Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Br_7R13KIrAcb-fGMQGl9Z7Eo4w.roa
File: Br_7R13KIrAcb-fGMQGl9Z7Eo4w.roa (raw, json)
Hash identifier: oHLixwtesHVsOmrFqOEWvyNuO7LlTEF0PlGrbiL/cr8=
Subject key identifier: 06:BF:FB:47:5D:CA:22:B0:1C:6F:E7:C6:31:01:A5:F5:9E:C4:A3:8C
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A1039751280039F65AEAC9D8FDFDF05D57
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Br_7R13KIrAcb-fGMQGl9Z7Eo4w.roa
Signing time: Sat 03 Oct 2026 21:06:50 +0000
ROA not before: Sat 03 Oct 2026 21:06:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.66.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:97:51:28:00:39:f6:5a:ea:c9:d8:fd:fd:f0:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Oct 3 21:06:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06bffb475dca22b01c6fe7c63101a5f59ec4a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:ac:66:35:52:c9:f8:14:0a:e5:8e:32:d4:
e0:15:5d:9e:a5:3f:15:dd:fb:de:35:f7:c3:e5:9c:
fe:06:17:27:5e:fd:fc:60:28:d0:fa:33:88:4f:46:
f3:83:aa:aa:b0:4a:29:0b:1d:1a:e7:40:a7:e0:16:
96:d7:b5:99:0d:12:79:34:68:f1:f3:5a:4f:fb:ee:
73:bf:02:6b:c4:63:14:bb:56:5c:f9:cf:4c:e1:37:
a1:d6:72:8b:6c:a5:03:3f:2a:bd:c5:92:c9:57:8f:
13:0c:04:7c:24:ab:6b:25:07:f4:ca:cf:20:bf:56:
48:17:c6:21:96:9f:e8:a8:9a:c4:3e:a9:01:5c:81:
3b:14:7e:b6:74:23:5b:ac:f1:97:f1:9a:21:bd:55:
5d:86:9b:b5:45:c1:49:86:5b:ec:9a:e6:8c:fe:2f:
57:a4:01:30:48:98:e7:38:97:04:03:9c:3c:ea:7c:
22:b7:eb:83:f2:10:3c:8c:51:c2:34:6a:dd:24:b8:
fe:61:dd:d1:ea:ff:cd:a0:ef:a7:b1:86:2b:51:40:
2a:36:b9:79:b5:51:2d:13:16:87:ff:c9:48:f3:25:
16:0b:f5:f2:eb:50:9b:b5:25:6c:49:bc:4d:a1:db:
6f:b1:d4:2b:d2:51:71:2d:23:af:8e:54:41:1f:54:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:FB:47:5D:CA:22:B0:1C:6F:E7:C6:31:01:A5:F5:9E:C4:A3:8C
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Br_7R13KIrAcb-fGMQGl9Z7Eo4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.50.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1b:d8:58:d5:64:37:86:63:a4:51:fa:28:e3:f8:a3:26:8c:
cd:77:8c:4c:0a:08:96:6a:8f:d7:0c:47:cb:7a:8f:90:b0:de:
ee:a8:6e:4e:9e:62:d4:cb:d4:3f:0f:15:18:48:0c:84:64:f4:
21:af:bb:cd:b2:b0:6a:17:e0:5e:6b:1a:fe:44:51:56:01:ea:
3e:d8:0b:6e:42:26:83:75:20:02:f4:e0:26:ff:e1:17:cb:41:
d0:08:c1:ed:15:9c:db:1e:9a:5f:87:bb:ca:7d:51:99:9d:ac:
03:d5:b2:10:46:67:e9:17:94:ff:42:a6:87:02:1c:1f:ca:ae:
7a:77:ea:f2:35:36:1d:17:07:cd:38:57:5d:a1:02:14:07:29:
47:31:25:7d:67:a2:8b:f0:08:7a:7d:5b:42:5f:85:66:4c:d0:
38:14:9f:11:4c:9d:09:9d:98:72:2a:e1:60:69:d5:f7:0b:05:
1e:51:e1:c4:9d:b6:a1:f3:b3:f3:d0:29:2e:31:f5:0e:d4:36:
eb:bf:ac:89:fd:ea:16:04:3d:33:25:6a:0c:b3:8e:a1:c2:b4:
5b:b5:9e:31:eb:0d:38:84:fa:5f:df:5a:43:98:48:7d:50:be:
38:31:70:bb:7f:b4:50:d7:e6:b6:69:2c:8c:ae:ab:51:43:d0:
dc:10:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:55:02 2026 by rpki-client