Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/bbt-DWx8r0Tz427_LcfqBIbtv54.roa
File: bbt-DWx8r0Tz427_LcfqBIbtv54.roa (raw, json)
Hash identifier: pB7s7/op90nHUSlsL3NK7OEU0QI/bdWB69gJR3ootKI=
Subject key identifier: 6D:BB:7E:0D:6C:7C:AF:44:F3:E3:6E:FF:2D:C7:EA:04:86:ED:BF:9E
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019E8CB49BFD28072F94547944233423C3B8
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/bbt-DWx8r0Tz427_LcfqBIbtv54.roa
Signing time: Wed 03 Jun 2026 08:58:27 +0000
ROA not before: Wed 03 Jun 2026 08:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 62.69.137.0/24 maxlen: 24
62.69.139.0/24 maxlen: 24
193.219.115.0/24 maxlen: 24
2a00:a640:10a0::/44 maxlen: 48
2a00:a640:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:b4:9b:fd:28:07:2f:94:54:79:44:23:34:23:c3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jun 3 08:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dbb7e0d6c7caf44f3e36eff2dc7ea0486edbf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:e2:6b:0f:7e:e8:55:33:ff:ba:b4:97:5d:
2f:75:6c:ab:50:cf:21:67:7d:12:33:52:1a:fb:60:
22:a8:46:be:55:60:0f:91:d5:49:66:a8:95:6f:93:
9a:f0:bb:d2:ed:bb:e7:f6:14:c0:2d:02:0c:e5:29:
b0:c8:a9:8d:30:9d:05:92:ab:e5:06:42:72:ca:93:
e3:cd:0c:90:44:de:da:bf:e4:41:e1:b9:b3:e3:73:
92:db:c2:1a:a0:ca:c9:67:85:46:4b:3c:71:8e:f3:
a2:8b:58:24:65:52:44:83:0f:3d:cb:05:90:91:ff:
71:70:bd:18:57:b1:5e:e3:46:8b:e5:0a:93:20:39:
2f:b6:b9:a7:55:b5:d9:3e:a3:54:cf:ba:25:19:69:
93:d8:b4:1f:10:7c:cd:20:1e:60:b5:c7:a9:68:73:
22:31:e8:3f:1b:52:0d:26:98:e6:c4:0c:c8:1c:59:
61:4f:5a:c4:70:0a:25:3c:d3:11:50:08:b3:84:cc:
52:84:71:90:1d:a6:86:da:95:ce:42:e5:29:bb:e2:
81:a5:d7:07:66:e6:6b:02:13:c0:a6:ba:98:7a:c1:
86:7a:7b:2c:9c:d6:52:0d:15:b5:17:84:d1:46:19:
f6:1f:b8:f8:de:ed:80:d4:4e:50:6f:30:21:18:8f:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BB:7E:0D:6C:7C:AF:44:F3:E3:6E:FF:2D:C7:EA:04:86:ED:BF:9E
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/bbt-DWx8r0Tz427_LcfqBIbtv54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.137.0/24
62.69.139.0/24
193.219.115.0/24
IPv6:
2a00:a640:10a0::/44
2a00:a640:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
95:74:32:13:df:15:73:6d:79:0f:f1:f0:8f:7b:59:8a:66:58:
2d:70:18:6c:1d:91:b0:ad:9a:f4:ab:6a:49:b8:e7:82:32:e5:
45:ba:43:7a:61:0b:be:78:fa:9e:33:38:d9:e5:d9:50:10:c5:
83:f2:ca:8f:17:dd:9c:d2:0d:fc:50:a3:b9:cd:6d:fa:91:3b:
f9:f6:03:47:42:43:c8:2e:21:d4:d3:29:c0:7e:42:ae:9f:cd:
c0:3a:b3:e7:26:f1:6c:08:8c:64:4a:e9:b1:13:03:e3:5a:22:
3f:e7:30:d1:6e:ec:7d:42:60:55:9e:70:98:70:8a:ea:f4:19:
79:71:ac:ee:a7:c8:f2:46:c0:08:ee:76:9a:8f:be:de:78:3b:
74:9f:66:87:25:52:07:15:a6:a7:f1:f5:24:72:e1:45:c4:9c:
6c:45:ce:ea:42:b6:1d:a5:7a:45:25:13:89:f9:09:e4:47:e0:
2c:1e:c7:f6:6c:ae:50:6a:5d:bf:f5:7d:11:99:0c:d7:96:1b:
41:80:ca:f7:a1:c1:17:54:f8:22:c5:69:82:d5:24:ac:0b:f8:
ad:c4:13:73:ca:10:69:b1:5a:17:88:e4:4d:84:0e:a4:a5:a0:
81:b6:e5:31:0d:73:9a:a1:69:f9:bc:bb:56:ba:70:1c:b5:08:
1b:25:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:37 2026 by rpki-client