Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bjyYWdkADUUU5--9byXSGpinlbk.roa
File: bjyYWdkADUUU5--9byXSGpinlbk.roa (raw, json)
Hash identifier: y3k4Hl8uzab5qTjkMTM06tHlXbB7HxZzO1gUOPG/GOw=
Subject key identifier: 6E:3C:98:59:D9:00:0D:45:14:E7:EF:BD:6F:25:D2:1A:98:A7:95:B9
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A080F14F2E8491EE88DE162E89FE1706CD
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bjyYWdkADUUU5--9byXSGpinlbk.roa
Signing time: Tue 08 Sep 2026 12:14:53 +0000
ROA not before: Tue 08 Sep 2026 12:14:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34665
IP address blocks: 5.8.8.0/22 maxlen: 22
5.8.8.0/23 maxlen: 23
5.8.8.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.10.0/24 maxlen: 24
5.8.11.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.16.0/24 maxlen: 24
5.8.18.0/24 maxlen: 24
5.8.48.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/24 maxlen: 24
5.8.49.0/24 maxlen: 24
5.8.50.0/23 maxlen: 23
5.8.50.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.8.52.0/22 maxlen: 22
5.8.52.0/23 maxlen: 23
5.8.52.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.4.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.101.6.0/24 maxlen: 24
5.101.7.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.101.64.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.101.90.0/23 maxlen: 23
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.46.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.48.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.60.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.188.204.0/23 maxlen: 23
5.188.208.0/23 maxlen: 23
5.188.210.0/24 maxlen: 24
5.188.211.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.189.248.0/22 maxlen: 24
31.44.188.0/22 maxlen: 32
31.184.192.0/22 maxlen: 22
31.184.192.0/23 maxlen: 23
31.184.192.0/24 maxlen: 24
31.184.193.0/24 maxlen: 24
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.196.0/24 maxlen: 24
31.184.197.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.198.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
31.184.240.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
37.9.48.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.56.0/22 maxlen: 22
37.139.56.0/23 maxlen: 23
37.139.56.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.58.0/24 maxlen: 24
37.139.59.0/24 maxlen: 24
46.161.0.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.8.0/24 maxlen: 24
46.161.10.0/24 maxlen: 24
46.161.14.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
46.161.28.0/22 maxlen: 22
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/23 maxlen: 23
46.161.50.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
91.243.32.0/22 maxlen: 22
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.50.0/23 maxlen: 23
91.243.50.0/24 maxlen: 24
91.243.51.0/24 maxlen: 24
91.243.52.0/22 maxlen: 22
91.243.56.0/22 maxlen: 22
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.0.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/23 maxlen: 23
95.215.2.0/24 maxlen: 24
95.215.3.0/24 maxlen: 24
146.185.223.0/24 maxlen: 24
146.185.224.0/21 maxlen: 21
146.185.239.0/24 maxlen: 24
188.143.232.0/22 maxlen: 22
188.143.232.0/23 maxlen: 23
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
193.93.192.0/22 maxlen: 22
195.2.240.0/23 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:f1:4f:2e:84:91:ee:88:de:16:2e:89:fe:17:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 8 12:14:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e3c9859d9000d4514e7efbd6f25d21a98a795b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:87:71:48:96:e3:d7:04:e6:eb:67:46:a5:
15:b6:69:ca:ee:d9:80:a9:43:0d:b4:e1:f4:b6:5b:
1f:33:03:85:ad:80:c0:b7:0d:89:03:ae:8a:4d:b8:
ce:d5:44:d3:c2:17:ef:97:3c:f8:9a:7a:20:16:69:
5d:91:49:9f:45:3b:21:f5:37:e0:a7:69:13:7f:81:
59:f7:7d:ce:e9:ef:72:dd:41:7c:b2:9f:41:00:9d:
8b:8e:ba:0e:38:b7:5d:95:26:f8:69:bb:21:66:b6:
9e:bb:d7:94:aa:99:ad:d6:43:78:7e:ea:f0:b6:64:
f6:b5:b1:cd:fb:f2:6a:0b:d8:ee:16:1d:a9:17:a0:
98:22:f5:cd:89:ca:01:44:51:26:50:9b:9d:e3:56:
92:37:c9:a6:8f:39:6a:a0:4e:e3:1a:f9:92:59:47:
77:71:ca:2e:23:f0:41:ed:3f:9b:4e:d6:bd:8b:79:
9f:95:d5:b9:42:47:dd:ac:ff:54:53:f4:8c:e9:b2:
b6:05:4a:7e:18:84:a5:ee:7a:68:60:82:62:12:55:
a4:d1:ad:20:b7:49:8f:aa:b7:8b:ce:8e:38:c6:29:
52:ee:2a:19:f7:0d:66:16:89:29:d9:f8:51:b4:c5:
1a:67:f0:d4:6d:04:2b:fc:a8:93:f7:0a:1c:7a:c1:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:98:59:D9:00:0D:45:14:E7:EF:BD:6F:25:D2:1A:98:A7:95:B9
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bjyYWdkADUUU5--9byXSGpinlbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0-5.8.16.255
5.8.18.0/24
5.8.48.0/21
5.8.60.0/23
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0-5.188.49.255
5.188.51.0/24
5.188.60.0/23
5.188.166.0/24
5.188.204.0/23
5.188.208.0/22
5.188.223.0/24
5.188.233.0-5.188.235.255
5.189.248.0/22
31.44.188.0/22
31.184.192.0/21
31.184.238.0-31.184.241.255
31.184.243.0/24
37.9.48.0/24
37.139.53.0/24
37.139.56.0/22
46.161.0.0/24
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.20.0/22
46.161.28.0-46.161.35.255
46.161.44.0-46.161.51.255
91.243.32.0/22
91.243.48.0-91.243.61.255
95.215.0.0/22
146.185.223.0-146.185.231.255
146.185.239.0/24
188.143.232.0/22
193.93.192.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
03:df:b4:e3:3e:cd:aa:bf:89:f7:ff:20:66:b6:4a:48:e1:63:
9c:e6:76:82:36:9b:8d:a7:94:79:b1:d3:79:0f:85:d0:86:b1:
48:64:ce:0b:c0:f3:05:c5:f4:4c:55:30:2a:3b:c0:46:c2:35:
c8:98:e9:eb:9c:10:80:37:72:35:08:f8:b1:bd:ab:4c:ea:4a:
86:c4:94:5a:ac:5d:d7:9d:7f:e6:c4:fb:66:0a:37:d7:a6:c1:
03:f8:40:86:37:1f:10:0e:14:01:3b:f0:11:ce:33:22:0b:34:
61:08:01:91:a8:b3:0e:ee:52:0a:00:4b:2b:da:ac:79:bf:42:
34:26:3e:05:4c:7b:8c:5d:78:9b:dd:76:45:73:8b:9d:6e:7a:
9e:18:3a:de:dc:1f:49:89:0b:48:87:1f:42:d7:96:7f:f6:c0:
2b:7a:a8:7d:40:be:d5:72:c7:03:26:de:4f:0a:23:5b:aa:6e:
cc:33:f1:2f:a9:d2:68:0c:ab:3f:45:ed:1b:ef:6f:2b:ad:e7:
60:de:9d:88:bc:a6:82:cc:56:9f:f9:ef:80:a5:e5:68:9d:f8:
6f:c5:52:0d:89:26:89:45:d2:3c:75:7d:a2:cd:d2:7e:c9:a0:
e7:0d:66:a0:2b:e3:3a:cb:09:63:5b:58:ba:76:e7:db:69:5b:
8b:a0:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:52 2026 by rpki-client