Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BTP_-B4XzdRyKuNxrF1zNZOFphU.roa
File: BTP_-B4XzdRyKuNxrF1zNZOFphU.roa (raw, json)
Hash identifier: TPMUV3Ndx2MhpI1gn/w8mWlDztj68uK0qIPrlMbqL2g=
Subject key identifier: 05:33:FF:F8:1E:17:CD:D4:72:2A:E3:71:AC:5D:73:35:93:85:A6:15
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0197453961DE5D02B2FAF308CA8AA3CE507F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BTP_-B4XzdRyKuNxrF1zNZOFphU.roa
Signing time: Fri 06 Jun 2025 12:31:17 +0000
ROA not before: Fri 06 Jun 2025 12:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210558
IP address blocks: 45.80.158.0/24 maxlen: 24
45.83.28.0/24 maxlen: 24
45.83.31.0/24 maxlen: 24
45.92.1.0/24 maxlen: 24
84.54.33.0/24 maxlen: 24
185.241.208.0/24 maxlen: 24
192.159.99.0/24 maxlen: 24
193.26.115.0/24 maxlen: 24
203.159.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:39:61:de:5d:02:b2:fa:f3:08:ca:8a:a3:ce:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 6 12:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0533fff81e17cdd4722ae371ac5d73359385a615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:11:62:d4:10:a1:43:9d:ce:b6:98:49:86:
71:27:5a:eb:73:3d:81:ae:89:3d:b9:42:9c:bf:c1:
8f:6b:cb:2f:48:68:cb:cc:54:e6:c3:10:d7:ae:e1:
67:fe:42:08:6b:d2:7d:f5:70:90:a7:a0:65:73:59:
cd:8b:13:a1:de:e1:b5:fd:af:67:75:21:b1:b4:ff:
c0:21:8c:25:63:61:37:e2:19:86:f0:04:19:ac:d0:
4e:bb:4e:b4:0a:90:c2:be:0b:23:b2:81:b6:8a:93:
c8:82:1b:1a:dc:82:a0:16:0e:90:8f:a9:17:53:0c:
20:d2:46:03:44:9e:63:01:64:83:cc:30:b2:07:13:
36:78:b6:55:fc:1f:ae:14:8e:e7:c7:a9:f2:15:e3:
aa:90:15:be:9b:82:e4:70:d6:cb:af:dd:a3:32:7a:
b4:db:e1:e4:87:d4:88:8e:2d:fc:0b:93:da:52:91:
b9:05:4f:6c:7e:6a:ef:18:df:57:78:c8:98:81:b4:
73:0b:16:02:c3:dd:b5:21:2d:04:96:a0:d3:64:e6:
37:a7:41:ca:22:0e:d9:15:07:10:02:1a:99:ee:04:
59:85:a7:99:a0:21:ad:8d:64:ea:6b:43:32:30:f3:
68:4e:e9:d3:48:1e:f4:7d:ac:e7:ed:e2:99:c9:b9:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:33:FF:F8:1E:17:CD:D4:72:2A:E3:71:AC:5D:73:35:93:85:A6:15
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/BTP_-B4XzdRyKuNxrF1zNZOFphU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
45.83.28.0/24
45.83.31.0/24
45.92.1.0/24
84.54.33.0/24
185.241.208.0/24
192.159.99.0/24
193.26.115.0/24
203.159.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:cf:74:3b:7b:10:f3:5b:bd:5c:7e:db:c8:69:5f:56:65:9b:
96:a9:c5:d2:37:d9:79:73:59:2f:d6:a9:d7:40:85:c5:6d:44:
33:14:33:b1:04:60:fc:76:96:58:26:d4:50:04:1d:37:11:96:
00:f3:37:9f:a2:8d:eb:17:69:2f:34:b4:7b:01:2a:a2:73:60:
99:de:3e:54:98:7c:c7:f7:f9:82:b1:d8:cd:33:0d:b1:af:df:
d5:3a:90:75:65:aa:f5:36:2b:91:34:d4:52:6d:39:fe:02:4f:
fa:0f:27:bc:aa:27:08:08:17:a9:d8:93:b5:08:b9:9d:04:be:
20:c8:02:af:44:b0:fa:32:72:65:cb:2b:8c:bf:51:fc:63:57:
8a:5e:07:c3:39:bd:f7:c8:0c:b8:ad:e0:04:8c:9b:0e:84:50:
30:fd:a4:65:dd:c5:51:b9:2b:2f:bb:bd:c5:9a:1e:af:32:84:
d1:92:ce:28:7c:fd:10:11:1b:9c:9e:f7:b2:2d:2c:05:18:85:
9b:3f:65:eb:16:dd:c8:4a:cc:5b:58:30:46:7d:9a:59:03:2e:
7b:18:8b:38:d5:6e:c6:f6:7e:46:18:2e:8f:c0:f1:25:36:77:
0d:e8:5d:e7:44:2b:11:44:02:a0:f9:d9:4d:db:71:4f:17:6a:
9f:f4:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:13:15 2025 by rpki-client