Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/br3xFyo0GnB4STjJnTpUdkV8Q7s.roa
File: br3xFyo0GnB4STjJnTpUdkV8Q7s.roa (raw, json)
Hash identifier: IEukFQawGXjdqi0RnytgX5C//iUSZHrf62ki2UehA54=
Subject key identifier: 6E:BD:F1:17:2A:34:1A:70:78:49:38:C9:9D:3A:54:76:45:7C:43:BB
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 01A083B588A7E2AAAB2E9375E49E1B8B8ED2
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/br3xFyo0GnB4STjJnTpUdkV8Q7s.roa
Signing time: Wed 09 Sep 2026 01:08:27 +0000
ROA not before: Wed 09 Sep 2026 01:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219070
IP address blocks: 2a0b:a500::/48 maxlen: 48
2a0b:a500:1::/48 maxlen: 48
2a0b:a500:2::/48 maxlen: 48
2a0b:a500:3::/48 maxlen: 48
2a0b:a500:4::/48 maxlen: 48
2a0b:a500:5::/48 maxlen: 48
2a0b:a500:6::/48 maxlen: 48
2a0b:a500:7::/48 maxlen: 48
2a0b:a500:8::/48 maxlen: 48
2a0b:a500:10::/48 maxlen: 48
2a0b:a500:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:b5:88:a7:e2:aa:ab:2e:93:75:e4:9e:1b:8b:8e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Sep 9 01:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ebdf1172a341a70784938c99d3a5476457c43bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:a8:ce:7e:a9:64:6f:87:c8:28:2f:cc:ff:
34:78:b6:76:79:7c:d2:bb:23:f5:d5:ee:0c:36:20:
7a:90:49:f8:1a:ae:ee:d4:46:17:3f:ef:57:fa:ab:
79:33:bb:99:45:8d:2d:bd:bf:fe:c6:2d:15:c9:60:
d2:6b:b6:f3:2a:7d:26:23:0d:ea:75:ef:d6:d0:11:
d6:cc:ae:21:10:d4:22:b3:09:ea:47:ba:9e:72:fc:
d8:45:9b:45:a2:6d:04:3f:ae:5f:5f:4e:7a:d8:71:
9c:ca:c9:26:07:2f:06:f1:eb:2a:61:94:ba:ef:b5:
46:d2:d5:5b:ca:b5:41:66:7e:a1:e1:3c:c8:06:1b:
38:02:32:01:a4:ff:8a:79:46:d5:c6:05:16:a9:3c:
de:ba:0b:7d:96:0c:c2:09:e0:f0:6b:5d:03:95:44:
3a:a6:8a:a3:db:24:99:08:16:97:bb:ff:48:6e:79:
3b:a8:bb:4e:58:4d:b3:40:9e:c6:60:25:bd:97:50:
95:6e:e5:cb:af:34:7c:b3:bc:da:ff:bc:fd:39:da:
52:25:9f:58:92:e4:2c:d9:33:1a:26:50:f3:1e:dd:
d0:08:76:ca:ea:68:e1:8e:4f:52:89:2e:7f:9a:18:
2e:86:73:06:ee:86:12:de:fc:f0:e3:80:e0:ec:27:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:F1:17:2A:34:1A:70:78:49:38:C9:9D:3A:54:76:45:7C:43:BB
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/br3xFyo0GnB4STjJnTpUdkV8Q7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a500::-2a0b:a500:8:ffff:ffff:ffff:ffff:ffff
2a0b:a500:10::/48
2a0b:a500:3000::/36
Signature Algorithm: sha256WithRSAEncryption
52:3f:04:66:7d:59:69:67:b8:21:bd:fa:8c:f1:da:f6:e4:df:
f1:fd:8d:46:9f:0a:65:21:0f:23:8f:58:0f:1e:64:d3:f0:5c:
19:dd:f2:a7:40:bb:34:42:71:cd:30:1e:af:28:21:d8:8a:83:
2f:a3:73:50:10:1b:03:a2:d7:f0:cc:a7:b7:0c:7f:36:41:70:
85:36:bd:ce:b6:7c:d2:a9:29:4d:41:b4:ef:94:1d:cc:d5:60:
a9:42:98:36:f8:a1:c9:1f:dc:4f:3c:0e:d1:75:0d:58:42:c4:
82:5c:8e:73:65:9c:49:15:1c:d4:ed:85:b4:8e:b1:18:5f:32:
d0:30:34:55:e2:62:cd:d5:f7:75:db:f3:b6:46:8d:fe:85:e5:
2d:3e:ef:3a:d4:dd:30:35:c8:63:c0:1f:0a:a2:a5:57:a9:04:
97:00:8a:54:d2:ca:09:1a:a5:f7:1f:a1:04:1a:31:76:b9:2c:
a3:7f:bb:b6:8f:8e:b5:f6:98:f0:5d:27:2c:a3:1d:e7:76:ea:
fc:10:27:62:0a:8c:e5:a1:21:d4:dc:2b:00:83:18:8d:8a:b9:
1a:1a:ee:8e:06:6b:ce:02:0a:8a:43:74:db:07:07:82:1f:ea:
9a:23:12:67:43:94:b0:5c:44:bd:29:50:b7:75:5d:36:47:eb:
7c:4b:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:24 2026 by rpki-client