Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/BTzuCE44rDIH7Pz-rptrI7qeNcc.roa
File: BTzuCE44rDIH7Pz-rptrI7qeNcc.roa (raw, json)
Hash identifier: V5yrPjJe+cVyMOCOK0ABvwS7gMjw/S3V3X3G/kpSiFA=
Subject key identifier: 05:3C:EE:08:4E:38:AC:32:07:EC:FC:FE:AE:9B:6B:23:BA:9E:35:C7
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019F1F1D2E333389F393DC872326CFCF647E
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/BTzuCE44rDIH7Pz-rptrI7qeNcc.roa
Signing time: Wed 01 Jul 2026 19:17:13 +0000
ROA not before: Wed 01 Jul 2026 19:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214640
IP address blocks: 45.67.15.0/24 maxlen: 24
78.109.16.0/23 maxlen: 23
82.197.73.0/24 maxlen: 24
95.141.241.0/24 maxlen: 24
185.113.11.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a13:7c80::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:1d:2e:33:33:89:f3:93:dc:87:23:26:cf:cf:64:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jul 1 19:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=053cee084e38ac3207ecfcfeae9b6b23ba9e35c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:06:35:d7:61:88:4f:e8:4d:ee:29:00:a6:
4c:44:ab:de:9f:3c:71:b8:3b:49:70:0e:0c:de:5e:
ea:84:07:23:ed:31:9c:6b:3e:38:a0:6e:b2:5c:cd:
8e:8b:a6:b7:80:bc:eb:e7:a6:a2:61:8e:59:9f:f2:
0e:fd:24:c6:e3:57:4e:be:18:35:e9:f2:d2:03:9c:
1d:6e:9c:d6:a1:55:93:f4:18:d3:19:58:72:18:eb:
8b:b3:d0:d9:f3:f1:b1:80:75:37:b9:69:48:5a:de:
ca:5c:fd:13:2c:a3:0e:76:37:2e:ae:8e:69:a5:60:
68:8d:ba:33:ae:86:1d:93:d4:67:cd:ed:f9:f9:bc:
8c:ec:da:53:fa:30:5c:7f:9f:9a:82:21:6d:2e:84:
19:d4:03:c3:18:af:56:b1:fb:d3:96:ce:e4:1f:79:
3c:2e:6f:d4:1c:f0:f0:91:f8:8b:a0:79:9c:4a:d0:
aa:15:16:0c:4b:dd:2e:09:94:a1:3f:78:b8:8c:e3:
47:c5:8c:9f:ef:43:03:7d:25:29:ad:4e:39:de:ec:
f3:0e:2e:63:96:eb:47:28:b2:8d:e8:09:22:6e:5b:
39:e0:ca:5c:19:c2:74:83:f3:ee:f7:8b:b0:b5:ec:
d2:98:08:92:b1:68:f1:09:06:f4:00:99:6d:4a:6a:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:EE:08:4E:38:AC:32:07:EC:FC:FE:AE:9B:6B:23:BA:9E:35:C7
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/BTzuCE44rDIH7Pz-rptrI7qeNcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.15.0/24
78.109.16.0/23
82.197.73.0/24
95.141.241.0/24
185.113.11.0/24
193.53.40.0/24
IPv6:
2a13:7c80::/30
Signature Algorithm: sha256WithRSAEncryption
0b:e1:4a:8e:6b:88:bb:01:52:4f:80:87:21:e4:4f:f0:9d:39:
58:35:3e:b1:aa:cc:80:7a:4a:96:1b:8e:32:79:34:23:10:04:
d6:3d:a0:1b:d8:dd:82:8a:39:84:9f:9c:2b:ad:b3:3b:2f:59:
95:05:8e:22:9f:88:e0:71:aa:9a:ce:2a:d1:bb:90:6d:c4:6f:
82:ea:74:a3:93:b1:7f:64:8f:77:b2:6b:78:dc:16:94:d9:7a:
6f:b4:29:39:4f:a4:e6:1b:c2:13:0b:fe:7c:f2:0c:1b:20:d3:
d1:4b:3c:f8:2b:0a:e2:ae:70:72:06:e8:2d:5e:eb:d7:c8:a0:
f1:ad:e6:83:d4:b5:d4:3c:1a:77:7e:fb:9e:d2:ac:b5:5a:42:
a8:db:f6:7a:38:84:1a:8a:48:9f:cc:c1:66:3d:5c:33:12:16:
52:0b:ce:15:ca:44:e0:a0:aa:59:93:d2:34:1c:0d:2c:ac:09:
9c:38:8b:ba:16:f1:f3:34:69:3b:e6:f4:14:40:43:22:67:85:
cd:6b:e6:ec:1f:54:2a:b0:61:85:1e:01:39:06:0c:b5:f9:24:
cf:b4:7e:91:df:39:0f:b6:de:74:c0:53:33:26:9d:cd:75:12:
b7:69:31:a5:02:3c:90:44:a7:03:6d:71:7e:d0:d6:55:65:e3:
95:4f:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:33:50 2026 by rpki-client