Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/btsbBPG_XDlQ3e5fMtVbLStYwh8.roa
File: btsbBPG_XDlQ3e5fMtVbLStYwh8.roa (raw, json)
Hash identifier: XdV1d+wt2UtCqheQtg2DA5+JgtI45RV6xN6JsyMCDQs=
Subject key identifier: 6E:DB:1B:04:F1:BF:5C:39:50:DD:EE:5F:32:D5:5B:2D:2B:58:C2:1F
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 019F225FAECB5F30C3CAA35CBF269FE2AC10
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/btsbBPG_XDlQ3e5fMtVbLStYwh8.roa
Signing time: Thu 02 Jul 2026 10:28:43 +0000
ROA not before: Thu 02 Jul 2026 10:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200583
IP address blocks: 185.34.248.0/22 maxlen: 22
185.34.248.0/24 maxlen: 24
185.34.251.0/24 maxlen: 24
185.102.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:5f:ae:cb:5f:30:c3:ca:a3:5c:bf:26:9f:e2:ac:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Jul 2 10:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6edb1b04f1bf5c3950ddee5f32d55b2d2b58c21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:be:b4:f8:0e:18:d5:fd:07:29:c9:93:2d:
65:50:d6:c7:6d:cb:db:4b:02:c2:06:47:b7:61:ad:
a9:c8:cb:8e:bd:63:2d:75:eb:a6:6e:b5:b5:08:3e:
ef:c4:b9:fe:81:c7:d7:fc:51:73:36:53:f7:e1:01:
18:d5:21:2f:ff:49:f1:34:f3:ea:65:9a:11:a2:25:
f8:24:cc:58:89:e9:ff:d4:e6:48:90:10:f6:cd:39:
e2:0c:10:e3:8a:0f:49:2b:3d:fb:6c:3b:fe:11:8d:
69:c4:9a:ea:75:d6:8a:b3:bf:cb:c6:fe:19:b4:8d:
b6:7d:7c:da:6e:dc:1a:45:76:d2:21:b0:b7:38:b1:
4f:61:98:6e:a3:a1:d3:f2:24:c4:36:cd:a8:59:c5:
99:43:b1:0d:8d:23:0e:09:7a:60:0e:77:74:2b:fa:
3d:5a:e9:53:9e:2c:ac:3c:8e:40:42:5c:83:25:b4:
97:0b:3f:1e:74:ee:56:76:35:6e:ce:69:57:dc:cf:
e6:9b:bb:3c:ca:80:cb:11:1a:cb:30:02:47:95:52:
a7:1e:83:41:97:2c:12:8c:92:60:64:75:4c:42:14:
2b:8e:16:21:e6:ad:12:1f:db:5f:b2:f5:11:81:6a:
98:65:01:3c:27:bf:5b:97:62:fd:4e:0a:34:34:20:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DB:1B:04:F1:BF:5C:39:50:DD:EE:5F:32:D5:5B:2D:2B:58:C2:1F
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/btsbBPG_XDlQ3e5fMtVbLStYwh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.248.0/22
185.102.41.0/24
Signature Algorithm: sha256WithRSAEncryption
18:38:49:3b:59:30:29:4e:a0:35:41:c6:8b:ba:e3:f5:b3:b0:
a6:a8:90:dd:73:c9:00:0c:82:46:e8:56:73:fe:fd:be:38:84:
1e:bf:42:54:ff:7c:5d:e6:ed:02:36:ae:a6:37:5f:77:ea:bf:
8f:bc:ab:f8:25:32:3a:c1:ee:57:01:ad:b6:57:bd:94:98:35:
d1:fc:8a:05:58:74:98:f4:5c:ff:78:9e:9c:0d:8c:05:93:73:
c5:1d:d8:ee:79:14:bb:81:c1:ba:79:20:76:8f:b1:83:6f:01:
7d:8e:22:3f:52:de:67:87:4e:45:15:eb:5f:80:87:c4:98:10:
a5:91:c5:10:d0:92:f7:96:04:0d:7c:32:03:d3:6e:36:1c:f4:
5d:8e:76:ad:a0:73:76:3f:9d:84:1f:de:56:ec:b8:78:62:c8:
48:33:bf:07:a2:11:23:8f:24:ef:7d:53:22:38:1f:2e:2c:34:
8f:81:3d:15:6d:fd:23:bd:5a:e0:cd:6f:01:75:24:f2:a1:9f:
9b:86:9d:7f:4c:fd:1d:a3:22:d9:67:23:7d:73:a9:95:49:86:
27:2e:07:82:eb:49:0b:af:9b:e8:75:9e:7f:f1:e3:53:c7:55:
4f:6b:e9:db:ad:2b:13:9d:f2:48:db:4f:dd:59:af:f5:a6:c8:
85:4f:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:58 2026 by rpki-client