Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/BTaCybUURTBQi0VNgpk9RgieWQU.roa
File: BTaCybUURTBQi0VNgpk9RgieWQU.roa (raw, json)
Hash identifier: t/hsl4bRfHXT9QYyQUbp81UsQcklFdAa9CwiBUgRca4=
Subject key identifier: 05:36:82:C9:B5:14:45:30:50:8B:45:4D:82:99:3D:46:08:9E:59:05
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019FA9D852CFF41D236E00A4A14B4B428D06
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/BTaCybUURTBQi0VNgpk9RgieWQU.roa
Signing time: Tue 28 Jul 2026 17:49:14 +0000
ROA not before: Tue 28 Jul 2026 17:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.232.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.210.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:d8:52:cf:f4:1d:23:6e:00:a4:a1:4b:4b:42:8d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 28 17:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=053682c9b5144530508b454d82993d46089e5905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:f7:14:0d:e6:d8:d1:9a:aa:a5:75:93:61:
35:f5:5d:17:30:3c:e9:d9:c8:6e:df:53:1e:53:4d:
32:fc:25:68:1f:36:80:57:16:02:37:f7:40:59:89:
45:5e:80:cf:fb:a7:04:d9:be:c7:9f:02:f2:d4:04:
ec:9b:5d:59:4f:9f:a6:5f:d9:4e:da:a9:3c:1e:be:
55:25:92:d8:9c:3a:12:4e:1a:24:59:fa:b1:85:79:
17:55:df:5a:d2:bb:a3:94:cc:99:ea:0f:11:40:d2:
37:5b:8e:be:b5:80:2f:c1:48:34:6f:69:c0:b9:3b:
43:ff:85:80:c5:44:c5:71:6f:df:d6:52:b4:e5:51:
cf:d6:77:6a:92:3e:b1:d3:74:99:c8:a0:f9:f8:9d:
fa:50:af:2e:ca:5d:ce:47:28:11:10:65:d6:8c:f9:
e7:71:75:28:78:70:e4:3c:a3:04:8e:48:e0:f3:5a:
6f:57:dd:3d:c6:8f:ed:8a:cf:99:13:86:58:b9:16:
cc:76:7e:f7:d5:77:07:29:98:ca:00:40:8c:50:99:
fd:db:eb:2a:3c:43:fe:c4:8d:d9:b0:7b:bb:df:20:
07:cb:33:b9:37:82:a7:3b:17:11:81:63:e6:70:b2:
d1:56:30:e5:5d:91:16:16:f1:28:16:79:e3:4a:ed:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:36:82:C9:B5:14:45:30:50:8B:45:4D:82:99:3D:46:08:9E:59:05
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/BTaCybUURTBQi0VNgpk9RgieWQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/22
78.159.157.0-78.159.159.255
91.92.34.0/24
91.92.44.0-91.92.46.255
91.92.50.0-91.92.53.255
93.152.206.0/23
93.152.209.0-93.152.218.255
93.152.222.0/23
93.152.226.0/23
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b6:7e:54:02:e6:aa:ba:15:8d:9d:8a:1a:a7:af:d6:ba:b5:
c5:47:1e:b8:27:76:f6:e7:21:4e:f8:ba:d4:89:d8:5b:a0:58:
29:1b:58:47:2f:01:ec:04:db:90:53:7f:60:60:ec:d8:21:71:
93:96:f7:a1:e3:a2:a3:33:b7:f7:b7:ff:39:7b:eb:9f:02:d6:
05:94:f9:04:ca:99:88:e2:6b:2a:0c:7a:72:49:34:4e:ec:72:
ea:76:5d:a5:f9:9b:00:b8:c1:d0:32:5c:b6:09:97:fa:21:bc:
0a:99:c3:a7:40:a8:99:b3:6c:86:27:a8:5a:45:8a:79:cf:25:
ae:c6:b1:a8:c8:93:aa:bd:ca:e2:33:f4:a5:f1:de:8f:50:62:
ba:f0:87:01:18:8e:ca:fb:31:0d:e3:72:6c:93:08:a3:82:60:
fd:fd:78:4c:20:e4:b9:70:29:7a:dd:fd:21:2e:37:f6:c1:29:
bb:18:74:d6:66:be:6a:8f:fc:cd:7f:09:06:7d:5d:70:dd:db:
82:4c:b6:b0:be:26:a7:97:4b:10:a3:3b:13:9b:06:23:ff:49:
2f:65:ac:82:02:f5:6a:c9:da:88:32:fa:f0:59:bc:f6:21:a1:
1b:f5:7e:d8:5f:50:b6:3c:f9:66:db:c2:56:d9:5e:8e:0e:59:
1b:d2:cf:a3
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZ+p2FLP9B0jbgCkoUtLQo0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjYwNzI4MTc0OTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTM2ODJjOWI1MTQ0NTMwNTA4YjQ1NGQ4Mjk5M2Q0NjA4OWU1OTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7P3FA3m2NGaqqV1k2E19V0XMDzp
2chu31MeU00y/CVoHzaAVxYCN/dAWYlFXoDP+6cE2b7HnwLy1ATsm11ZT5+mX9lO
2qk8Hr5VJZLYnDoSThokWfqxhXkXVd9a0rujlMyZ6g8RQNI3W46+tYAvwUg0b2nA
uTtD/4WAxUTFcW/f1lK05VHP1ndqkj6x03SZyKD5+J36UK8uyl3ORygREGXWjPnn
cXUoeHDkPKMEjkjg81pvV909xo/tis+ZE4ZYuRbMdn731XcHKZjKAECMUJn92+sq
PEP+xI3ZsHu73yAHyzO5N4KnOxcRgWPmcLLRVjDlXZEWFvEoFnnjSu2sYwIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFAU2gsm1FEUwUItFTYKZPUYInlkFMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvQlRhQ3liVVVSVEJRaTBWTmdwazlSZ2llV1FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBAIt
jegDBAFOn4ADBABOn4MDBAJOn4gwDAMEAE6flQMEAE6flgMEAk6fmDAMAwQATp+d
AwQFTp+AAwQAW1wiMAwDBAJbXCwDBABbXC4wDAMEAVtcMgMEAVtcNAMEAV2YzjAM
AwQAXZjRAwQAXZjaAwQBXZjeAwQBXZjiAwQBXhocAwQCXhpMMAwDBABeGlkDBABe
GloDBABevsMDBAK5YPwDBADUZmkDBADUZmswDQYJKoZIhvcNAQELBQADggEBAIu2
flQC5qq6FY2dihqnr9a6tcVHHrgndvbnIU74utSJ2FugWCkbWEcvAewE25BTf2Bg
7NghcZOW96HjoqMzt/e3/zl7658C1gWU+QTKmYjiayoMenJJNE7scup2XaX5mwC4
wdAyXLYJl/ohvAqZw6dAqJmzbIYnqFpFinnPJa7GsajIk6q9yuIz9KXx3o9QYrrw
hwEYjsr7MQ3jcmyTCKOCYP39eEwg5LlwKXrd/SEuN/bBKbsYdNZmvmqP/M1/CQZ9
XXDd24JMtrC+JqeXSxCjOxObBiP/SS9lrIIC9WrJ2ogy+vBZvPYhoRv1fthfULY8
+WbbwlbZXo4OWRvSz6M=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:24:44 2026 by rpki-client