Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Bz-AfMa85eWkZNOrQ8AduwTrGHk.roa
File: Bz-AfMa85eWkZNOrQ8AduwTrGHk.roa (raw, json)
Hash identifier: hYYEh5FGyL5aK//nZPDyJMy19miNyCvxO45xo/IvtK4=
Subject key identifier: 07:3F:80:7C:C6:BC:E5:E5:A4:64:D3:AB:43:C0:1D:BB:04:EB:18:79
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019D678C277EB31D86883F6EFD28D043B12F
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Bz-AfMa85eWkZNOrQ8AduwTrGHk.roa
Signing time: Tue 07 Apr 2026 10:45:31 +0000
ROA not before: Tue 07 Apr 2026 10:45:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 131.222.224.0/24 maxlen: 24
131.222.248.0/22 maxlen: 22
203.202.233.0/24 maxlen: 24
2a05:d740::/30 maxlen: 30
2a05:d744::/30 maxlen: 30
2a06:e900::/30 maxlen: 30
2a06:e904::/30 maxlen: 30
2a07:4a00::/30 maxlen: 30
2a07:4a04::/30 maxlen: 30
2a0a:37c0::/30 maxlen: 30
2a0a:37c4::/30 maxlen: 30
2a0b:9800::/30 maxlen: 30
2a0b:9804::/30 maxlen: 30
2a0b:a280::/30 maxlen: 30
2a0b:a284::/30 maxlen: 30
2a0b:a300::/30 maxlen: 30
2a0b:a304::/30 maxlen: 30
2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0c:74c0::/30 maxlen: 30
2a0c:74c4::/30 maxlen: 30
2a0c:7540::/30 maxlen: 30
2a0c:7544::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0d:88c0::/30 maxlen: 30
2a0d:88c4::/30 maxlen: 30
2a0f:1180::/30 maxlen: 30
2a0f:1184::/30 maxlen: 30
2a0f:2380::/30 maxlen: 30
2a0f:2384::/30 maxlen: 30
2a0f:3380::/30 maxlen: 30
2a0f:3384::/30 maxlen: 30
2a0f:4580::/30 maxlen: 30
2a0f:4584::/30 maxlen: 30
2a0f:4680::/30 maxlen: 30
2a0f:4684::/30 maxlen: 30
2a0f:5580::/30 maxlen: 30
2a0f:5584::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/30 maxlen: 30
2a0f:7300::/30 maxlen: 30
2a0f:7304::/30 maxlen: 30
2a0f:7c80::/30 maxlen: 30
2a0f:7c84::/30 maxlen: 30
2a0f:9fc0::/30 maxlen: 30
2a0f:9fc4::/30 maxlen: 30
2a0f:a140::/30 maxlen: 30
2a0f:a144::/30 maxlen: 30
2a0f:a500::/30 maxlen: 30
2a0f:a504::/30 maxlen: 30
2a0f:a700::/30 maxlen: 30
2a0f:a704::/30 maxlen: 30
2a0f:c780::/30 maxlen: 30
2a0f:c784::/30 maxlen: 30
2a14:4080::/30 maxlen: 30
2a14:4084::/30 maxlen: 30
2a14:4380::/30 maxlen: 30
2a14:4384::/30 maxlen: 30
2a14:4480::/30 maxlen: 30
2a14:4484::/30 maxlen: 30
2a14:4980::/30 maxlen: 30
2a14:4984::/30 maxlen: 30
2a14:4a80::/30 maxlen: 30
2a14:4a84::/30 maxlen: 30
2a14:4b80::/30 maxlen: 30
2a14:4b84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:8c:27:7e:b3:1d:86:88:3f:6e:fd:28:d0:43:b1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Apr 7 10:45:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073f807cc6bce5e5a464d3ab43c01dbb04eb1879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:4e:c7:64:86:8d:3b:ee:a2:07:04:ed:88:
ad:9a:fd:27:e0:d4:1f:dc:de:ce:4c:a4:a0:c4:f7:
be:a0:e8:f3:89:22:11:f4:50:ae:0f:49:a4:6e:3b:
65:6c:59:a5:22:fd:0c:f0:7c:50:c3:2d:45:35:47:
ee:6b:45:9f:3d:72:2a:ea:51:5e:fa:1c:5a:9c:51:
2a:2b:b8:78:1d:9f:d4:f5:2c:0a:a8:f7:92:dc:6b:
8e:8f:eb:50:8a:02:3b:74:e3:25:0f:47:65:bb:1b:
b0:96:df:f4:ff:a7:d1:9b:9c:02:cb:3c:1a:7e:3f:
d9:42:b6:ab:db:1b:4c:5f:0a:75:53:ac:cf:67:6c:
79:48:54:f3:86:0e:48:20:f4:d4:4e:23:0a:f2:76:
81:6a:bf:51:b2:76:be:81:be:8f:7f:ef:35:ab:92:
af:f8:8b:6b:99:49:f4:07:b3:f7:8c:4c:e3:39:3e:
22:0f:9b:06:68:61:7a:52:0b:62:30:be:89:b2:b6:
a8:37:49:8e:a4:03:0e:ec:4b:03:24:d4:f5:c6:89:
00:57:ce:1d:e3:87:2d:8e:67:d8:85:27:6f:07:33:
c2:a5:57:0a:f2:0a:60:9b:a0:94:d1:21:b4:4d:b7:
