Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/BTuta6QVQkGM6L3B3Sm-N7jad5I.roa
File: BTuta6QVQkGM6L3B3Sm-N7jad5I.roa (raw, json)
Hash identifier: vqTWi8FspAWkxHbO0yFCsTXlFp/zCWuF0Ro/jOUWc7Y=
Subject key identifier: 05:3B:AD:6B:A4:15:42:41:8C:E8:BD:C1:DD:29:BE:37:B8:DA:77:92
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 01A183756B5EF8495F5B39768EE60751C69D
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/BTuta6QVQkGM6L3B3Sm-N7jad5I.roa
Signing time: Wed 28 Oct 2026 17:01:12 +0000
ROA not before: Wed 28 Oct 2026 17:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214427
IP address blocks: 31.171.211.0/24 maxlen: 24
2a01:fa00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:75:6b:5e:f8:49:5f:5b:39:76:8e:e6:07:51:c6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Oct 28 17:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=053bad6ba41542418ce8bdc1dd29be37b8da7792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:b3:ea:b6:b8:79:0a:07:83:c1:4b:d6:71:
fd:0f:a3:1f:76:6a:4b:3a:b7:62:de:83:71:01:0d:
01:94:4f:df:75:66:21:7b:c6:ae:2e:c2:ce:e6:67:
ae:05:9b:4e:d2:67:25:74:d3:25:84:21:19:7e:f6:
aa:aa:0c:ed:44:7c:d3:5d:71:29:c9:4c:98:2b:17:
b5:81:f3:98:bd:55:cf:dc:cc:6a:1c:44:14:b4:b1:
52:06:bb:ac:cd:84:37:d5:b5:f6:81:e5:5a:39:b4:
aa:4a:64:a8:1c:f0:02:e6:5d:a9:0e:de:9a:08:77:
37:96:b3:ef:c0:b5:c4:6d:3f:de:04:66:f1:38:60:
7c:f9:1f:47:76:35:97:10:e4:05:9d:bd:d5:7c:ce:
af:aa:bb:2e:4f:ab:03:54:d0:38:bb:d8:54:75:f1:
18:f4:54:b5:f0:54:2c:e6:c6:17:66:2e:15:b3:4f:
40:10:94:99:6a:36:b9:e0:4a:c6:78:cc:79:8e:ca:
36:49:a4:15:4c:db:46:66:3b:b4:7f:72:c6:52:ee:
a4:c0:4c:19:ff:ef:6e:76:93:3a:07:fb:9c:b1:c4:
18:3e:69:ad:39:b5:a9:df:59:2e:ed:22:64:1c:5e:
ee:31:ac:06:74:b9:d2:2b:3c:a1:eb:61:ce:25:4f:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:AD:6B:A4:15:42:41:8C:E8:BD:C1:DD:29:BE:37:B8:DA:77:92
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/BTuta6QVQkGM6L3B3Sm-N7jad5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.211.0/24
IPv6:
2a01:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
c8:c1:20:39:53:99:8b:70:59:b3:14:bf:4b:00:8e:32:c6:a0:
a7:1c:16:66:89:39:49:ec:8b:9a:4d:ad:4a:20:67:79:7a:41:
1f:15:7e:e5:14:27:89:b1:68:68:60:ca:d1:ce:fc:c6:cf:4a:
f8:19:26:e1:d5:41:16:ce:c1:11:be:27:22:b1:d7:16:5c:4e:
5b:b8:ff:5f:f3:9f:0e:3a:56:46:94:81:58:10:4f:81:0f:dc:
36:6d:27:92:c3:e4:56:2b:18:90:ec:b8:1b:d9:04:22:33:73:
a1:ee:bf:52:73:50:28:0c:29:fa:60:8c:90:da:5a:7d:76:ae:
a2:8d:ab:e1:7e:1e:28:02:0f:57:d0:51:23:aa:f5:2a:32:66:
f4:e1:d2:11:f6:65:9d:39:16:a9:a5:cc:99:d2:8e:58:92:ac:
32:c3:9d:1d:b3:35:87:3c:3c:88:fe:12:0c:ba:5c:cb:d2:6f:
d6:5b:d4:2d:2f:75:fb:d2:e9:18:9f:c0:d6:6e:38:7b:3b:db:
1b:b1:ef:31:70:8e:02:86:8e:3d:3b:13:f4:7b:b1:b1:39:47:
bb:c3:80:dd:36:b7:2e:8b:83:0b:62:9c:a0:68:43:30:4c:11:
7d:03:f1:63:c5:44:50:57:f4:d9:51:db:4f:ff:84:56:af:79:
b9:d4:1f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:31:52 2026 by rpki-client