Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/BtGazFr3HXeSFcqxqvhT6Kwyhrk.roa
File: BtGazFr3HXeSFcqxqvhT6Kwyhrk.roa (raw, json)
Hash identifier: gDkwy9uRYw/xnW0hZwdKA4/8Do9O0Z0Zco7NJx77l1c=
Subject key identifier: 06:D1:9A:CC:5A:F7:1D:77:92:15:CA:B1:AA:F8:53:E8:AC:32:86:B9
Certificate issuer: /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial: 019B7A5B9FA13880894D11F6C4FF4C962304
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/BtGazFr3HXeSFcqxqvhT6Kwyhrk.roa
Signing time: Thu 01 Jan 2026 16:19:43 +0000
ROA not before: Thu 01 Jan 2026 16:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207739
IP address blocks: 91.231.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:9f:a1:38:80:89:4d:11:f6:c4:ff:4c:96:23:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Validity
Not Before: Jan 1 16:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06d19acc5af71d779215cab1aaf853e8ac3286b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:a4:12:c6:50:3e:c5:43:97:37:35:21:2a:
13:b4:16:f2:f1:01:d5:c2:05:b0:92:16:07:83:0b:
93:78:76:eb:2c:14:bf:ea:09:45:71:e0:16:a9:7e:
0f:00:f1:0c:ef:64:b7:0c:78:23:ae:7f:c2:39:18:
db:7d:ce:dd:21:41:65:ac:5a:f1:85:a8:e4:22:95:
cc:ba:f2:17:1c:a3:c0:6b:5c:a5:d1:0a:58:76:f7:
a4:2d:8b:2d:08:55:3a:22:83:44:35:89:f9:b9:14:
63:eb:45:40:1b:b4:77:1e:9e:a6:1e:8d:a5:52:1d:
df:dd:01:89:4f:82:e6:4c:f5:3a:3e:10:f7:c4:56:
36:00:e8:4a:1a:0d:89:91:85:f5:d5:12:18:8e:d5:
37:93:cc:7e:31:51:ce:6e:4d:71:62:d9:93:be:71:
a7:71:27:8b:8a:63:0c:b3:36:7b:29:15:4d:16:d2:
ba:24:47:1f:9b:95:25:37:a7:68:8a:71:c4:a3:6f:
22:03:17:22:c2:b6:f6:e8:e3:b5:a6:79:70:d0:c6:
09:b7:f6:0a:28:ca:cd:79:51:14:73:65:54:69:63:
3e:d4:68:27:6a:39:46:4e:c6:66:4a:9c:87:e4:9d:
fc:d4:57:3c:7f:d0:4d:47:0b:ca:bb:3a:3b:a5:94:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D1:9A:CC:5A:F7:1D:77:92:15:CA:B1:AA:F8:53:E8:AC:32:86:B9
X509v3 Authority Key Identifier:
keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/BtGazFr3HXeSFcqxqvhT6Kwyhrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.53.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a5:72:a6:9c:11:58:3c:8e:b9:43:89:7f:eb:5c:a7:fa:07:
69:91:dd:b7:62:39:33:94:be:1d:db:0e:37:37:a7:09:c2:bf:
32:bf:ef:57:97:36:03:8f:a6:80:6f:4c:c8:ab:96:6b:f6:d7:
85:c4:a0:45:b1:d4:31:82:43:1b:61:ec:de:c5:aa:d4:4a:50:
36:71:89:fe:e3:85:e4:fe:26:1b:b5:71:5c:22:06:f8:d1:65:
f2:5f:c0:12:1f:56:26:85:40:42:81:45:a7:b4:4d:d4:14:e3:
9e:d4:fd:58:4a:e6:63:02:b8:2c:0e:34:e8:6b:03:df:ea:20:
be:e6:9b:36:a7:91:94:e1:43:5d:29:6e:89:3a:22:cc:02:2d:
d8:8d:83:6a:ed:21:b0:5b:d8:41:9b:7e:fe:18:fb:af:41:78:
3b:46:a4:f8:78:73:7b:42:b3:3d:1d:61:cd:52:dd:35:6a:e7:
16:fc:eb:37:4b:ea:f3:26:f8:17:68:61:ee:a4:8e:cf:51:79:
f8:ee:fa:5a:d3:d9:00:db:3b:23:c9:a8:28:34:98:b0:96:eb:
3b:5e:1a:55:c2:02:08:b1:86:66:0a:48:d8:52:25:94:ee:c5:
08:ea:58:c9:26:0e:48:f3:8e:2a:40:92:aa:fc:b4:8f:9f:13:
a1:25:6e:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W5+hOICJTRH2xP9MliMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDlmYzY5YmY2ZWJhM2I5ZmEwNTE3ZDAwNjI5MjcyMTBl
NGU4Y2EwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmQxOWFjYzVhZjcxZDc3OTIxNWNhYjFhYWY4NTNlOGFjMzI4NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2mkEsZQPsVDlzc1ISoTtBby8QHV
wgWwkhYHgwuTeHbrLBS/6glFceAWqX4PAPEM72S3DHgjrn/CORjbfc7dIUFlrFrx
hajkIpXMuvIXHKPAa1yl0QpYdvekLYstCFU6IoNENYn5uRRj60VAG7R3Hp6mHo2l
Uh3f3QGJT4LmTPU6PhD3xFY2AOhKGg2JkYX11RIYjtU3k8x+MVHObk1xYtmTvnGn
cSeLimMMszZ7KRVNFtK6JEcfm5UlN6doinHEo28iAxciwrb26OO1pnlw0MYJt/YK
KMrNeVEUc2VUaWM+1GgnajlGTsZmSpyH5J381Fc8f9BNRwvKuzo7pZSYfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbRmsxa9x13khXKsar4U+isMoa5MB8GA1UdIwQY
MBaAFB9J/Gm/bro7n6BRfQBiknIQ5OjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBuOGFiOXV1anVmb0ZGOUFHS1NjaERrNk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjZiYjAtZWRmZi00ZmQzLTg2NGYt
ZjZjYzBjNmYxMmI0LzEvQnRHYXpGcjNIWGVTRmNxeHF2aFQ2S3d5aHJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83YjZiYjAtZWRmZi00ZmQzLTg2NGYtZjZjYzBjNmYxMmI0
LzEvSDBuOGFiOXV1anVmb0ZGOUFHS1NjaERrNk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+c1MA0G
CSqGSIb3DQEBCwUAA4IBAQB4pXKmnBFYPI65Q4l/61yn+gdpkd23YjkzlL4d2w43
N6cJwr8yv+9XlzYDj6aAb0zIq5Zr9teFxKBFsdQxgkMbYezexarUSlA2cYn+44Xk
/iYbtXFcIgb40WXyX8ASH1YmhUBCgUWntE3UFOOe1P1YSuZjArgsDjToawPf6iC+
5ps2p5GU4UNdKW6JOiLMAi3YjYNq7SGwW9hBm37+GPuvQXg7RqT4eHN7QrM9HWHN
Ut01aucW/Os3S+rzJvgXaGHupI7PUXn47vpa09kA2zsjyagoNJiwlus7XhpVwgII
sYZmCkjYUiWU7sUI6ljJJg5I844qQJKq/LSPnxOhJW4u
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:28:31 2026 by rpki-client