Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/2vyrNEfeIOD6xcLTqFu0oLa-5G4.roa
File: 2vyrNEfeIOD6xcLTqFu0oLa-5G4.roa (raw, json)
Hash identifier: uFqWVlm0cwnANk3/QwT5C/PcbdcVaXWkyGLU3XeB7yE=
Subject key identifier: DA:FC:AB:34:47:DE:20:E0:FA:C5:C2:D3:A8:5B:B4:A0:B6:BE:E4:6E
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A08A6BFA8D69DAF8F91A069E571DF2164C
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/2vyrNEfeIOD6xcLTqFu0oLa-5G4.roa
Signing time: Thu 10 Sep 2026 08:25:27 +0000
ROA not before: Thu 10 Sep 2026 08:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:6b:fa:8d:69:da:f8:f9:1a:06:9e:57:1d:f2:16:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 10 08:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dafcab3447de20e0fac5c2d3a85bb4a0b6bee46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:7b:7c:8b:e9:7a:32:6c:d8:f9:85:76:d6:
43:6d:35:58:60:34:f1:82:9a:0b:1a:a6:2a:4d:c6:
02:4b:a8:94:c6:25:fd:c6:3b:fa:6e:c9:82:ca:9b:
d0:e5:ea:ae:df:07:e1:f2:22:4d:ff:94:86:40:77:
4f:9a:c9:25:cf:83:eb:fa:45:f4:03:89:16:a1:21:
56:99:de:e1:2d:f9:56:39:8c:08:b9:80:65:e6:c9:
9e:71:3a:51:44:bc:ae:48:67:88:f6:d3:54:b3:aa:
4a:3e:65:8e:03:cd:7c:fe:de:6f:42:61:c3:ec:59:
33:b8:fc:ee:e7:5d:48:29:04:09:7c:8a:78:29:6c:
76:c4:ee:0d:4b:cd:ee:e3:c8:1a:d3:39:01:c3:9a:
99:bf:bc:37:a2:b8:a4:f4:57:51:19:24:c0:c6:13:
76:e1:69:ee:52:fe:05:f0:7d:c0:62:ae:c9:e9:46:
8a:fc:b4:80:65:7e:bf:dc:f0:ef:34:f3:d1:92:60:
2a:3e:ca:09:cb:56:20:b4:5a:3a:72:45:15:d6:08:
46:e6:44:16:f8:0f:e3:3a:ac:f1:37:22:2b:0d:06:
5e:d1:c1:93:f8:40:fe:c0:61:be:b9:ee:d7:a5:5b:
49:20:98:61:2b:5c:ea:54:58:56:79:81:58:9d:3a:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:AB:34:47:DE:20:E0:FA:C5:C2:D3:A8:5B:B4:A0:B6:BE:E4:6E
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/2vyrNEfeIOD6xcLTqFu0oLa-5G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.196.0/24
80.93.198.0/24
80.93.204.0-80.93.206.255
Signature Algorithm: sha256WithRSAEncryption
73:3a:70:98:70:aa:a0:01:3b:10:22:ee:44:12:1f:90:6c:11:
58:34:db:54:c6:f4:cb:36:36:dc:de:29:52:5e:17:8c:19:6b:
db:7c:00:71:bd:76:62:04:50:5f:7d:ae:2d:d7:33:ca:20:58:
4a:3b:2a:fd:9f:0d:5c:6f:43:64:ae:bb:80:c8:5f:bc:3f:9f:
39:33:b6:60:b1:43:6d:aa:8c:a7:2d:72:aa:76:2b:85:c0:67:
f1:ae:a9:6e:90:fd:6d:b3:f8:1e:35:f4:83:52:ec:20:6f:92:
b0:8b:09:3e:09:c0:29:46:0b:82:03:64:66:e9:60:14:85:bc:
85:78:36:e9:33:17:af:06:a7:a1:c7:12:41:0a:f3:6d:2b:a2:
54:e9:6b:54:d1:4f:61:c2:b2:7d:1f:89:c3:ad:fa:d5:e3:0a:
10:ad:9d:61:9b:f3:b7:94:70:33:d6:e6:c1:6a:89:2d:9e:36:
89:be:85:fb:75:5c:80:3c:38:07:b2:1e:17:12:6f:df:cd:a4:
2a:9f:a4:3f:e7:cc:1c:c4:f8:88:26:7e:11:bf:e5:eb:65:3d:
30:0c:2c:e8:57:aa:36:b2:2f:3b:40:5c:ef:34:70:01:33:a8:
08:e6:ca:cd:27:39:5e:f2:9e:61:73:8d:30:72:84:84:d4:ca:
d7:f9:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:27:14 2026 by rpki-client