Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/BtMX-WiLAMmOOFfAnalrBpgKXL8.roa
File: BtMX-WiLAMmOOFfAnalrBpgKXL8.roa (raw, json)
Hash identifier: kZd+uoZ9ngTgr+F/vsz/7OUC/MDhD4X+UHpHtDG9BC8=
Subject key identifier: 06:D3:17:F9:68:8B:00:C9:8E:38:57:C0:9D:A9:6B:06:98:0A:5C:BF
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019EDECDC8019CC7A2E8D885B043D3DC0BE5
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/BtMX-WiLAMmOOFfAnalrBpgKXL8.roa
Signing time: Fri 19 Jun 2026 07:34:48 +0000
ROA not before: Fri 19 Jun 2026 07:34:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.222.248.0/24 maxlen: 24
185.222.249.0/24 maxlen: 24
185.222.250.0/24 maxlen: 24
185.222.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:cd:c8:01:9c:c7:a2:e8:d8:85:b0:43:d3:dc:0b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Jun 19 07:34:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06d317f9688b00c98e3857c09da96b06980a5cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:55:14:12:fa:d1:3a:83:a7:98:1d:93:dc:
e5:14:26:82:1b:ea:d5:b0:26:f1:d9:f7:9c:8a:30:
97:46:e6:6b:a5:7f:fa:2f:a9:13:78:f5:5c:69:69:
a0:18:bc:ef:4b:e8:6e:43:e1:77:00:75:a1:47:4a:
10:32:eb:15:d0:4e:2a:50:25:d6:e6:89:bb:1c:ee:
96:0c:3e:b5:81:48:2d:3a:99:7d:ba:77:5b:8e:5d:
74:0b:21:0b:c3:b7:56:5f:63:76:15:10:67:0c:0e:
3b:75:37:10:fe:8f:dc:d3:17:20:c4:02:a3:e7:17:
23:db:84:5a:39:a8:c2:c4:ed:c2:8b:20:e3:84:bd:
78:23:ec:6b:05:ec:2b:0f:1d:bd:51:cb:6b:5f:3b:
00:57:4d:f7:60:f3:f4:90:be:ed:a2:93:28:71:ad:
e9:ca:52:e2:1f:63:e6:01:db:1e:d3:fb:4b:12:88:
0a:90:80:74:2d:4c:f8:a1:04:06:a8:59:ab:13:8b:
ef:0c:ff:b8:87:d1:c1:35:90:9f:b6:a3:b3:98:58:
1f:e9:a2:e5:64:09:af:07:5a:eb:08:01:ab:f0:3c:
56:89:72:49:e7:15:67:82:8d:70:ec:b9:ae:2c:f6:
b2:9a:ca:16:da:98:f6:97:48:59:64:ae:d0:13:b1:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:17:F9:68:8B:00:C9:8E:38:57:C0:9D:A9:6B:06:98:0A:5C:BF
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/BtMX-WiLAMmOOFfAnalrBpgKXL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:98:14:54:81:f1:ec:f5:59:ec:a5:06:86:1e:8c:fa:b2:11:
89:39:cd:52:aa:e5:00:96:a9:73:66:6b:cb:e1:0e:5a:1a:e7:
35:3e:6a:1c:0e:90:f6:33:d4:69:db:08:39:36:71:7b:6f:80:
ae:4b:1e:9e:b0:d6:f4:c0:50:73:43:0d:d3:c1:22:5a:91:4c:
e1:c5:e0:e7:dd:14:6d:a0:c8:48:6a:b5:52:68:a3:0d:a8:1e:
18:8b:f4:67:50:6f:01:1d:e6:60:cd:45:63:9c:fe:67:80:61:
67:7e:8a:7c:8a:a5:2d:dd:41:a5:80:b6:ea:a0:3b:d5:df:01:
98:78:44:a4:1b:22:4f:42:f2:03:d0:f3:a3:d8:b2:22:b2:49:
92:44:10:f4:f5:33:12:cc:2c:2c:8c:c2:7e:2d:55:ee:27:4d:
33:8e:83:38:55:25:d8:14:ae:ca:5b:25:30:82:65:95:25:d2:
11:f9:73:d0:b2:92:49:68:99:68:7e:96:b1:69:ab:ab:7e:b3:
8b:05:68:08:74:84:18:b3:01:40:00:83:84:12:b0:55:c9:03:
d9:88:c1:26:9c:26:80:90:e6:6d:82:08:a2:68:6e:8f:7d:57:
0f:d4:1a:7e:89:ad:8a:0a:a9:e6:1d:98:ff:89:91:89:fc:74:
39:45:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:08:37 2026 by rpki-client