Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/brjSKEHmfS6lAMZx6RJuTagMq3c.roa
File: brjSKEHmfS6lAMZx6RJuTagMq3c.roa (raw, json)
Hash identifier: N5y4NLLWfawQoJGvUgnTmwBCz+OJoUCNvs+6Sj/iEA8=
Subject key identifier: 6E:B8:D2:28:41:E6:7D:2E:A5:00:C6:71:E9:12:6E:4D:A8:0C:AB:77
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 019EF3FEFF652868EBDECB8B06325FD5E217
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/brjSKEHmfS6lAMZx6RJuTagMq3c.roa
Signing time: Tue 23 Jun 2026 10:20:35 +0000
ROA not before: Tue 23 Jun 2026 10:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 87.232.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:fe:ff:65:28:68:eb:de:cb:8b:06:32:5f:d5:e2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Jun 23 10:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eb8d22841e67d2ea500c671e9126e4da80cab77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:a1:92:5d:c9:49:d6:b1:bc:96:01:29:d3:
da:12:06:86:f7:7f:0d:85:0c:31:09:9d:e1:66:8d:
fb:27:11:13:58:d3:e5:17:4e:ab:0c:b1:0a:36:b6:
31:83:04:e1:40:09:b3:56:76:17:57:db:4f:8c:15:
40:cc:73:d9:82:66:fc:6a:46:96:ab:75:81:6c:b2:
1a:a4:57:dc:70:45:06:8d:ec:a6:b2:f9:1f:3d:89:
8a:ff:34:38:78:ff:f4:7f:96:74:87:52:d8:be:7f:
3b:4b:d2:9c:ce:f4:84:f4:8f:7d:b8:bb:9c:ea:4a:
f3:29:b8:c1:6d:53:e3:e3:b6:6d:38:77:68:5f:5b:
ac:8a:52:31:19:12:70:58:bb:58:49:eb:57:4b:e9:
46:12:a2:38:d2:ab:df:9c:2b:3a:6f:e3:c9:1f:89:
c1:de:86:c0:64:90:00:c3:be:e4:89:48:b7:10:39:
ae:57:ed:0d:a2:09:44:78:e2:c8:93:e8:7b:06:b5:
50:7a:06:6b:24:f5:ea:1c:49:b0:0f:49:4c:2f:59:
e4:b7:a2:ef:0a:47:09:47:39:ee:d5:53:2d:4d:1b:
4a:ae:bb:2b:63:ef:aa:ce:b1:98:7b:29:38:ca:a2:
79:64:90:31:b4:5d:f0:25:f3:f7:25:39:5e:f6:0f:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:D2:28:41:E6:7D:2E:A5:00:C6:71:E9:12:6E:4D:A8:0C:AB:77
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/brjSKEHmfS6lAMZx6RJuTagMq3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.77.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3d:59:a8:28:a4:eb:63:ab:39:15:f5:8c:9e:1c:00:9a:22:
5a:c2:58:f1:4a:38:4a:55:1e:f7:1f:07:69:12:3c:7f:e0:0d:
ab:18:b4:1b:00:6a:66:39:e8:c0:de:2e:54:2d:7f:31:9a:b4:
3a:4c:04:77:8c:d7:70:c9:3f:69:98:6f:72:f9:d9:63:08:0e:
a8:58:96:2e:db:ba:59:b7:4b:0c:88:66:c0:da:38:6c:58:c7:
ea:72:cc:5a:ee:46:0e:18:67:1a:0d:ba:0c:20:18:c8:c1:a2:
f1:80:ac:05:b0:a5:d5:d0:26:12:b8:1b:9f:08:a3:1b:f1:9f:
30:49:8b:70:2e:6c:d3:5f:72:e6:cc:fe:a2:7b:d5:65:ef:95:
74:79:60:a8:43:16:ee:67:de:7a:06:c9:c3:bb:b8:b7:b6:dc:
57:e8:f4:7e:c0:7b:fe:d0:b3:a6:68:0a:34:a1:e6:6c:6d:a7:
f5:c5:db:2f:d5:d7:68:d8:ef:c9:0f:cb:3a:d9:b4:99:87:07:
c3:aa:d3:2c:dd:91:cf:3f:2a:bf:8c:aa:04:4b:8d:5b:4f:7c:
29:8e:c7:ea:34:ea:5e:57:84:1a:95:57:9c:11:34:b6:51:0c:
58:e6:f5:02:98:de:71:9b:2b:f2:72:5a:46:04:05:8e:b4:f8:
24:5b:73:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7z/v9lKGjr3suLBjJf1eIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYwNjIzMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWI4ZDIyODQxZTY3ZDJlYTUwMGM2NzFlOTEyNmU0ZGE4MGNhYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ahkl3JSdaxvJYBKdPaEgaG938N
hQwxCZ3hZo37JxETWNPlF06rDLEKNrYxgwThQAmzVnYXV9tPjBVAzHPZgmb8akaW
q3WBbLIapFfccEUGjeymsvkfPYmK/zQ4eP/0f5Z0h1LYvn87S9KczvSE9I99uLuc
6krzKbjBbVPj47ZtOHdoX1usilIxGRJwWLtYSetXS+lGEqI40qvfnCs6b+PJH4nB
3obAZJAAw77kiUi3EDmuV+0NoglEeOLIk+h7BrVQegZrJPXqHEmwD0lML1nkt6Lv
CkcJRznu1VMtTRtKrrsrY++qzrGYeyk4yqJ5ZJAxtF3wJfP3JTle9g+HOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG640ihB5n0upQDGcekSbk2oDKt3MB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEvYnJqU0tFSG1mUzZsQU1aeDZSSnVUYWdNcTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hNMA0G
CSqGSIb3DQEBCwUAA4IBAQAkPVmoKKTrY6s5FfWMnhwAmiJawljxSjhKVR73Hwdp
Ejx/4A2rGLQbAGpmOejA3i5ULX8xmrQ6TAR3jNdwyT9pmG9y+dljCA6oWJYu27pZ
t0sMiGbA2jhsWMfqcsxa7kYOGGcaDboMIBjIwaLxgKwFsKXV0CYSuBufCKMb8Z8w
SYtwLmzTX3LmzP6ie9Vl75V0eWCoQxbuZ956BsnDu7i3ttxX6PR+wHv+0LOmaAo0
oeZsbaf1xdsv1ddo2O/JD8s62bSZhwfDqtMs3ZHPPyq/jKoES41bT3wpjsfqNOpe
V4QalVecETS2UQxY5vUCmN5xmyvyclpGBAWOtPgkW3Pq
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:16 2026 by rpki-client