Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BTM-PNdH45nk8aEwkf4KmvK-iek.roa
File: BTM-PNdH45nk8aEwkf4KmvK-iek.roa (raw, json)
Hash identifier: m5nF/QFKU80UxQ1d9AlrlCmO3gm4tAkzkl6uXekqJBY=
Subject key identifier: 05:33:3E:3C:D7:47:E3:99:E4:F1:A1:30:91:FE:0A:9A:F2:BE:89:E9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE85077EC2188FD1FBEE277B617D83
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BTM-PNdH45nk8aEwkf4KmvK-iek.roa
Signing time: Mon 14 Sep 2026 07:25:29 +0000
ROA not before: Mon 14 Sep 2026 07:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200160
IP address blocks: 2a0e:b107:690::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:85:07:7e:c2:18:8f:d1:fb:ee:27:7b:61:7d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05333e3cd747e399e4f1a13091fe0a9af2be89e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:f7:00:5f:f9:81:45:f5:27:bd:5b:68:32:
76:e1:8f:dd:ad:3e:01:db:e8:ff:c3:77:34:52:df:
b4:5b:59:f0:c1:a2:70:b7:5a:c4:47:5e:42:3a:cf:
8b:fb:d6:12:68:83:c6:64:06:fc:8a:31:fe:4b:c4:
d1:77:49:a8:b2:88:e5:01:80:ee:5e:fe:79:77:57:
7d:16:3c:a9:e1:41:ec:44:e7:0b:d5:0e:13:8d:a3:
2d:51:78:16:27:00:fb:d3:e5:e9:fd:1e:57:25:ea:
90:83:ab:f4:3a:e3:ca:a1:3c:6f:32:7a:47:3c:62:
03:dc:47:b2:79:dd:cb:05:37:c4:ee:b9:27:27:68:
1e:58:78:3f:73:b2:9c:90:40:77:9e:36:bb:fb:84:
13:ae:a8:7d:b0:57:e2:fd:0b:c4:3d:a3:81:6c:1b:
19:d2:9e:3d:29:e5:5a:98:de:88:d3:38:33:b8:0c:
81:a6:7e:5c:bf:8e:a1:bc:c9:7b:35:99:13:92:75:
5a:df:3a:7e:2a:c5:0d:5c:9b:7a:04:3b:23:1f:c6:
cb:e3:17:be:b0:6e:10:e7:f9:35:b9:3e:ae:2a:c8:
43:c0:93:4e:a7:3f:75:c3:d8:65:1a:e3:78:98:24:
96:e4:5f:3d:6e:45:3c:85:df:2e:11:d7:e0:7e:14:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:33:3E:3C:D7:47:E3:99:E4:F1:A1:30:91:FE:0A:9A:F2:BE:89:E9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BTM-PNdH45nk8aEwkf4KmvK-iek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:690::/44
Signature Algorithm: sha256WithRSAEncryption
94:61:83:a8:04:e0:10:00:d6:84:17:61:0a:2c:a7:35:84:31:
f8:26:b5:ac:8e:98:e7:a6:08:1f:92:c7:13:bb:0d:c2:89:0b:
43:8c:7d:57:b7:40:32:70:53:eb:2b:25:e5:59:c2:17:9a:e4:
8d:ba:0b:bb:bd:27:20:91:b3:e0:61:fa:81:dd:f3:c5:c5:c3:
90:b5:4d:f9:aa:cb:eb:bd:58:8d:8b:dd:9d:e6:b8:e2:86:6d:
f7:fe:91:4b:58:a4:61:47:c6:ff:3a:db:31:d0:0a:66:ae:f5:
93:e6:df:22:0d:72:47:04:91:da:1a:9b:3a:69:35:c5:12:85:
31:a6:8e:e1:48:ed:15:1a:04:e4:44:24:06:be:39:70:41:35:
9a:9b:e9:18:32:c2:17:13:e8:c7:64:81:4a:f3:e2:89:ec:20:
82:d9:bb:47:f2:c7:3f:0a:5d:b4:34:99:09:06:62:fd:49:2d:
0e:fa:6b:7d:97:0e:fd:c5:d8:81:09:74:79:36:52:ce:a0:db:
5e:9d:ec:81:93:81:54:c0:0f:21:57:79:cc:08:2c:06:42:39:
a2:85:e8:81:69:1a:68:e7:d8:ba:44:51:c2:87:04:bb:8e:7c:
ae:cd:c9:d7:c0:41:d6:de:3d:cd:13:a9:32:57:3d:9e:ef:92:
4b:eb:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:40 2026 by rpki-client