Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/br8-37y3MLGRYcARqJdVZkXW9gU.roa
File: br8-37y3MLGRYcARqJdVZkXW9gU.roa (raw, json)
Hash identifier: zRS6zNINO270Rq/+tQCj7bxB007h/Yc3v9wjZGrmKdg=
Subject key identifier: 6E:BF:3E:DF:BC:B7:30:B1:91:61:C0:11:A8:97:55:66:45:D6:F6:05
Certificate issuer: /CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Certificate serial: 01A0AEE34DB24DFE3FB3FDEBCF40536FD96B
Authority key identifier: A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/br8-37y3MLGRYcARqJdVZkXW9gU.roa
Signing time: Thu 17 Sep 2026 10:22:07 +0000
ROA not before: Thu 17 Sep 2026 10:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42093
IP address blocks: 91.205.192.0/23 maxlen: 23
2001:67c:da8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:e3:4d:b2:4d:fe:3f:b3:fd:eb:cf:40:53:6f:d9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d2ed7165cb51bcd28068b2970235cdbd01280b
Validity
Not Before: Sep 17 10:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ebf3edfbcb730b19161c011a897556645d6f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:e7:7d:3b:31:a3:b1:6c:49:ea:7b:53:02:
02:3e:79:44:5b:21:4e:1d:ba:06:14:4c:5f:55:1b:
69:51:d4:95:fd:98:6a:bf:7c:9f:67:82:1e:76:b1:
d2:84:a9:99:e6:76:8d:69:ba:82:3b:cf:42:e0:c1:
25:8e:bf:96:50:ec:c9:d6:24:12:ca:b7:a9:64:36:
59:a0:cf:46:28:6d:55:91:7f:f3:0d:8e:d4:ae:4d:
7c:a0:fc:29:ed:94:a6:d8:ca:89:75:79:1d:5c:ff:
10:b5:74:0a:e8:23:1d:d6:f5:4d:fe:e5:23:98:13:
12:80:ff:44:5e:74:87:d1:6c:1f:3a:9e:e9:8c:d9:
86:a9:5c:4e:d4:08:54:6d:12:c1:3a:86:38:d0:09:
60:46:54:ac:53:31:0e:de:56:f9:9c:52:a9:df:6f:
f3:a4:d8:4b:23:5e:8c:bf:6c:dc:4c:12:2e:1f:d1:
76:96:da:0a:5d:d7:7d:07:55:e2:e0:0b:7b:c7:f3:
65:a5:03:f4:95:3a:38:fc:8a:5e:6b:52:dc:a1:c1:
56:f3:d5:45:a1:11:ec:13:fa:21:09:53:58:24:72:
bc:4e:e2:d7:3c:53:eb:36:7c:91:01:37:d8:e3:1e:
47:25:77:87:f3:2e:ad:68:9c:6f:0c:06:57:6c:2b:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:3E:DF:BC:B7:30:B1:91:61:C0:11:A8:97:55:66:45:D6:F6:05
X509v3 Authority Key Identifier:
keyid:A6:D2:ED:71:65:CB:51:BC:D2:80:68:B2:97:02:35:CD:BD:01:28:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptLtcWXLUbzSgGiylwI1zb0BKAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/br8-37y3MLGRYcARqJdVZkXW9gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3e5d5f-ece8-42b2-a67c-1bfc3281e825/1/ptLtcWXLUbzSgGiylwI1zb0BKAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.192.0/23
IPv6:
2001:67c:da8::/48
Signature Algorithm: sha256WithRSAEncryption
76:99:7e:39:f5:bf:bd:cd:20:2f:35:4c:94:0b:a0:6c:41:58:
b9:84:51:18:34:4e:1d:ba:d4:74:f4:4b:fe:05:60:ce:a8:83:
df:3c:ea:cb:4e:e6:bb:6a:25:3c:64:b8:be:ad:6a:36:30:59:
25:0e:d2:0f:4a:8c:0e:05:fc:f1:6a:d2:e7:63:75:4b:48:b1:
01:bd:5c:86:c6:33:a9:5c:86:33:f4:2c:dc:55:2e:e8:4d:40:
da:cc:77:7f:7f:e0:23:15:13:f3:4c:7a:0c:83:4c:f4:46:6a:
41:b0:70:da:2a:c3:77:cd:fe:93:ac:81:6b:19:94:06:60:81:
03:f0:73:0c:a9:8c:81:94:ae:7e:5b:96:b2:f5:c6:28:d9:24:
bb:bf:07:72:24:d1:21:e9:6f:4e:5b:9a:32:16:ad:b8:ee:ba:
e1:07:b3:68:b1:25:9e:7c:37:7d:60:ae:43:f5:6a:48:f0:95:
df:2c:85:f0:c4:17:5b:d2:7d:32:7c:db:49:2d:25:12:fe:b1:
4b:bb:e3:75:21:15:ba:05:ba:52:e0:f4:6a:51:d3:93:b8:df:
af:9b:f5:dc:7c:65:5e:c9:ee:1d:5a:58:19:b3:7f:94:62:17:
54:3f:9b:53:c3:45:de:a2:29:3c:34:41:2d:4f:43:0e:d6:40:
d7:ed:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:13:11 2026 by rpki-client