Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Cpp9sBpix_T2iW4S6p7q8hEU8lQ.roa
File: Cpp9sBpix_T2iW4S6p7q8hEU8lQ.roa (raw, json)
Hash identifier: VcUfmzBXdQpqaNyR9R3IwiBPHmvyh0xAp+yjIgKthBY=
Subject key identifier: 0A:9A:7D:B0:1A:62:C7:F4:F6:89:6E:12:EA:9E:EA:F2:11:14:F2:54
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01A03AF7B7585124E2A46EE9D8965E2D0DD7
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Cpp9sBpix_T2iW4S6p7q8hEU8lQ.roa
Signing time: Tue 25 Aug 2026 22:08:27 +0000
ROA not before: Tue 25 Aug 2026 22:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 185.86.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f7:b7:58:51:24:e2:a4:6e:e9:d8:96:5e:2d:0d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 25 22:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a9a7db01a62c7f4f6896e12ea9eeaf21114f254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:23:b5:b1:59:67:f2:db:3c:39:c2:dc:c9:
2c:26:1b:01:7e:04:34:78:16:2a:04:e4:c6:60:1f:
65:f3:8c:cc:78:ba:47:b1:15:f5:c5:47:68:24:98:
99:25:cf:ee:0b:02:56:52:d7:70:8b:e0:3e:c8:8d:
5a:fe:44:8c:c9:f5:41:d4:d8:a1:bc:2b:a5:b8:71:
bb:f6:4e:da:16:69:96:24:c3:3f:4f:4e:07:3c:2a:
76:97:6e:78:ed:04:e4:70:a7:c4:b1:f4:e7:a6:09:
4e:1c:e3:a8:b4:9e:66:ba:b3:a6:0a:8e:a7:e5:b5:
a0:39:26:70:7d:e8:e3:6d:7b:e1:d6:5e:ae:53:a7:
15:f7:06:0b:ad:3d:8d:75:e1:7e:19:a7:87:04:c5:
52:55:f0:e8:78:85:19:ba:a7:51:d6:b5:5d:48:f7:
f0:24:89:a6:1e:26:76:5a:70:1d:5e:2a:3b:54:1f:
af:3e:3b:01:b0:8c:7a:ed:32:3c:29:07:dd:d4:82:
1e:6b:85:33:b4:fa:c6:1e:96:6c:11:8c:41:4c:8c:
e2:7b:39:e2:1a:c0:b4:60:c2:48:a5:b0:8b:da:d5:
1f:fc:77:e8:d5:ff:90:f2:7c:fc:41:83:68:89:ca:
4f:47:4b:66:ef:cf:1e:6d:87:b4:b5:e6:18:6f:c6:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9A:7D:B0:1A:62:C7:F4:F6:89:6E:12:EA:9E:EA:F2:11:14:F2:54
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Cpp9sBpix_T2iW4S6p7q8hEU8lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.140.0/23
Signature Algorithm: sha256WithRSAEncryption
56:41:fd:5f:b1:25:0a:48:e1:f6:0f:e9:5c:4a:d3:1a:ec:59:
95:14:46:bb:c4:49:c5:b8:48:40:6c:ac:07:a6:da:62:95:2b:
f1:7a:c5:63:97:3e:d5:f1:6a:f5:69:1b:e9:15:48:4f:a3:66:
7b:bd:2a:3b:c1:6f:19:18:85:95:09:35:e2:73:13:0d:ff:a7:
44:48:ae:fd:67:9a:0a:60:56:76:23:76:96:22:cd:43:fb:db:
a8:ff:85:77:fd:78:54:ab:f2:15:73:96:5f:12:6c:02:c3:dd:
77:d0:93:f9:9e:fd:d8:39:3c:a3:55:94:52:97:0c:29:17:97:
4c:c4:4d:8d:a9:14:02:64:27:9c:df:00:b4:09:64:e8:22:a3:
26:30:4c:96:f2:09:97:2d:be:f1:08:ae:a8:6c:34:8a:66:f1:
e9:16:6d:81:a4:83:bb:41:78:4b:31:fe:e0:26:d5:8b:8a:1f:
b7:1c:55:85:f2:6c:54:f7:b1:50:23:30:55:38:6f:79:e4:1a:
48:97:a3:a1:9b:6b:e4:57:99:f1:bf:b3:86:ce:2a:a3:ff:2e:
22:66:63:3f:fd:a2:cc:cc:98:90:55:d1:b1:77:4f:85:cc:5e:
b2:2b:67:49:74:1e:ad:62:2d:14:21:d4:bd:d8:b9:50:9f:8a:
d7:f1:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:23 2026 by rpki-client