Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/BRXS8WksgQGorqrTdTtIcF8abbc.roa
File: BRXS8WksgQGorqrTdTtIcF8abbc.roa (raw, json)
Hash identifier: H6oWB2BSrLhU8bgXcNznIqpE1qVSjPaDVS8xGNQ6mzg=
Subject key identifier: 05:15:D2:F1:69:2C:81:01:A8:AE:AA:D3:75:3B:48:70:5F:1A:6D:B7
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019FF0122ECC0E7B6EFD09648675D8A4AD80
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/BRXS8WksgQGorqrTdTtIcF8abbc.roa
Signing time: Tue 11 Aug 2026 09:05:51 +0000
ROA not before: Tue 11 Aug 2026 09:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 103.69.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:12:2e:cc:0e:7b:6e:fd:09:64:86:75:d8:a4:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Aug 11 09:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0515d2f1692c8101a8aeaad3753b48705f1a6db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:ab:f2:6c:d8:ec:6d:ea:c7:be:c1:cf:7a:
21:8c:1b:6c:a9:c0:94:67:71:55:c2:85:e7:fb:b5:
8f:bf:cb:aa:f6:42:02:fd:92:47:23:ee:c8:04:23:
72:41:19:df:7c:32:c8:29:cd:85:12:68:7e:b5:7d:
31:1b:bf:00:30:74:b7:5f:4b:9a:24:33:d8:3a:37:
ce:90:5a:e3:fd:1b:bf:38:9e:00:5a:b0:b5:2b:60:
e8:4c:7f:0a:9b:fc:d4:71:df:ed:1c:e6:68:d3:f8:
fc:e0:ba:f9:7d:b3:7d:f7:1e:b7:8f:4e:23:f5:c8:
95:b5:00:07:d5:12:a1:ab:96:fb:4c:08:a7:8c:9d:
47:d8:c2:16:a9:f0:0b:02:47:87:70:3a:e5:c2:4a:
0d:cb:48:b8:b2:9a:5f:aa:fa:8a:63:1c:4b:d2:b6:
ca:34:95:b6:e6:cd:04:75:eb:93:0e:0e:80:9b:db:
cf:82:bf:43:62:41:bf:50:db:e7:6b:06:a6:2c:23:
61:86:5e:b2:76:a8:28:4f:c7:72:f7:c9:80:9c:31:
6c:ee:b2:70:2a:02:df:ce:33:3e:64:9a:fd:7e:c8:
d7:64:b4:d8:d9:d1:d2:0e:b9:da:b0:fb:9d:26:f1:
ec:80:93:71:23:21:de:ff:64:1e:af:5b:55:f5:03:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:15:D2:F1:69:2C:81:01:A8:AE:AA:D3:75:3B:48:70:5F:1A:6D:B7
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/BRXS8WksgQGorqrTdTtIcF8abbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:29:ee:8d:d1:d3:c6:67:b5:78:5f:a7:78:55:25:c3:93:b7:
56:43:78:8a:ed:14:b0:55:f1:f0:70:0c:25:39:c6:b5:a9:96:
22:47:de:ba:d9:36:89:27:20:43:ff:19:0f:61:b9:e9:6a:4b:
eb:ca:56:19:50:47:4f:0a:2b:08:80:fb:4d:6d:c4:06:17:0e:
69:a2:04:cc:ad:15:0a:48:a8:41:5d:11:8a:e1:ab:7e:95:18:
e7:9b:9a:26:f2:53:a0:5f:bf:53:e6:a4:e3:0b:0e:93:1a:49:
7b:2a:5d:a2:82:a2:91:8c:b2:eb:e3:9f:19:d1:bd:e4:f6:1d:
2c:b4:01:bd:e2:fa:24:71:52:89:1a:80:63:bc:9b:78:63:87:
d4:d1:bc:3b:c8:52:36:a5:3f:2b:ba:70:70:bc:45:83:37:7c:
b4:92:00:da:4d:ec:52:dd:cd:fd:ed:58:3a:4b:cb:8a:57:d9:
39:58:81:80:ce:54:3e:d1:8f:80:50:2b:1c:93:c3:39:4e:77:
87:68:a5:ee:bb:10:a0:fc:64:fa:ab:27:8f:fe:e7:24:b5:21:
6a:69:10:7c:8a:40:58:c0:9f:7e:05:b2:6f:8f:95:28:1f:1b:
9e:3b:e3:14:0b:e5:4a:d6:48:17:5f:09:4e:db:f8:29:3a:9a:
57:7f:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:18 2026 by rpki-client