Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/BzJSjNhx5MWI5ZIlWEzinLfJWp8.roa
File: BzJSjNhx5MWI5ZIlWEzinLfJWp8.roa (raw, json)
Hash identifier: 4xTJguN7o3iRrYCcOEV50JW5ghhoz8ozCdLzv3/vPRQ=
Subject key identifier: 07:32:52:8C:D8:71:E4:C5:88:E5:92:25:58:4C:E2:9C:B7:C9:5A:9F
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01A0613B5519AE0B6027B1F252BE0047D154
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/BzJSjNhx5MWI5ZIlWEzinLfJWp8.roa
Signing time: Wed 02 Sep 2026 08:27:53 +0000
ROA not before: Wed 02 Sep 2026 08:27:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207059
IP address blocks: 195.39.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:3b:55:19:ae:0b:60:27:b1:f2:52:be:00:47:d1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Sep 2 08:27:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0732528cd871e4c588e59225584ce29cb7c95a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:78:cd:31:0d:e0:ea:ca:8d:9a:7c:ae:50:
d1:70:55:85:00:e4:76:18:86:6d:e9:83:08:b8:35:
2b:e6:9a:ab:39:25:45:c9:e1:82:ac:41:05:5f:84:
96:e8:b0:56:fa:e1:cd:02:d1:36:db:e0:15:0c:39:
0a:6b:6c:59:87:ea:09:6f:f8:5d:70:d8:ea:c7:c0:
6f:9b:31:22:57:c4:7c:0b:bd:b6:5c:fe:3a:dd:18:
26:7b:7b:ff:49:a3:95:4d:01:d1:11:90:70:2a:36:
a3:1d:30:0b:25:08:72:98:b1:52:b4:0e:43:52:bd:
ad:fa:04:6a:ff:ef:b4:9e:ba:24:1f:dc:bd:ab:54:
0c:c2:6c:48:2b:d9:45:25:21:cd:ad:c3:7c:40:21:
5d:61:70:11:ea:c4:a4:e8:e1:7c:97:1e:a9:32:b4:
ec:41:57:a5:16:8c:de:92:eb:f0:48:87:66:17:36:
06:2c:96:f4:4d:d9:9d:1c:24:cb:b5:10:2d:e1:4e:
6c:1d:ce:0d:91:77:62:b2:cf:c1:51:be:f5:a4:4e:
8d:b1:fe:ae:92:ab:54:55:37:b5:cd:41:69:c4:04:
58:af:4b:33:07:3c:82:16:11:13:63:24:2d:23:8c:
c2:61:a2:fa:76:88:e8:d1:e7:d9:72:3f:b8:93:0f:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:52:8C:D8:71:E4:C5:88:E5:92:25:58:4C:E2:9C:B7:C9:5A:9F
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/BzJSjNhx5MWI5ZIlWEzinLfJWp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.207.0/24
Signature Algorithm: sha256WithRSAEncryption
35:15:bb:5d:89:04:3a:90:f4:f8:6a:8e:7e:62:de:bb:30:9a:
54:66:d6:19:33:8a:24:ac:48:6d:77:2c:2d:06:8d:99:52:9d:
22:4a:86:c9:a5:15:05:7d:9c:df:59:33:0d:0d:f4:08:94:59:
bb:50:ea:e0:5b:d0:aa:3d:46:fc:a9:e8:b3:80:a0:73:1f:47:
6a:3e:21:fa:5b:75:0d:eb:52:d3:b4:a8:33:72:6c:6e:3c:87:
d4:78:2e:06:61:ad:23:0b:7b:94:30:7d:e2:db:16:97:f3:58:
51:6b:be:84:7f:5c:39:25:99:8d:69:8b:58:75:0b:b9:47:64:
b8:db:c3:a1:31:01:60:68:d9:3a:2a:59:03:23:aa:16:a1:9a:
59:56:34:c4:34:b4:ef:d7:dd:3a:7b:14:9d:4c:c5:a3:a6:91:
70:0c:28:6c:ec:b2:35:f2:9a:a3:a0:c5:2c:da:45:cb:1d:64:
55:f6:13:13:e3:76:03:9f:aa:0e:83:25:57:16:c5:ac:a9:da:
b4:74:be:ba:49:c4:b2:66:c6:17:a3:24:30:0c:22:14:6c:60:
43:ad:ce:10:97:82:13:b4:79:c2:60:2d:b4:64:f6:c7:fa:00:
59:8a:29:db:c8:f2:a1:b4:2c:7a:f6:5e:5c:94:6d:9f:79:84:
57:a4:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:24:10 2026 by rpki-client