Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/BttxBx4dfAf29J8yh5S2WluUv68.roa
File: BttxBx4dfAf29J8yh5S2WluUv68.roa (raw, json)
Hash identifier: PIfAFVX85NBU4n/JYCKP96AK8QFT1DZ/mkNh53GIT7w=
Subject key identifier: 06:DB:71:07:1E:1D:7C:07:F6:F4:9F:32:87:94:B6:5A:5B:94:BF:AF
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01A10C32B3A56AA0EE7DADDCB712BBFF8A45
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/BttxBx4dfAf29J8yh5S2WluUv68.roa
Signing time: Mon 05 Oct 2026 13:13:31 +0000
ROA not before: Mon 05 Oct 2026 13:13:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62257
IP address blocks: 45.139.9.0/24 maxlen: 24
91.243.119.0/24 maxlen: 24
185.105.236.0/24 maxlen: 24
194.36.172.0/23 maxlen: 23
194.147.170.0/24 maxlen: 24
2a10:ab00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:32:b3:a5:6a:a0:ee:7d:ad:dc:b7:12:bb:ff:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Oct 5 13:13:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06db71071e1d7c07f6f49f328794b65a5b94bfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:ce:40:d8:f5:15:cf:a8:44:3f:5e:5e:9e:
d6:05:0d:87:42:d3:20:5c:66:db:d6:18:e5:42:ba:
7c:92:7c:a9:0a:5a:3a:59:53:a1:7e:38:05:bd:8e:
89:24:76:fc:5d:34:81:40:39:e9:b2:b8:8b:19:7e:
ce:8d:fc:31:04:e3:bc:d5:b5:6d:45:77:38:51:de:
53:98:0b:da:73:66:e8:e5:29:30:74:27:d0:ee:19:
17:10:63:d9:bb:bc:dc:b8:af:fb:5f:7f:3d:ba:d3:
7a:19:cc:54:6b:8a:2b:26:13:7b:3b:93:92:bf:f0:
13:55:50:8d:90:d3:1f:b3:9d:78:43:2b:b7:86:c6:
93:51:01:1c:e9:59:d0:dd:2c:c5:bc:33:c2:35:4e:
16:9f:95:30:f0:00:dd:af:56:cb:71:e5:af:0c:e1:
e6:4b:87:d6:08:4c:35:20:08:06:fb:84:78:97:9a:
47:b7:3b:f9:25:a1:2a:ee:ba:c1:e9:a2:81:03:3d:
1e:1f:72:f1:66:fd:0d:67:84:2b:ef:39:d1:ae:96:
95:1a:a2:67:4e:78:cf:ca:c8:38:2b:15:fb:9e:4b:
7a:28:ff:8d:f5:7c:ad:5b:ef:2f:91:db:35:d1:34:
36:6a:da:1d:95:83:42:0b:34:57:fa:bd:6b:82:80:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:71:07:1E:1D:7C:07:F6:F4:9F:32:87:94:B6:5A:5B:94:BF:AF
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/BttxBx4dfAf29J8yh5S2WluUv68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
91.243.119.0/24
185.105.236.0/24
194.36.172.0/23
194.147.170.0/24
IPv6:
2a10:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
2c:62:fc:7b:a0:e9:1f:b2:7c:a1:08:96:29:2e:0c:19:e1:76:
1d:3a:3c:05:6e:4e:b5:c4:2a:66:f3:89:7f:aa:3f:de:b2:70:
42:7e:e3:5f:fc:e6:23:33:91:a5:75:8c:33:04:91:09:93:ca:
34:a6:b5:93:40:81:af:05:7d:9a:df:3e:53:bf:35:39:f4:36:
ac:7f:ad:48:0c:42:ac:9e:e7:18:16:c5:5d:37:42:2a:06:c5:
5b:b4:7c:ac:da:65:43:4e:b6:26:dd:f8:33:64:90:43:cd:cc:
92:59:5c:f5:52:4b:a7:03:47:56:22:75:e9:04:a9:fa:50:94:
42:6d:80:e3:93:f6:f4:a5:98:a8:31:3f:fb:9a:18:7d:d7:78:
85:68:00:1f:be:9d:0e:79:59:98:ce:d6:d3:ba:3e:2e:a1:da:
5a:ec:dc:8a:d2:01:30:eb:23:06:6c:89:fb:df:35:81:eb:8c:
7e:e8:5f:f3:91:15:ba:8a:7b:7f:ad:d2:cc:f6:be:a8:45:1f:
30:c4:93:44:a1:1c:fa:2e:1e:fe:d9:3c:3f:6b:f3:6d:a4:9e:
db:51:1c:6f:5c:43:80:7a:18:7f:f5:c2:f0:e4:66:47:0c:3c:
d2:6b:87:10:f0:31:ff:4c:9b:85:87:fe:9d:cc:fc:e3:28:e4:
b8:23:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:13:59 2026 by rpki-client