Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BrKIsSd9pPnm1zFgOzbjMrjaS5k.roa
File: BrKIsSd9pPnm1zFgOzbjMrjaS5k.roa (raw, json)
Hash identifier: o3cFEuVNPXW8JHPWy8ljECnXkpuYVDpIsTnv41ki/90=
Subject key identifier: 06:B2:88:B1:27:7D:A4:F9:E6:D7:31:60:3B:36:E3:32:B8:DA:4B:99
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A10FE7E00E5D203B019EFE95E6870BF40D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BrKIsSd9pPnm1zFgOzbjMrjaS5k.roa
Signing time: Tue 06 Oct 2026 06:30:16 +0000
ROA not before: Tue 06 Oct 2026 06:30:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 5.175.141.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:e7:e0:0e:5d:20:3b:01:9e:fe:95:e6:87:0b:f4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 6 06:30:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06b288b1277da4f9e6d731603b36e332b8da4b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:1e:8b:95:e8:e8:d4:36:e0:a1:17:81:df:
91:3d:f1:5c:41:f1:35:7a:3c:ba:cf:fd:fa:0b:3f:
14:72:7c:99:fb:0b:f1:5a:46:71:f7:c3:cc:54:8a:
d8:5e:30:80:ff:38:a7:eb:f7:f2:40:35:b5:e4:d8:
8c:f5:f4:58:74:c9:e8:06:64:62:df:45:10:2c:db:
b3:ed:6c:c6:08:94:79:dd:03:c6:bf:82:6f:ff:a3:
e4:10:98:a0:7f:e4:38:c8:f3:78:06:d9:c8:98:29:
61:9a:4f:38:c6:1d:b4:fb:19:77:79:57:c7:f9:50:
6e:23:b7:ab:2c:f3:d5:5d:1e:ef:00:45:34:fc:ac:
28:26:18:de:cc:af:6b:71:61:44:88:70:64:96:a8:
1a:02:e0:d5:6a:e5:26:e5:8f:e4:f6:9c:8d:ab:33:
5f:2d:b2:8d:e1:8e:00:4a:ce:aa:12:f8:6b:56:07:
86:3e:92:00:c9:25:38:38:46:19:d7:88:62:cd:03:
db:9e:ad:ec:1b:58:df:3b:50:6c:d0:f5:d2:56:2f:
3d:4d:0a:a9:df:88:d3:8d:1d:90:1a:dc:24:39:10:
a4:61:12:d6:73:8d:ba:6e:ba:3a:93:9d:3b:95:45:
69:a0:49:3f:c1:43:6c:92:be:6b:15:77:8a:c2:37:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:88:B1:27:7D:A4:F9:E6:D7:31:60:3B:36:E3:32:B8:DA:4B:99
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BrKIsSd9pPnm1zFgOzbjMrjaS5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.141.0/24
5.175.237.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:17:cb:b8:a4:0d:72:16:93:74:8f:a2:7c:08:4e:ab:18:cd:
c0:ed:af:c6:0b:45:99:f0:8f:fe:a3:2a:e8:16:84:86:1c:8b:
b0:b2:5f:1a:72:b7:aa:4d:6d:b2:62:05:49:86:ef:51:8c:20:
db:d7:95:5e:9a:d1:b1:d7:dd:94:26:8b:ca:18:da:2a:ff:77:
a0:95:4f:9c:5c:aa:53:19:23:8c:d0:96:dd:30:45:52:69:e8:
03:44:17:6a:fe:88:40:93:62:ec:63:76:6f:eb:05:84:71:a1:
57:55:4b:d3:31:df:47:be:df:d4:b5:ee:35:31:c0:7a:ea:de:
f9:96:c6:5c:13:90:38:58:b2:59:b7:93:d7:3c:a0:5c:38:2c:
84:6e:db:9f:a9:5c:14:6f:bc:e5:9b:e8:88:97:01:21:a9:c9:
d3:9d:ac:b3:57:e4:c0:11:88:f7:70:5b:3c:74:bb:93:bc:c6:
c4:bb:97:b7:3b:dd:88:d8:d7:a8:c2:f1:67:b3:6a:9d:7d:bf:
26:7b:07:43:e3:1e:97:c0:51:b0:25:00:1e:cb:45:a4:f2:ab:
b0:4e:fd:c8:ed:b1:33:ef:16:64:3e:8a:49:3e:3b:50:f4:9a:
64:f9:ad:9a:01:7d:23:d5:5a:ad:d1:f0:bb:fb:d2:5e:59:ff:
b5:03:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:16 2026 by rpki-client