Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BQINcDxDu_yXbvOLezqDDhhRjgg.roa
File: BQINcDxDu_yXbvOLezqDDhhRjgg.roa (raw, json)
Hash identifier: zfNQkM2nPqjjZLQMyzSVKaTDDzp3qvP/sYYYLQnLc54=
Subject key identifier: 05:02:0D:70:3C:43:BB:FC:97:6E:F3:8B:7B:3A:83:0E:18:51:8E:08
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0199527F42A546C71AD51A2FFD0CBF571A13
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BQINcDxDu_yXbvOLezqDDhhRjgg.roa
Signing time: Tue 16 Sep 2025 12:28:15 +0000
ROA not before: Tue 16 Sep 2025 12:28:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
46.253.134.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.47.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.149.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.187.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.148.162.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:7f:42:a5:46:c7:1a:d5:1a:2f:fd:0c:bf:57:1a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Sep 16 12:28:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05020d703c43bbfc976ef38b7b3a830e18518e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:2a:45:5e:2c:37:b5:2b:c5:f8:ba:e2:e3:
98:a6:09:a7:35:1b:83:b7:d6:27:32:09:08:87:84:
93:88:0a:51:36:af:09:f7:d4:d6:d9:b8:af:8c:55:
80:34:e6:6b:51:8a:04:38:43:91:9e:b6:46:df:08:
e2:6c:02:c3:28:7a:ff:b2:41:17:3a:9c:4b:83:80:
36:2f:38:f6:a8:a4:ba:b2:c2:fb:74:4e:65:27:19:
c5:75:1c:c5:59:73:48:24:d1:0f:f0:7c:3a:41:5d:
23:af:1a:13:a1:7f:01:d3:b4:89:62:79:d8:cc:76:
f2:f6:41:21:56:00:49:b3:7e:57:e5:f9:09:08:c1:
af:4d:66:78:76:b9:15:65:9a:75:bb:36:50:03:a1:
b5:a7:20:a8:43:1f:d3:e2:2d:71:71:74:5d:42:44:
30:f2:6f:49:4c:4a:ea:b4:2b:2d:3f:d9:89:b8:98:
02:fa:4b:fb:f1:b2:25:e3:de:4c:de:a6:3a:93:97:
65:58:b1:e5:fe:9a:f6:e1:34:d0:a1:32:68:a5:1f:
85:06:41:79:18:63:2f:34:6c:ec:24:0d:6d:b4:da:
e7:1a:19:8c:6b:40:b5:10:f9:c5:00:67:98:c4:b8:
57:a7:f3:d3:fa:22:61:51:4e:0e:cd:d3:c7:47:f5:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:02:0D:70:3C:43:BB:FC:97:6E:F3:8B:7B:3A:83:0E:18:51:8E:08
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BQINcDxDu_yXbvOLezqDDhhRjgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
46.253.134.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.98.0/24
78.128.108.0/23
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.47.0/24
79.124.50.0/23
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.149.0/24
91.148.160.0/24
91.148.168.0/24
91.148.187.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.197.152.0/22
185.232.156.0/23
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
2d:5f:75:a1:56:2a:12:0a:7a:f3:47:c8:a3:d2:bc:21:ca:02:
1b:14:10:70:32:60:3d:3d:2d:11:5c:2f:aa:10:17:01:4c:4f:
