Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Brz6rBsNJ5g51jDdn1_SPtoqTT0.roa
File: Brz6rBsNJ5g51jDdn1_SPtoqTT0.roa (raw, json)
Hash identifier: DhQ8ZcFJ9eXugmyMIDklKvY8AdItc9O2dUKGOI34MCU=
Subject key identifier: 06:BC:FA:AC:1B:0D:27:98:39:D6:30:DD:9F:5F:D2:3E:DA:2A:4D:3D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DE6DFF481F37048CFFE57749FC663789F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Brz6rBsNJ5g51jDdn1_SPtoqTT0.roa
Signing time: Sat 02 May 2026 04:08:49 +0000
ROA not before: Sat 02 May 2026 04:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210537
IP address blocks: 94.249.200.0/24 maxlen: 24
217.69.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e6:df:f4:81:f3:70:48:cf:fe:57:74:9f:c6:63:78:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 2 04:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06bcfaac1b0d279839d630dd9f5fd23eda2a4d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:ab:86:75:a5:4b:ee:7d:03:92:61:53:8b:
67:3c:97:a2:ef:65:71:48:b3:d4:b8:9a:a7:7d:da:
9d:a9:14:34:ea:a1:ee:9a:af:b7:4d:e4:a7:d7:a4:
b2:cc:ec:da:55:54:f8:05:61:d1:da:44:84:fb:48:
98:a6:2e:a7:37:1f:6c:2d:cf:64:48:2b:7b:4b:99:
a8:47:8e:a7:5c:71:e5:29:d0:d8:e1:ab:ae:35:74:
d7:6a:f7:e7:f4:e8:dd:e9:9c:5d:0d:1b:61:ac:82:
12:e2:6f:96:45:ca:cb:e2:65:17:28:a1:7f:f9:e5:
ad:6a:29:92:66:cc:c5:6f:fa:4b:b2:ba:e5:9c:4a:
c6:6c:e6:ce:55:17:d8:62:74:02:18:0f:22:b9:f7:
81:ca:07:57:7b:e9:9f:d0:ab:6d:ac:18:35:d2:02:
f3:d9:12:d3:d2:87:5e:01:49:00:1a:4a:90:1e:e7:
54:cd:07:87:ce:ed:1b:92:97:01:d9:23:03:b5:94:
cf:4a:dc:e3:6a:60:88:07:6d:53:a4:12:9b:47:0e:
64:5a:86:39:d2:1f:52:bc:a6:ea:5c:86:6f:82:d3:
87:3d:96:e1:66:fb:3b:91:3f:ac:09:77:75:fa:28:
d2:27:0e:2e:1a:a2:23:df:79:8e:f3:2e:81:28:21:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:FA:AC:1B:0D:27:98:39:D6:30:DD:9F:5F:D2:3E:DA:2A:4D:3D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Brz6rBsNJ5g51jDdn1_SPtoqTT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.200.0/24
217.69.167.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:2a:e4:b5:14:a5:37:99:f3:90:f3:cf:f8:a2:8e:fe:48:47:
a2:98:e7:c6:4a:cb:40:9f:a8:d5:8a:31:88:c7:08:9e:7c:3b:
45:5b:44:95:92:82:3d:9b:41:a8:4a:88:1a:b9:9a:bc:10:ce:
c1:3c:5f:3f:7a:91:9a:2b:76:67:ac:36:51:99:41:32:46:f1:
a7:6d:83:e3:5f:ee:da:6c:28:c2:aa:af:f6:c2:7c:1a:50:d2:
d8:72:e4:21:09:0e:8c:05:56:e4:f9:72:6e:34:4f:83:67:f1:
d6:bd:99:ca:e6:22:e9:c3:80:9f:ee:18:2c:02:38:3b:f7:af:
ba:d3:13:ac:32:ec:70:c8:92:b9:f0:27:f8:ab:f3:2a:a0:58:
f6:3b:b2:08:a1:48:e5:7f:e3:73:fc:d0:91:01:b3:0b:b8:7a:
54:4e:cc:97:8c:02:45:90:a0:fa:d7:5b:82:32:f8:44:2b:c6:
88:ae:93:69:b9:2e:d8:75:f0:6e:68:21:f2:80:6c:66:d8:7e:
b0:19:28:df:00:2b:d9:13:cc:5a:93:7d:db:68:7e:58:20:b6:
4a:71:04:00:90:db:18:c4:52:f2:f5:35:38:4a:99:9a:45:27:
33:65:e8:06:3e:45:68:9a:76:87:0a:e3:a6:c8:f4:94:05:92:
18:04:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 07:22:41 2026 by rpki-client