Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/c6nYAXTgP5BK5aYb7bkmaDW07Wg.roa
File: c6nYAXTgP5BK5aYb7bkmaDW07Wg.roa (raw, json)
Hash identifier: RZNSkKrrP8IgnogyIMJSA+TuN2GUgXf4dHsyPwnMD00=
Subject key identifier: 73:A9:D8:01:74:E0:3F:90:4A:E5:A6:1B:ED:B9:26:68:35:B4:ED:68
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019913C6F83F610121CCAB5F927E99CBF9ED
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/c6nYAXTgP5BK5aYb7bkmaDW07Wg.roa
Signing time: Thu 04 Sep 2025 08:10:30 +0000
ROA not before: Thu 04 Sep 2025 08:10:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273189
IP address blocks: 45.67.246.0/23 maxlen: 23
45.67.246.0/24 maxlen: 24
45.67.247.0/24 maxlen: 24
45.89.82.0/23 maxlen: 23
80.80.90.0/23 maxlen: 23
80.80.90.0/24 maxlen: 24
80.80.91.0/24 maxlen: 24
185.225.246.0/23 maxlen: 23
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:13:c6:f8:3f:61:01:21:cc:ab:5f:92:7e:99:cb:f9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 4 08:10:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73a9d80174e03f904ae5a61bedb9266835b4ed68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:04:ff:e1:c2:28:9f:85:15:7e:2e:98:21:
02:4a:d9:31:df:e7:06:5e:dc:97:59:a8:e5:31:37:
8e:fa:c9:88:1a:de:70:12:aa:09:6e:cd:e8:af:a1:
69:59:6f:ee:70:7e:2b:bc:8b:12:56:ff:26:ea:3d:
55:77:47:2a:1b:ba:37:4f:13:77:1c:82:44:41:69:
d2:b8:32:1d:52:e7:a9:12:64:9b:0a:7c:dc:6c:16:
03:ce:4f:ac:45:6b:58:5d:18:ab:fe:bd:86:13:6e:
c9:b2:ed:fa:78:39:ea:ee:68:14:90:2a:2f:64:04:
d2:59:83:ca:4c:31:5a:e2:40:b0:ae:fc:0b:b4:6f:
7e:a3:39:e5:08:c4:5f:5d:ce:e4:4b:eb:4e:39:3e:
53:d6:ac:c4:00:cb:94:aa:f4:a5:54:bc:b0:1c:f0:
e8:f6:3c:a3:98:62:15:66:78:3a:3e:ac:58:1e:18:
d3:d8:24:1e:04:c3:de:60:e2:ed:e6:56:9d:9b:3a:
ff:00:8d:22:ec:ea:4e:77:37:5f:66:30:9c:a3:0f:
d3:09:be:f9:fd:d6:ae:ec:ff:dd:dc:fb:fc:8b:7f:
54:31:af:4c:42:60:fb:6e:7b:da:4e:76:4d:6d:db:
1f:00:48:44:0b:ff:b4:7f:51:71:0a:a6:02:75:12:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A9:D8:01:74:E0:3F:90:4A:E5:A6:1B:ED:B9:26:68:35:B4:ED:68
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/c6nYAXTgP5BK5aYb7bkmaDW07Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.246.0/23
45.89.82.0/23
80.80.90.0/23
185.225.246.0/23
Signature Algorithm: sha256WithRSAEncryption
93:e4:04:a0:6b:94:ba:d5:0b:e5:e3:59:92:43:28:21:7b:bc:
ed:3d:59:d2:5d:c0:74:b6:65:3b:2c:82:5f:d5:e1:7f:bc:9b:
01:02:40:2d:8a:6b:a0:14:76:57:ad:31:06:66:af:9d:f0:6e:
68:8b:6d:5b:b9:65:ca:c9:8c:fa:f6:b7:c5:e7:ee:63:d1:c0:
ea:56:4b:e8:e1:f7:95:a5:d8:c5:25:7a:0d:a0:64:cf:d1:32:
38:b1:da:af:57:9a:d4:15:93:4b:65:81:3f:d5:6f:d6:4a:9a:
63:46:17:69:55:f7:dc:01:ac:ba:6d:04:01:d0:4f:42:99:7d:
92:49:18:f2:50:e9:2f:41:48:fc:47:97:20:08:9e:5d:78:02:
87:35:7f:bb:04:3b:85:42:69:5a:95:9a:a9:64:18:4d:3b:ba:
f7:0c:49:6d:8e:92:c3:dc:b2:eb:94:6d:43:15:23:dc:2f:82:
96:ee:fb:3d:93:fe:65:37:f3:66:aa:7f:74:a8:d1:d8:65:7d:
79:55:df:0f:4f:5d:7f:b2:14:e0:9d:00:d0:01:de:8c:ab:57:
21:86:53:bb:de:9e:67:f0:a1:e9:d2:cb:85:5c:40:c7:e3:b2:
ee:89:d1:74:7d:1b:bc:b9:59:3d:39:dc:a6:2a:cb:c0:2a:65:
66:fb:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:06:00 2025 by rpki-client