Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/Bz7pimrAPn_drIt3hwTMVQrO7_s.roa
File: Bz7pimrAPn_drIt3hwTMVQrO7_s.roa (raw, json)
Hash identifier: hAiaXIxPUqnmkWArseV5KiXxTVvTzSgWXYHTg8qnn7Y=
Subject key identifier: 07:3E:E9:8A:6A:C0:3E:7F:DD:AC:8B:77:87:04:CC:55:0A:CE:EF:FB
Certificate issuer: /CN=09a686e370d6d0608119eeb006c8aadaab078d22
Certificate serial: 01A0B4871736137DB087963463762B893B19
Authority key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/Bz7pimrAPn_drIt3hwTMVQrO7_s.roa
Signing time: Fri 18 Sep 2026 12:39:07 +0000
ROA not before: Fri 18 Sep 2026 12:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218632
IP address blocks: 86.105.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:87:17:36:13:7d:b0:87:96:34:63:76:2b:89:3b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a686e370d6d0608119eeb006c8aadaab078d22
Validity
Not Before: Sep 18 12:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073ee98a6ac03e7fddac8b778704cc550aceeffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:da:20:ad:8a:a6:fd:40:00:30:fc:80:13:
68:87:df:04:81:d1:04:ee:c0:c4:6f:45:b5:8b:2e:
70:43:e6:1a:a2:41:fd:9a:6f:ad:77:7f:24:4e:86:
38:67:8c:6f:6e:f6:4a:32:2a:2f:ae:5e:4e:7f:dd:
d8:c9:23:e9:40:59:14:9c:3d:6a:7d:30:47:69:aa:
8c:6e:a8:be:ef:cc:e9:a6:79:4f:5b:01:e4:a0:57:
3f:8c:89:97:9e:7c:50:31:b8:87:c4:7d:3d:1c:bf:
1b:f2:69:ab:8b:de:ba:f8:20:d1:cd:e7:37:35:9f:
14:13:7d:51:61:c1:03:06:f9:70:47:04:32:05:14:
31:2b:fc:47:70:fb:1d:db:de:34:50:f2:d2:f2:be:
07:6a:0b:61:3f:10:13:eb:61:57:da:1e:bb:16:62:
5b:12:08:54:9a:f7:59:b0:d3:83:e8:a9:0d:14:c7:
8d:6c:ad:24:26:e2:1c:ef:05:cf:04:fb:02:2b:27:
14:24:5e:d4:fe:fd:55:77:2b:37:3a:71:d0:70:00:
eb:b6:62:1e:28:ba:32:e3:70:8e:fc:9b:93:6e:1f:
56:1c:9a:5b:c5:f3:9a:6a:b0:a8:27:a9:33:01:d8:
41:25:26:d9:f7:01:c5:37:26:a6:53:fb:8d:e4:78:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3E:E9:8A:6A:C0:3E:7F:DD:AC:8B:77:87:04:CC:55:0A:CE:EF:FB
X509v3 Authority Key Identifier:
keyid:09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/Bz7pimrAPn_drIt3hwTMVQrO7_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7c:26:9a:84:d1:85:d1:e4:cd:c3:c0:01:e0:95:68:16:f2:
32:5d:ed:97:6d:86:dd:08:76:0a:c6:81:4e:cb:5c:4a:3a:3a:
a9:42:35:16:24:bf:e4:d6:d0:1a:6a:91:50:e5:aa:2e:63:77:
0f:66:09:42:73:81:25:5b:09:64:de:41:00:83:81:f8:b8:2e:
8a:5b:8e:61:df:bc:55:f0:4c:7b:b5:c4:fb:21:90:55:6a:d2:
62:2d:a2:78:ab:97:6e:ec:a7:8f:b6:44:06:95:97:52:8f:1a:
4e:b6:45:f8:9d:83:c2:d3:7e:74:b9:63:0a:25:cc:26:62:2a:
0c:36:1c:31:ab:8c:5e:3d:2d:28:28:c9:44:cd:54:6d:9f:2d:
43:bb:08:df:b5:72:1d:0f:25:69:c2:e4:0b:cf:0e:7d:57:ef:
88:c1:42:4e:d9:ff:df:16:b3:fa:1c:e6:fe:98:ff:b0:33:be:
7e:7d:eb:c8:d4:77:bc:5e:4e:4d:2b:56:ea:ac:45:86:d9:30:
dd:f5:a0:ad:79:d9:51:2f:31:b8:9c:59:a3:a9:4b:51:24:b9:
e5:3e:78:4c:98:52:1a:4f:bb:bc:a4:02:2a:26:4c:3d:8b:a3:
13:1b:09:83:73:74:63:1a:ae:e0:0b:6d:e2:f0:7e:30:2b:25:
5f:8c:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:32:14 2026 by rpki-client