Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2-Btcdvp7sTIXFW2ItQT1rQ7Oi4.roa
File: 2-Btcdvp7sTIXFW2ItQT1rQ7Oi4.roa (raw, json)
Hash identifier: QR8tM2XEIyK2JPpWrbSsgkHsQ7eb+H9jkpn961imLK4=
Subject key identifier: DB:E0:6D:71:DB:E9:EE:C4:C8:5C:55:B6:22:D4:13:D6:B4:3B:3A:2E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F4B8D1189293749AFF480D3D5C9058B60
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2-Btcdvp7sTIXFW2ItQT1rQ7Oi4.roa
Signing time: Fri 10 Jul 2026 10:22:44 +0000
ROA not before: Fri 10 Jul 2026 10:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52468
IP address blocks: 31.15.0.0/24 maxlen: 24
31.15.1.0/24 maxlen: 24
31.15.2.0/24 maxlen: 24
31.15.3.0/24 maxlen: 24
31.15.5.0/24 maxlen: 24
31.15.6.0/24 maxlen: 24
31.15.7.0/24 maxlen: 24
45.10.107.0/24 maxlen: 24
45.130.160.0/24 maxlen: 24
45.130.161.0/24 maxlen: 24
45.150.85.0/24 maxlen: 24
45.150.86.0/24 maxlen: 24
45.150.87.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
153.51.248.0/24 maxlen: 24
153.51.249.0/24 maxlen: 24
153.51.250.0/24 maxlen: 24
153.51.251.0/24 maxlen: 24
153.51.252.0/24 maxlen: 24
153.51.253.0/24 maxlen: 24
153.51.254.0/24 maxlen: 24
153.51.255.0/24 maxlen: 24
181.41.146.0/24 maxlen: 24
181.41.147.0/24 maxlen: 24
194.31.105.0/24 maxlen: 24
194.31.107.0/24 maxlen: 24
194.32.112.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
217.76.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:8d:11:89:29:37:49:af:f4:80:d3:d5:c9:05:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 10 10:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbe06d71dbe9eec4c85c55b622d413d6b43b3a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:c2:6e:15:f3:64:e9:5c:a7:f9:bc:a0:9d:
43:d7:f3:43:d4:5c:db:f8:c3:f6:2d:17:c1:4e:c4:
1c:71:4c:94:7c:ea:f6:7f:7b:88:cf:09:68:73:28:
45:2d:19:21:6d:67:bc:39:81:94:38:ef:d8:5f:65:
ba:41:7b:dc:b9:ec:9a:1c:c7:de:25:9f:5c:28:ca:
14:c1:a2:2f:5b:37:c6:3c:9f:e9:e0:a3:07:86:43:
4a:88:97:d1:15:d5:07:da:71:d0:08:01:cf:5e:cc:
3a:81:41:8b:0e:71:33:2d:ed:fb:71:49:d6:4d:8c:
51:97:97:a2:1b:12:04:cd:16:a6:14:8c:20:78:ab:
f5:27:4a:bf:df:1c:3e:df:2f:fa:2e:4a:96:0a:c6:
ae:9e:77:bc:27:2c:c4:18:fc:f6:4e:60:3c:0e:33:
97:66:99:cc:b0:7d:71:10:a7:eb:e2:53:02:c8:20:
5e:8a:3a:ed:7b:66:3c:95:cb:79:db:d9:97:fc:4a:
e1:7b:5a:69:0d:53:e1:24:5f:57:cc:2e:4a:75:fe:
44:a5:ec:72:05:77:94:3d:f0:99:6b:70:b6:7a:e2:
a3:66:83:0d:70:3b:62:a1:2b:01:ba:ae:d0:70:7a:
43:ec:e6:d7:a7:d8:01:08:84:7c:9a:ef:a0:74:e5:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:6D:71:DB:E9:EE:C4:C8:5C:55:B6:22:D4:13:D6:B4:3B:3A:2E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2-Btcdvp7sTIXFW2ItQT1rQ7Oi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
31.15.5.0-31.15.7.255
45.10.107.0/24
45.130.160.0/23
45.150.85.0-45.150.87.255
46.29.28.0/24
153.51.248.0/21
181.41.146.0/23
194.31.105.0/24
194.31.107.0/24
194.32.112.0/24
201.77.53.0/24
217.76.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e6:a0:78:5c:f9:f2:8e:76:46:d1:83:39:7d:66:8e:6a:b7:
92:0c:67:64:d3:3e:be:4f:63:1b:d9:2c:8d:72:da:dd:50:aa:
ba:59:2c:28:d3:7f:58:0b:d8:75:b4:c1:5f:32:ae:ef:81:a2:
3c:32:b7:9c:ae:9b:25:2e:f4:17:20:44:61:52:36:ed:4b:f1:
a9:b9:93:47:74:1d:82:12:2d:ed:20:f8:ed:6c:55:55:44:09:
fa:46:b3:c0:c1:7a:d8:74:40:c9:fd:26:8d:b2:ba:15:a5:ea:
6b:81:a1:86:b1:e3:74:7b:49:f8:23:d6:8d:90:51:5d:cc:76:
e8:be:3d:db:36:3f:67:cd:f2:41:2b:ab:6b:26:de:e8:a9:fd:
e6:de:7f:3f:d0:18:6d:12:75:ec:af:35:bb:b2:24:6f:6e:da:
2f:0a:ae:40:cd:4d:1e:f5:65:4a:62:18:db:36:9c:01:30:55:
88:af:a1:3a:c3:ba:88:77:80:5b:7d:0e:31:79:3f:ad:49:15:
94:1e:1b:43:d4:ca:bf:99:52:de:15:fa:5b:d0:aa:59:94:0a:
2f:ee:f7:7e:13:2b:d5:fb:33:8c:9e:41:5c:e3:aa:fc:5c:5d:
d9:64:71:73:76:2e:9a:01:a0:21:b8:a9:c7:e3:63:68:47:d3:
91:1c:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:29 2026 by rpki-client