e8:30:5a:4f:02:fc:e8:de:e3:bc:9b:ca:c3:86:1b:c8:1e:3a:
ea:33:aa:4b:90:0b:ea:4e:dc:d8:e2:24:c4:2d:23:bc:13:68:
9f:02:40:82:3e:b3:d2:4d:4e:11:d2:39:80:0f:42:e1:ea:4d:
ec:a5:ed:80:50:cc:be:33:25:91:4a:09:bb:b6:1a:47:49:7b:
8c:93:da:a6:24:b4:a5:e6:ec:31:eb:79:95:ff:74:36:ce:b4:
49:92:47:6c:0d:c4:cc:51:5a:0a:2b:b1:42:a8:d5:41:e6:39:
26:d0:cc:fd:c0:c0:4d:b7:4a:a5:76:63:b2:7d:53:f7:9b:46:
0f:c9:cd:26:55:a2:c7:b6:80:9a:71:0e:73:32:17:ea:eb:7f:
f6:09:93:ca:4a:53:5d:c7:fc:af:4a:69:92:a6:a3:bd:72:c6:
cc:a6:f0:3f:df:e5:48:52:16:85:48:0e:d6:ae:d0:6d:77:04:
60:0e:4c:84:7b:67:96:24:0e:9d:47:fa:90:4e:c8:4d:02:75:
3d:c0:86:99:7f:70:4c:81:37:da:b1:bf:b5:c4:2e:25:ae:86:
8e:79:ee:38
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgISAZlSf0KlRsca1Rov/Qy/VxoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwOTE2MTIyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTAyMGQ3MDNjNDNiYmZjOTc2ZWYzOGI3YjNhODMwZTE4NTE4ZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1kqRV4sN7Urxfi64uOYpgmnNRuD
t9YnMgkIh4STiApRNq8J99TW2bivjFWANOZrUYoEOEORnrZG3wjibALDKHr/skEX
OpxLg4A2Lzj2qKS6ssL7dE5lJxnFdRzFWXNIJNEP8Hw6QV0jrxoToX8B07SJYnnY
zHby9kEhVgBJs35X5fkJCMGvTWZ4drkVZZp1uzZQA6G1pyCoQx/T4i1xcXRdQkQw
8m9JTErqtCstP9mJuJgC+kv78bIl495M3qY6k5dlWLHl/pr24TTQoTJopR+FBkF5
GGMvNGzsJA1ttNrnGhmMa0C1EPnFAGeYxLhXp/PT+iJhUU4OzdPHR/W+bwIDAQAB
o4ID9DCCA/AwHQYDVR0OBBYEFAUCDXA8Q7v8l27zi3s6gw4YUY4IMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvQlFJTmNEeER1X3lYYnZPTGV6cUREaGhSamdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICCAYIKwYBBQUHAQcBAf8EggH3MIIB8zCCAeAEAgABMIIB
2AMEAQVoqAMEAAVorgMEAC79hgMEAE1MCAMEAU1MCgMEAE6AAAMEAE6ACAMEAE6A
KwMEAE6APAMEAE6AQwMEAE6ASAMEAE6ATAMEAE6ATwMEAE6AUQMEAE6AXAMEAE6A
XgMEAE6AYgMEAU6AbAMEAE6OAQMEAU6OBAMEAE6OEQMEAE6OFAMEAE6OGDAMAwQA
To4hAwQATo4iMAwDBABOji8DBABOjjADBABOjjwDBABOjj8DBABPfAADBABPfA8D
BAFPfBQwDAMEAE98FwMEAE98HAMEAE98LwMEAU98MjAMAwQAT3xJAwQAT3xKAwQA
T3xMAwQAT3xPAwQAT3xSAwQAUnbgAwQAUnbsAwQAUnbuAwQAUnb0AwQBUnb2AwQA
V/YCAwQAW5SDAwQAW5SMAwQAW5SVAwQAW5SgAwQAW5SoAwQAW5S7AwQBW7/YAwQA
XkiRAwQCXkiUAwQBXkieAwQAgrngAwQAgrniAwQAgrnlMAwDBACCuesDBAGCuewD
BACCufgDBACCufoDBAGw8bAwDAMEBLKEUAMEAbKEVAMEArmUoAMEArnFmAMEAbno
nAMEALnonzAMAwQC2a6UAwQA2a6WMAwDBAPZrpgDBADZrpoDBADZrp8wDQQCAAIw
BwMFACoBh0AwDQYJKoZIhvcNAQELBQADggEBAC1fdaFWKhIKevNHyKPSvCHKAhsU
EHAyYD09LRFcL6oQFwFMT+gwWk8C/Oje47ybysOGG8geOuozqkuQC+pO3NjiJMQt
I7wTaJ8CQII+s9JNThHSOYAPQuHqTeyl7YBQzL4zJZFKCbu2GkdJe4yT2qYktKXm
7DHreZX/dDbOtEmSR2wNxMxRWgorsUKo1UHmOSbQzP3AwE23SqV2Y7J9U/ebRg/J
zSZVose2gJpxDnMyF+rrf/YJk8pKU13H/K9KaZKmo71yxsym8D/f5UhSFoVIDtau
0G13BGAOTIR7Z5YkDp1H+pBOyE0CdT3Ahpl/cEyBN9qxv7XELiWuho557jg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:47 2025 by rpki-client