46.173.29.255
62.113.96.0/20
62.217.176.0/21
81.200.112.0/21
82.202.128.0/22
83.222.16.0/22
83.222.24.0/22
87.236.16.0/21
89.169.38.0/23
90.156.168.0/22
91.106.200.0/21
95.214.60.0/22
109.172.36.0/22
185.19.204.0/22
185.50.24.0/22
185.78.28.0/22
185.155.118.0/24
185.207.0.0/23
185.225.32.0/22
193.168.46.0-193.168.49.255
193.176.76.0/22
193.200.72.0/22
212.67.8.0/21
213.139.208.0/22
217.12.37.0-217.12.38.255
217.12.40.0/24
217.114.0.0/20
217.172.24.0/22
IPv6:
2a04:bac0::/29
Signature Algorithm: sha256WithRSAEncryption
98:31:9d:bc:40:49:27:15:57:35:43:79:1a:fe:07:28:3e:3c:
02:30:8e:9f:51:a8:5f:a8:17:fa:01:9c:5a:75:bd:98:1d:6b:
8e:77:a3:7f:3e:69:14:05:1e:ac:39:75:a3:aa:9e:72:3e:72:
e0:79:7e:6d:d3:17:c8:c5:bd:65:36:d5:75:06:37:1d:ba:c9:
15:f8:20:60:f8:20:42:56:29:5a:33:ab:dc:d4:53:b5:03:6b:
b4:ac:68:79:9d:52:e8:a2:fd:50:db:a5:3a:bc:a9:46:74:ae:
be:6f:9e:48:84:dd:2d:97:b9:0b:84:93:96:f2:8e:85:30:a4:
87:2b:8e:e2:fc:b3:aa:0d:11:ec:0b:2f:b7:74:c6:e9:c6:fd:
de:81:03:6b:47:ae:38:43:ed:bf:df:75:bb:52:78:f4:23:7b:
26:96:7e:ba:db:f6:00:3a:8b:9e:c3:18:90:d1:90:1a:f7:4f:
41:8e:d0:2c:da:a3:3b:97:8b:9e:4d:5d:97:6b:2e:b5:02:7b:
8a:8e:d3:82:82:c6:07:1f:b6:6f:c1:08:2a:25:25:43:68:8d:
1c:3a:98:74:1a:ff:a2:3f:67:12:58:38:37:20:54:37:24:01:
e7:10:c7:f6:83:70:b6:71:4c:09:22:2f:ed:93:ee:d4:26:72:
7a:0c:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:48:56 2025 by rpki-client