Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa
File: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (raw, json)
Hash identifier: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=
Subject key identifier: 06:B8:6D:88:24:3A:A6:2C:22:A9:0D:69:06:FB:F6:F2:82:EE:C8:6F
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 019B7B35A00ACF685AA2D4D41B3A3E498673
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa
Signing time: Thu 01 Jan 2026 20:17:50 +0000
ROA not before: Thu 01 Jan 2026 20:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213100
IP address blocks: 2001:678:d68::/48 maxlen: 48
2001:678:d6c::/48 maxlen: 48
2001:678:d70::/48 maxlen: 48
2001:67c:2848::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:a0:0a:cf:68:5a:a2:d4:d4:1b:3a:3e:49:86:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Jan 1 20:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06b86d88243aa62c22a90d6906fbf6f282eec86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7b:cc:42:df:6f:c5:6a:65:c9:d4:8a:dd:02:
1b:59:6d:f6:d3:cb:44:e1:b4:73:a9:4e:eb:2a:1a:
3e:98:5c:cb:fd:bd:61:2b:9d:51:4c:dd:20:bb:22:
52:05:c7:28:e4:eb:74:3e:77:2a:94:0a:0e:85:bf:
e9:d7:39:02:ef:83:e6:e5:81:13:e4:e4:39:7d:62:
a7:79:fa:cc:66:6f:40:6d:cf:d6:d3:2d:1d:2c:ab:
c7:81:da:a6:ed:8a:d4:c3:d4:49:f0:ec:f0:55:d1:
f3:a6:8c:08:b8:98:c6:0c:e2:8f:c0:d7:c3:fe:b1:
f0:d5:0a:2c:35:ca:95:dd:be:d0:0a:ea:cf:9a:6d:
ed:81:13:98:db:77:85:19:9b:51:0b:a5:3d:9c:6a:
ad:33:85:68:d4:b3:0d:a3:7c:e4:bc:15:69:d3:80:
2c:6b:ee:8c:dc:c5:bc:cf:5d:84:87:5b:c5:c1:5c:
58:6b:00:68:a2:f3:dd:f2:2a:1a:d8:a8:25:be:85:
dd:56:8a:40:92:c5:42:7f:21:d8:7c:92:83:f8:ac:
bd:32:fb:b3:10:be:a3:2f:28:f7:86:24:1f:d0:5d:
e7:c9:98:ec:15:2a:5c:37:7d:64:f2:63:95:16:76:
d0:b7:00:b3:6f:d0:0e:5a:0a:8e:ab:f0:65:16:cf:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B8:6D:88:24:3A:A6:2C:22:A9:0D:69:06:FB:F6:F2:82:EE:C8:6F
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d68::/48
2001:678:d6c::/48
2001:678:d70::/48
2001:67c:2848::/48
Signature Algorithm: sha256WithRSAEncryption
26:f7:7d:31:a1:8e:eb:44:47:68:23:64:d0:da:d3:ac:ec:58:
e1:93:b2:60:16:64:14:21:9a:15:f3:80:25:42:55:d1:49:d1:
a2:52:d8:06:ba:fd:bd:0e:fa:09:21:44:7a:5c:6e:61:1c:67:
38:5b:1c:ef:87:e9:98:8f:8d:b8:3e:7a:35:2a:63:ab:cc:b4:
e0:13:be:04:15:97:5f:e3:8b:26:59:1d:44:bd:ba:f7:36:51:
8f:dc:18:30:7e:38:93:80:3e:77:ec:25:02:03:fd:3f:4e:94:
04:70:0e:ab:23:fa:d9:d3:8f:61:84:47:e2:44:f6:5f:b6:f8:
df:1d:b3:fa:97:2f:d2:db:00:ee:75:f4:0e:46:17:fd:ca:0d:
77:06:ed:00:da:87:db:04:82:30:ca:1d:48:0e:03:4d:56:09:
e3:5e:5f:fc:a9:b2:62:04:01:fc:34:cd:7c:2b:ac:7c:7b:6a:
32:b6:69:6e:55:69:50:31:50:66:13:a6:50:00:cf:45:9d:ce:
5f:be:82:0c:7b:e4:64:5c:9b:d6:52:85:84:93:24:f7:12:c6:
d9:8e:9a:3f:b9:28:93:b0:cc:25:ec:e2:52:35:01:97:a8:fa:
ef:9a:5e:94:9a:8a:09:99:72:d5:1a:99:9e:b7:31:34:54:d3:
08:2d:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:40 2026 by rpki-client