Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BzuRaBAPliMyYr5M5ssJqgR9zTE.roa
File: BzuRaBAPliMyYr5M5ssJqgR9zTE.roa (raw, json)
Hash identifier: gA2vHc4it67eeAa6i5cSQ0SfQa37w2TMHwkfFOmpqmo=
Subject key identifier: 07:3B:91:68:10:0F:96:23:32:62:BE:4C:E6:CB:09:AA:04:7D:CD:31
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F175AAA0114FED5BDD728F1A906F86942
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BzuRaBAPliMyYr5M5ssJqgR9zTE.roa
Signing time: Tue 30 Jun 2026 07:07:25 +0000
ROA not before: Tue 30 Jun 2026 07:07:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 217.79.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:5a:aa:01:14:fe:d5:bd:d7:28:f1:a9:06:f8:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 30 07:07:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073b9168100f96233262be4ce6cb09aa047dcd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:d1:4d:82:d4:31:10:e6:61:9f:a5:76:3f:
3e:d6:2d:e5:0e:29:8c:ca:c6:52:1b:a7:b0:bf:bc:
d8:07:e7:15:7a:82:2c:0f:26:68:01:66:e2:09:e6:
9d:70:16:66:55:e3:46:5c:d5:15:67:31:a8:69:8f:
e9:9a:eb:bc:7a:6e:99:71:e4:0a:c0:bc:28:ba:a1:
26:80:9f:01:c5:eb:23:06:95:3d:13:a9:83:1f:a5:
84:1c:e1:76:5a:7d:fa:2a:c1:39:88:a4:ea:5f:36:
7d:4b:9f:f7:c6:b3:96:61:5d:f6:91:d1:01:cd:1e:
c9:00:c7:18:89:47:f5:2d:74:14:db:67:95:da:18:
28:7b:fe:fc:08:e2:5a:d8:28:4e:bc:77:f3:19:d9:
33:1b:6f:33:bf:ef:16:f2:7b:ac:d9:99:0e:e0:1a:
14:e4:ac:e8:48:55:f8:39:25:dc:26:0a:db:21:1f:
0d:08:59:71:f7:a7:fe:97:7a:dc:c7:30:a3:35:58:
13:64:fb:73:da:b4:17:80:ad:ea:05:14:bb:03:7f:
ff:c8:21:49:5d:68:67:7c:c9:c7:19:98:18:fd:6b:
88:44:0f:fa:fe:b5:cd:46:eb:6a:51:eb:c1:36:59:
70:99:05:be:15:3e:d7:b5:41:33:62:29:7b:04:1f:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:91:68:10:0F:96:23:32:62:BE:4C:E6:CB:09:AA:04:7D:CD:31
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BzuRaBAPliMyYr5M5ssJqgR9zTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a2:c5:fd:e5:67:13:c8:ac:23:9c:50:a7:ef:8f:4a:cd:74:
aa:05:25:31:b8:82:0e:aa:cb:43:37:91:d8:b6:71:11:3a:55:
85:a3:ae:b4:88:07:26:62:0f:03:8b:b2:02:79:54:3a:db:4c:
f9:ee:c5:64:d5:a1:af:9c:2a:cf:0b:90:0e:3f:db:54:87:06:
b9:8d:b1:3f:3b:97:a0:a7:a3:15:d6:51:de:22:6b:4c:46:bd:
3c:3a:51:f8:fe:e6:3e:dc:6d:1c:e4:95:22:a2:d9:52:bf:cb:
3c:4b:e1:c2:24:1a:72:0e:9c:bb:84:ca:3d:32:24:2f:5e:f1:
ed:c3:a6:6f:47:30:53:01:2f:e8:c8:05:15:34:97:2e:ab:39:
83:eb:88:62:05:f5:6c:e7:c6:57:fd:44:85:6d:11:35:13:12:
fe:5b:53:a2:73:7f:ff:f1:38:4a:39:9e:fb:be:aa:85:9e:c0:
7f:95:39:a0:88:db:c7:17:41:55:97:ce:8a:68:40:bd:41:a4:
7c:52:d4:9e:a5:f1:93:b0:d8:9d:68:42:9d:18:06:b5:3d:f5:
1f:ef:b6:01:4e:32:ed:73:40:16:7a:78:fc:b2:ae:f0:07:9f:
0b:f5:a0:ec:34:87:55:0a:7c:08:d7:f9:38:ee:7c:ff:a3:f8:
94:b5:f1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 23:59:03 2026 by rpki-client