Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/BtE_Prg_QTilEMkESiUbs4oIDmA.roa
File: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (raw, json)
Hash identifier: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=
Subject key identifier: 06:D1:3F:3E:B8:3F:41:38:A5:10:C9:04:4A:25:1B:B3:8A:08:0E:60
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019C6710FE724AE158CA262E7FB212DACCF5
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/BtE_Prg_QTilEMkESiUbs4oIDmA.roa
Signing time: Mon 16 Feb 2026 15:28:12 +0000
ROA not before: Mon 16 Feb 2026 15:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60248
IP address blocks: 130.193.77.0/24 maxlen: 24
185.233.131.0/24 maxlen: 24
194.56.148.0/24 maxlen: 24
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:67:10:fe:72:4a:e1:58:ca:26:2e:7f:b2:12:da:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Feb 16 15:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06d13f3eb83f4138a510c9044a251bb38a080e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:0f:f8:6e:f6:4f:f0:c5:f3:db:33:34:7a:
1a:f5:26:48:4c:53:85:1c:29:0d:54:35:3f:8d:26:
41:59:8d:35:98:b5:09:03:bc:cc:97:6b:14:cd:a9:
66:69:82:d1:0d:55:59:34:53:22:50:36:70:43:5a:
ca:f7:9e:f7:8f:ad:71:a3:7c:08:e9:20:af:20:75:
9b:9c:2c:f7:c2:2a:bd:46:5f:20:10:40:b9:8d:15:
63:5f:4d:8c:97:58:8b:6f:d4:ff:7b:e0:19:e8:16:
50:01:20:9f:4b:69:7a:e1:b0:93:35:c0:f6:be:f1:
e4:44:25:da:ea:c4:e8:9d:56:37:0d:77:83:0c:24:
e4:19:0e:1b:8b:1e:23:d6:6c:45:80:2e:cf:62:c1:
27:a5:e2:66:1a:51:22:e6:32:53:c9:89:ab:10:d5:
b1:4f:8b:2e:47:9a:b4:d3:26:b8:6c:bd:31:94:cc:
d1:bd:8f:dc:1d:71:e4:37:3a:8e:7c:d1:f8:f6:b5:
e9:66:c5:4d:a1:01:19:fc:71:fc:79:3a:28:8d:4c:
04:fe:b7:9f:72:4c:41:d2:78:fb:73:41:65:75:50:
e6:91:98:2b:f2:4c:29:99:9e:6c:d7:a7:7e:78:1b:
30:9e:5e:28:42:5b:32:58:32:81:6a:39:f0:59:95:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D1:3F:3E:B8:3F:41:38:A5:10:C9:04:4A:25:1B:B3:8A:08:0E:60
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/BtE_Prg_QTilEMkESiUbs4oIDmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.77.0/24
185.233.131.0/24
194.56.148.0/24
195.110.38.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e0:6d:a4:54:73:70:e8:16:e8:1a:4a:e0:6b:0c:20:a2:ae:
4c:29:38:fe:b6:19:75:43:d1:95:32:0a:a3:93:ba:85:8f:35:
a3:a8:68:12:42:68:ec:95:15:90:f3:3c:b0:bd:8a:c4:2e:ba:
ee:6d:23:05:6f:31:cb:70:15:4e:1f:23:5c:be:95:a0:c1:bf:
e6:9d:19:03:15:05:89:5e:83:80:15:77:e4:d1:d3:fb:f5:d4:
eb:49:f0:79:27:c1:16:b8:b3:f9:c5:9e:b3:52:14:bf:e5:54:
fb:38:2e:ac:24:37:3d:5f:75:c9:4f:02:ac:c7:af:f7:af:82:
7a:41:36:69:ca:86:04:d5:3b:00:a8:ce:eb:96:46:ef:c4:dc:
77:26:c5:45:04:b4:b5:d1:b7:47:e6:14:51:ad:04:ae:d8:12:
50:5c:b3:ba:2e:d2:a7:fd:b1:96:4d:26:d3:78:90:49:ca:74:
2f:be:d8:ad:aa:f1:22:c0:09:cd:7a:34:f9:bf:60:5d:7e:1b:
3b:3d:f3:bb:40:e9:f3:c5:b8:76:d6:73:25:ab:85:11:ee:29:
a3:41:bf:e0:b1:41:dd:bb:9e:13:a2:82:1d:8c:d4:e5:04:c4:
43:18:b3:72:aa:b5:66:b4:29:85:de:e2:a8:04:b9:44:0a:1c:
02:49:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:33:38 2026 by rpki-client