Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/btNWOWDT0MwxaxnuKalIShgF76M.roa
File: btNWOWDT0MwxaxnuKalIShgF76M.roa (raw, json)
Hash identifier: +XzTFhG5C/Y9XMQYyxlHrlhbiNm3k0WsQB2hF0bjvaI=
Subject key identifier: 6E:D3:56:39:60:D3:D0:CC:31:6B:19:EE:29:A9:48:4A:18:05:EF:A3
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019EDFB73C570E98BCAF8C742FF3F9BE1D9A
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/btNWOWDT0MwxaxnuKalIShgF76M.roa
Signing time: Fri 19 Jun 2026 11:49:48 +0000
ROA not before: Fri 19 Jun 2026 11:49:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 5.252.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:b7:3c:57:0e:98:bc:af:8c:74:2f:f3:f9:be:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jun 19 11:49:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ed3563960d3d0cc316b19ee29a9484a1805efa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:9c:2a:62:d7:4a:2c:fb:01:0c:64:d7:4c:
f4:74:af:8e:47:48:aa:d0:5b:73:76:4c:ac:d8:8f:
37:e7:07:47:f3:b6:51:28:76:e0:1d:f6:22:07:af:
db:ea:2a:70:b4:7e:22:62:7e:06:b6:b8:2a:4f:97:
bd:de:a8:d4:e8:a0:3e:f1:ba:47:b1:63:4c:d7:ff:
3b:86:48:ca:53:36:fd:0a:c7:6a:36:92:5a:96:b2:
1f:05:5d:0e:e5:5a:81:ab:4a:88:5c:1d:09:b6:47:
58:70:0e:9b:10:68:3a:f3:98:ce:94:b2:7f:14:2c:
95:1a:4a:c3:24:b4:e8:25:b4:a7:a5:31:36:3c:c5:
d4:00:ae:ff:0c:13:65:9c:f5:fa:91:db:53:53:bf:
80:e1:b9:92:6c:44:2b:58:c4:da:72:0b:b9:fd:6e:
88:38:2f:a2:bc:60:02:78:e5:b2:70:d9:96:6b:30:
c7:b9:f7:da:39:9e:4b:b8:b9:6e:d6:1b:43:19:58:
4e:17:f6:64:d3:58:28:e9:d5:2d:db:f4:a5:24:c3:
87:c7:dd:c5:04:fd:3f:77:37:7c:d9:54:03:06:62:
83:86:18:01:81:6c:bb:ea:02:56:df:b1:3c:21:3b:
74:c3:9f:1d:30:f8:b2:ac:84:bd:a2:6a:09:6f:67:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D3:56:39:60:D3:D0:CC:31:6B:19:EE:29:A9:48:4A:18:05:EF:A3
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/btNWOWDT0MwxaxnuKalIShgF76M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6b:8e:34:49:e6:f0:2a:81:55:4b:86:a5:90:97:56:38:49:
02:0a:37:53:2e:75:92:25:f2:fb:06:f6:98:1b:0e:4c:9e:b0:
6f:0d:32:13:56:ca:e2:c4:0f:dc:db:0f:8b:99:b5:2e:45:8e:
8a:0f:f8:cb:4e:a1:64:29:8e:3c:ee:bc:10:c4:2b:54:3c:e6:
3e:1b:96:af:6d:11:a2:0f:2d:8d:41:4c:01:ea:e5:a6:fc:3a:
27:80:0a:a7:52:75:68:f5:c0:c1:a2:11:71:ab:32:c8:ea:47:
0c:d3:9b:3b:bf:76:21:1d:20:0f:d6:f7:75:e7:70:3d:21:9e:
1b:52:73:a3:97:be:1a:c8:3b:b8:db:9e:13:c6:61:b6:63:19:
86:2a:f7:72:40:36:4d:82:67:bc:6b:4f:11:90:b7:e3:49:4f:
90:6c:74:ad:ca:f6:ba:6e:52:ea:a5:57:c3:6a:d8:95:e4:47:
1d:f3:f3:03:ca:05:ff:99:0b:87:a1:48:d6:52:65:9c:ed:94:
bf:98:26:b0:67:c5:bf:80:aa:e3:74:0f:b4:6f:0f:5a:a0:39:
f8:b4:61:d7:17:13:9b:9b:3c:5f:ee:1e:11:be:56:89:5f:72:
b2:75:0e:8b:f8:ba:03:e4:9e:03:e9:a1:46:c0:f2:d9:13:02:
41:ba:01:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:24:12 2026 by rpki-client