5a:ba:56:a5:68:40:e8:ea:18:e2:3b:fe:2f:a3:0b:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:80:7C:C6:BC:E5:E5:A4:64:D3:AB:43:C0:1D:BB:04:EB:18:79
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Bz-AfMa85eWkZNOrQ8AduwTrGHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.224.0/24
131.222.248.0/22
203.202.233.0/24
IPv6:
2a05:d740::/29
2a06:e900::/29
2a07:4a00::/29
2a0a:37c0::/29
2a0b:9800::/29
2a0b:a280::/29
2a0b:a300::/29
2a0c:7440::/29
2a0c:74c0::/29
2a0c:7540::/29
2a0d:2cc0::/29
2a0d:88c0::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:3380::/29
2a0f:4580::/29
2a0f:4680::/29
2a0f:5580::/29
2a0f:7100::/29
2a0f:7300::/29
2a0f:7c80::/29
2a0f:9fc0::/29
2a0f:a140::/29
2a0f:a500::/29
2a0f:a700::/29
2a0f:c780::/29
2a14:4080::/29
2a14:4380::/29
2a14:4480::/29
2a14:4980::/29
2a14:4a80::/29
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:3c:3e:a3:2d:2d:5c:8b:6e:0c:99:3f:fc:cf:d7:b3:f1:1f:
6f:bc:72:54:72:7c:81:90:76:8f:bc:f2:18:2d:ac:b7:20:66:
ce:b4:b2:26:ad:48:de:2e:b8:29:07:e8:43:b2:a8:a4:4c:7a:
ee:15:8b:d4:56:38:9b:b5:fe:27:b6:45:69:d0:f7:38:fc:c6:
42:78:43:fd:cd:aa:cd:a8:3d:1f:d3:d9:5e:23:97:5c:78:7e:
b7:db:44:92:89:be:44:f6:b1:70:fd:8f:9d:b2:a5:0e:50:e8:
b8:b8:da:b2:09:ba:de:f2:90:63:23:ce:55:a5:23:7a:4a:37:
9b:be:02:90:f7:e0:50:9b:64:1f:03:93:28:70:2e:a9:12:8b:
6c:01:80:db:91:d5:4c:34:4b:fa:6f:72:33:4f:4d:3d:6d:2d:
da:da:b8:05:21:75:55:04:f4:52:08:e4:b2:90:ed:9f:6a:1c:
0e:f2:41:e3:25:64:fa:ec:fa:b0:5c:1c:5e:6f:c2:e6:34:f4:
c8:12:8b:05:3f:d1:4a:f3:38:6b:b8:ca:5f:99:b6:9b:d9:75:
33:db:9b:35:ea:c7:c0:5a:ed:31:1a:08:22:68:ca:df:c7:35:
ce:18:07:e1:d3:3a:a3:8e:c1:a8:88:a3:b4:2c:ac:01:db:fe:
0b:48:91:04
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgISAZ1njCd+sx2GiD9u/SjQQ7EvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwNDA3MTA0NTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzNmODA3Y2M2YmNlNWU1YTQ2NGQzYWI0M2MwMWRiYjA0ZWIxODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1JOx2SGjTvuogcE7Yitmv0n4NQf
3N7OTKSgxPe+oOjziSIR9FCuD0mkbjtlbFmlIv0M8HxQwy1FNUfua0WfPXIq6lFe
+hxanFEqK7h4HZ/U9SwKqPeS3GuOj+tQigI7dOMlD0dluxuwlt/0/6fRm5wCyzwa
fj/ZQrar2xtMXwp1U6zPZ2x5SFTzhg5IIPTUTiMK8naBar9Rsna+gb6Pf+81q5Kv
+ItrmUn0B7P3jEzjOT4iD5sGaGF6UgtiML6JsraoN0mOpAMO7EsDJNT1xokAV84d
44ctjmfYhSdvBzPCpVcK8gpgm6CU0SG0TbdaulalaEDo6hjiO/4vowt/twIDAQAB
o4IDBTCCAwEwHQYDVR0OBBYEFAc/gHzGvOXlpGTTq0PAHbsE6xh5MB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvQnotQWZNYTg1ZVdrWk5PclE4QWR1d1RyR0hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBGQYIKwYBBQUHAQcBAf8EggEIMIIBBDAYBAIAATASAwQA
g97gAwQCg974AwQAy8rpMIHnBAIAAjCB4AMFAyoF10ADBQMqBukAAwUDKgdKAAMF
AyoKN8ADBQMqC5gAAwUDKguigAMFAyoLowADBQMqDHRAAwUDKgx0wAMFAyoMdUAD
BQMqDSzAAwUDKg2IwAMFAyoPEYADBQMqDyOAAwUDKg8zgAMFAyoPRYADBQMqD0aA
AwUDKg9VgAMFAyoPcQADBQMqD3MAAwUDKg98gAMFAyoPn8ADBQMqD6FAAwUDKg+l
AAMFAyoPpwADBQMqD8eAAwUDKhRAgAMFAyoUQ4ADBQMqFESAAwUDKhRJgAMFAyoU
SoADBQMqFEuAMA0GCSqGSIb3DQEBCwUAA4IBAQAvPD6jLS1ci24MmT/8z9ez8R9v
vHJUcnyBkHaPvPIYLay3IGbOtLImrUjeLrgpB+hDsqikTHruFYvUVjibtf4ntkVp
0Pc4/MZCeEP9zarNqD0f09leI5dceH6320SSib5E9rFw/Y+dsqUOUOi4uNqyCbre
8pBjI85VpSN6SjebvgKQ9+BQm2QfA5MocC6pEotsAYDbkdVMNEv6b3IzT009bS3a
2rgFIXVVBPRSCOSykO2fahwO8kHjJWT67PqwXBxeb8LmNPTIEosFP9FK8zhruMpf
mbab2XUz25s16sfAWu0xGggiaMrfxzXOGAfh0zqjjsGoiKO0LKwB2/4LSJEE
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:46 2026 by rpki-client