Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BZtRfja3RgfNXNbj23u0avp7QDU.roa
File: BZtRfja3RgfNXNbj23u0avp7QDU.roa (raw, json)
Hash identifier: ibGdtbnR5cRLiD/SYJ+r5Re2BqZdjaPJZd6sI1FYhBo=
Subject key identifier: 05:9B:51:7E:36:B7:46:07:CD:5C:D6:E3:DB:7B:B4:6A:FA:7B:40:35
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019E90B214AD07315FAD4C01DB4E7C772CDC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BZtRfja3RgfNXNbj23u0avp7QDU.roa
Signing time: Thu 04 Jun 2026 03:34:10 +0000
ROA not before: Thu 04 Jun 2026 03:34:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62390
IP address blocks: 185.231.174.0/24 maxlen: 24
185.231.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:b2:14:ad:07:31:5f:ad:4c:01:db:4e:7c:77:2c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 4 03:34:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=059b517e36b74607cd5cd6e3db7bb46afa7b4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:2e:a6:af:a5:ca:61:22:0b:fb:75:58:14:
c5:1c:7f:bc:f2:3e:cb:15:46:98:89:e5:52:12:ff:
5a:2d:28:69:fb:4b:b0:ca:18:f7:7b:99:bf:15:33:
c9:75:f6:d9:f3:fa:c9:c7:a5:8f:93:af:50:da:bd:
89:7d:b3:fd:46:54:4f:e2:ee:0a:2e:3c:41:2a:71:
2f:ea:15:08:47:f2:26:63:e9:6f:53:1b:72:5e:11:
b4:32:65:27:17:57:d5:ce:11:40:4e:db:ee:ce:33:
6a:0f:60:07:3d:00:17:91:d7:b1:2d:1e:55:50:d6:
83:0d:4d:a4:c4:d9:db:4e:46:aa:fc:eb:fc:da:5b:
fd:e2:45:1b:36:af:90:48:fc:82:bf:18:98:d0:8a:
96:38:0a:9c:4b:b8:cf:95:b9:60:1d:13:7d:63:68:
b8:e9:e8:20:f6:67:cc:89:d1:30:0f:16:c5:38:e0:
fb:1e:2e:0a:48:53:da:d8:50:6e:d1:db:1c:bf:f5:
e0:cd:84:9f:e2:03:eb:ad:98:b8:47:6a:d5:a3:90:
e7:1b:ce:3e:0b:d6:2c:8a:b4:11:36:d7:9f:d1:e9:
4a:a2:16:67:c8:15:73:26:42:c6:11:da:5b:4d:ce:
46:52:9f:a1:71:1e:6c:59:62:9a:23:7a:9f:77:99:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:51:7E:36:B7:46:07:CD:5C:D6:E3:DB:7B:B4:6A:FA:7B:40:35
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BZtRfja3RgfNXNbj23u0avp7QDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.174.0/23
Signature Algorithm: sha256WithRSAEncryption
79:e6:7b:2a:fc:8a:87:6c:c0:f8:ef:92:44:8b:cf:94:9f:5e:
b3:bf:f6:5d:be:a1:57:15:de:e5:3e:f3:0e:aa:d8:a5:1c:5a:
59:bd:91:2c:f5:a1:de:48:be:64:94:b0:9b:d7:2c:93:b2:fa:
02:d6:4e:ca:42:e7:8e:d0:01:d9:18:1d:43:d3:31:74:b1:11:
af:1d:0d:7b:18:5e:64:29:20:9f:0c:47:7f:a2:af:1a:43:1d:
2f:e5:d4:03:48:cc:1b:1d:54:9e:14:27:5a:b4:cf:75:eb:ac:
60:8a:89:f1:d8:61:95:c1:72:b8:11:d4:19:88:10:07:5f:1c:
97:11:04:c2:70:15:75:82:a3:7a:79:77:d2:15:48:e5:ea:9e:
e5:96:03:ca:5e:29:36:d6:89:c1:2e:f5:12:78:88:c2:06:c4:
74:cd:9c:7b:cc:b2:c1:1f:28:41:4e:16:54:23:97:9d:f2:89:
c5:8f:6c:2f:d6:1d:31:72:42:dd:19:78:90:a4:9d:b7:83:b2:
bb:63:89:e1:15:18:a2:51:1d:49:dc:23:ff:48:99:49:ad:9e:
0b:ff:10:d2:8a:9e:5f:59:87:3c:12:c2:34:c4:14:fe:72:e6:
32:83:23:a7:24:fb:e9:ff:d1:51:ab:b2:80:e1:23:b4:3c:c0:
a9:10:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:41 2026 by rpki-client