Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BrSDE_asAKt3gXUUph-z6WRykTw.roa
File: BrSDE_asAKt3gXUUph-z6WRykTw.roa (raw, json)
Hash identifier: UAPcmL9qmxUnrvczMtgFW/Y6zGhhpBLKV5UAch+6oSc=
Subject key identifier: 06:B4:83:13:F6:AC:00:AB:77:81:75:14:A6:1F:B3:E9:64:72:91:3C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01996E5F0086751E099939AC3DA8A7B2B21A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BrSDE_asAKt3gXUUph-z6WRykTw.roa
Signing time: Sun 21 Sep 2025 22:22:23 +0000
ROA not before: Sun 21 Sep 2025 22:22:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207615
IP address blocks: 2a0c:9a40:8fc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6e:5f:00:86:75:1e:09:99:39:ac:3d:a8:a7:b2:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 21 22:22:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b48313f6ac00ab77817514a61fb3e96472913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:9c:6d:1d:6b:5b:32:e2:fe:f0:de:81:6c:
eb:58:84:3f:ad:40:c3:73:f8:83:dc:b1:a4:dc:fa:
93:2c:4c:70:65:24:08:0c:06:78:51:83:03:ac:54:
ae:82:7d:9c:b7:61:89:5d:ef:ee:75:b2:f9:c9:92:
09:18:3d:9f:91:d3:46:e8:77:70:8a:df:48:0a:cd:
de:ce:b7:9b:cb:2b:1f:dd:89:de:de:7c:5f:d5:c0:
fe:52:a4:ae:49:db:7d:68:c1:25:f0:e2:00:0c:0d:
54:98:93:08:1e:4c:37:bb:38:ff:44:b1:d4:e9:7f:
1e:ce:f6:6e:4b:a8:a5:76:95:be:f4:f7:61:62:3d:
4a:94:35:56:f3:0a:91:37:cb:94:b3:4f:ca:29:fb:
df:11:8c:8e:87:d7:cb:a2:f4:6e:14:63:19:62:ab:
8f:0e:b4:a8:ef:98:24:d9:d4:28:45:31:22:66:3b:
db:d1:8d:ff:3f:8e:2f:5d:31:31:6b:bd:1c:28:00:
f1:fa:61:a2:f3:72:b8:16:58:72:1c:96:46:01:fd:
b8:ed:49:fa:6a:d6:01:9e:bd:1e:50:40:df:5e:1a:
c8:9e:d7:10:6b:e4:8b:40:bd:44:5b:7f:74:ab:9b:
6e:d2:e3:c9:29:9d:44:59:7f:38:d6:4f:a7:de:b9:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:83:13:F6:AC:00:AB:77:81:75:14:A6:1F:B3:E9:64:72:91:3C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BrSDE_asAKt3gXUUph-z6WRykTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8fc0::/44
Signature Algorithm: sha256WithRSAEncryption
26:de:b0:54:6e:5e:11:32:f9:85:16:9f:5a:e1:db:cd:68:82:
e5:66:ea:12:a6:c3:38:f9:75:c9:3e:04:5a:9a:c0:a1:b7:f0:
67:ee:25:aa:41:ef:92:c9:c4:a9:c9:35:0f:e1:be:62:18:3e:
5d:c0:42:11:e7:59:ad:80:de:52:83:64:3a:8f:06:b2:2b:51:
fc:19:72:5f:3b:36:bb:0f:a7:67:3e:90:52:b9:0d:2b:99:55:
d2:18:64:af:fd:43:54:bf:e4:f6:f7:d2:57:ac:8a:ad:d3:0c:
00:67:e3:6c:e0:9d:de:06:17:38:78:31:0e:ed:9d:97:d3:35:
e7:6a:24:5d:f9:bd:93:d6:25:a6:6c:4a:15:15:e3:bc:80:94:
f9:3b:d4:57:eb:26:25:37:ac:86:d7:66:bf:e3:94:82:9d:e1:
3e:9d:16:e6:02:7a:38:24:3f:b4:38:fc:98:df:31:15:3a:ab:
76:4b:58:2e:47:88:4a:48:5f:2a:ed:0c:80:48:22:15:f7:9d:
10:5b:ee:4e:34:20:f7:b9:57:6f:c4:a9:d2:2a:c1:c7:e7:6f:
9d:b5:bb:a5:8b:70:1e:7c:27:97:a6:cc:ec:c6:69:38:1e:5b:
0a:cc:e1:27:99:8f:40:c8:6a:5e:81:1a:49:6c:68:62:d9:9e:
a4:e0:6e:6f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZluXwCGdR4JmTmsPainsrIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwOTIxMjIyMjIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmI0ODMxM2Y2YWMwMGFiNzc4MTc1MTRhNjFmYjNlOTY0NzI5MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp2cbR1rWzLi/vDegWzrWIQ/rUDD
c/iD3LGk3PqTLExwZSQIDAZ4UYMDrFSugn2ct2GJXe/udbL5yZIJGD2fkdNG6Hdw
it9ICs3ezrebyysf3Yne3nxf1cD+UqSuSdt9aMEl8OIADA1UmJMIHkw3uzj/RLHU
6X8ezvZuS6ildpW+9PdhYj1KlDVW8wqRN8uUs0/KKfvfEYyOh9fLovRuFGMZYquP
DrSo75gk2dQoRTEiZjvb0Y3/P44vXTExa70cKADx+mGi83K4FlhyHJZGAf247Un6
atYBnr0eUEDfXhrIntcQa+SLQL1EW390q5tu0uPJKZ1EWX841k+n3rnJQwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAa0gxP2rACrd4F1FKYfs+lkcpE8MB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvQnJTREVfYXNBS3QzZ1hVVXBoLXo2V1J5a1R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQI/A
MA0GCSqGSIb3DQEBCwUAA4IBAQAm3rBUbl4RMvmFFp9a4dvNaILlZuoSpsM4+XXJ
PgRamsCht/Bn7iWqQe+SycSpyTUP4b5iGD5dwEIR51mtgN5Sg2Q6jwayK1H8GXJf
Oza7D6dnPpBSuQ0rmVXSGGSv/UNUv+T299JXrIqt0wwAZ+Ns4J3eBhc4eDEO7Z2X
0zXnaiRd+b2T1iWmbEoVFeO8gJT5O9RX6yYlN6yG12a/45SCneE+nRbmAno4JD+0
OPyY3zEVOqt2S1guR4hKSF8q7QyASCIV950QW+5ONCD3uVdvxKnSKsHH52+dtbul
i3AefCeXpszsxmk4HlsKzOEnmY9AyGpegRpJbGhi2Z6k4G5v
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:21 2025 by rpki-client