Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/btjH39NkLdJ0RLIY8PihBNLBXc8.roa
File: btjH39NkLdJ0RLIY8PihBNLBXc8.roa (raw, json)
Hash identifier: OJPUd5DIB59mHeLoL5lkzseaUcvpxTAxanm/t5gaFc0=
Subject key identifier: 6E:D8:C7:DF:D3:64:2D:D2:74:44:B2:18:F0:F8:A1:04:D2:C1:5D:CF
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A0242965A553B6F07F92356DF9421BB921
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/btjH39NkLdJ0RLIY8PihBNLBXc8.roa
Signing time: Fri 21 Aug 2026 11:51:27 +0000
ROA not before: Fri 21 Aug 2026 11:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 45.83.187.0/24 maxlen: 24
45.86.30.0/24 maxlen: 24
45.94.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:29:65:a5:53:b6:f0:7f:92:35:6d:f9:42:1b:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Aug 21 11:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ed8c7dfd3642dd27444b218f0f8a104d2c15dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:14:20:ab:ac:a3:f5:d4:df:af:b5:e9:13:ba:
57:0d:6d:c4:c0:16:9d:20:fa:cb:fa:ef:47:31:3d:
a3:4b:90:73:1c:9c:59:25:43:91:c4:95:fd:91:17:
6d:d2:56:51:e6:0e:1a:94:b0:03:ce:3f:95:e0:17:
89:d9:fb:d6:10:35:e9:f0:cf:39:81:e5:1c:ef:b6:
40:7c:22:23:81:55:e8:c5:92:b1:6d:e7:c3:5f:b5:
68:83:93:0c:0a:32:37:e1:97:de:83:9d:05:e4:a5:
a6:d0:86:09:85:a2:c9:e7:15:f4:1b:7b:5d:f4:a9:
d0:25:45:44:7e:7e:b1:60:df:35:a7:45:82:0f:2b:
a4:c2:71:92:a4:de:02:f9:15:07:08:53:38:ee:6c:
f5:7c:21:60:90:37:0c:f8:ee:02:af:60:29:2f:53:
d2:c1:b5:0a:57:1f:a1:93:ff:fb:32:ae:c7:2a:f5:
36:19:e1:1f:47:1f:35:e9:4a:b0:ff:da:2b:ae:e4:
65:24:4d:eb:30:a7:07:06:20:58:00:3c:bb:f3:7b:
ab:c1:8e:3c:3a:24:43:93:cc:ec:be:b1:c3:70:e9:
ff:5c:63:b9:52:ec:e5:9b:d8:5a:51:9e:c7:1d:1c:
72:ab:cf:74:43:ed:ac:5b:15:35:3c:35:e4:09:1f:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:C7:DF:D3:64:2D:D2:74:44:B2:18:F0:F8:A1:04:D2:C1:5D:CF
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/btjH39NkLdJ0RLIY8PihBNLBXc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.187.0/24
45.86.30.0/24
45.94.24.0/24
Signature Algorithm: sha256WithRSAEncryption
50:95:d2:75:54:60:a5:da:5b:f8:d0:19:00:e8:63:43:c8:a8:
21:49:c7:f5:4a:c3:58:ba:ee:79:27:92:5b:98:8c:9e:97:c0:
5a:c5:fe:ac:87:f1:90:47:5d:b2:64:da:9e:7e:ec:81:56:b0:
1b:32:26:07:7f:41:87:06:82:ce:bd:d8:a1:f8:f8:2c:23:22:
74:6b:21:b0:11:1f:15:5a:57:eb:20:42:6a:23:6c:93:b9:49:
bc:45:d3:e0:88:40:a5:68:ac:a3:40:1c:9e:0d:23:c5:a5:9e:
01:cd:e3:25:ad:e2:94:22:65:2b:c7:61:58:9f:54:a9:84:8f:
85:e3:1d:c7:89:d5:21:2d:3e:73:c8:b5:cc:7c:ce:e2:69:10:
40:a8:f5:9e:b0:76:29:ab:18:d5:b4:a1:40:07:80:0e:a0:18:
c5:6b:75:18:67:e6:da:a1:ed:ac:93:df:23:50:23:13:51:f7:
8b:f1:14:d1:9a:2c:8c:bf:d9:2e:a8:8a:2a:88:9f:3d:50:d8:
6d:46:11:b4:b8:b1:00:5b:6b:17:af:4e:2b:14:0b:e4:05:39:
7f:42:89:f5:2d:c6:83:5a:7e:c2:16:da:34:9e:e1:48:a9:bd:
89:08:dc:0b:13:f0:f3:85:01:b3:35:08:4c:07:fa:60:bc:db:
b5:73:4d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:42 2026 by rpki-client