Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/47w7yAN4m9GfmtGQ55cdPsV53Yk.roa
File: 47w7yAN4m9GfmtGQ55cdPsV53Yk.roa (raw, json)
Hash identifier: UkfHGypF2kMS+O0MEoKxdfAJ3pVfEeLcgEo0Tou966c=
Subject key identifier: E3:BC:3B:C8:03:78:9B:D1:9F:9A:D1:90:E7:97:1D:3E:C5:79:DD:89
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A06306BB095229BFA6EEB726B0F45133DF
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/47w7yAN4m9GfmtGQ55cdPsV53Yk.roa
Signing time: Wed 02 Sep 2026 16:49:40 +0000
ROA not before: Wed 02 Sep 2026 16:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:06:bb:09:52:29:bf:a6:ee:b7:26:b0:f4:51:33:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 2 16:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3bc3bc803789bd19f9ad190e7971d3ec579dd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:4e:f0:b1:53:e7:9a:b8:47:ca:20:46:26:
1f:cf:76:34:6a:a7:60:f8:8b:66:39:3e:db:84:55:
4c:3e:6d:80:75:fa:69:ef:99:25:80:a5:ab:1d:dd:
90:42:c7:62:b5:23:ab:28:a9:9d:6e:ca:f3:6d:76:
c9:3e:ea:4f:87:83:df:3e:64:c2:46:84:90:9d:27:
08:f6:91:f6:df:65:83:66:db:19:18:c1:09:65:5f:
23:5f:05:ba:c6:ac:50:06:52:d4:82:c5:1c:17:e0:
8f:e2:ed:19:73:33:f8:0a:c7:6c:3f:c9:7f:0a:ed:
92:dc:2c:91:72:05:03:52:70:24:31:94:2e:f8:bc:
24:9f:26:0b:73:a8:f6:33:56:95:ee:8e:85:c9:92:
e3:07:0d:31:b0:0a:00:e0:bb:e9:97:b8:ce:8d:41:
25:fd:6f:20:ef:e2:39:1c:d2:6c:b8:56:52:af:73:
b7:ea:d6:3c:f9:df:00:0e:99:62:e6:b1:c8:b3:8a:
df:00:2d:db:8b:ae:8b:e8:11:67:da:9b:60:50:05:
6f:ef:bb:f6:b1:dc:85:1d:2b:73:6f:e3:6f:e4:3e:
7d:d5:98:73:08:ad:14:0a:e8:95:68:84:ff:4a:17:
78:92:29:c1:f5:da:ea:27:8f:c1:7b:c1:6b:52:b7:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:3B:C8:03:78:9B:D1:9F:9A:D1:90:E7:97:1D:3E:C5:79:DD:89
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/47w7yAN4m9GfmtGQ55cdPsV53Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0a:8a:1e:79:66:be:07:0c:12:95:d4:ab:5f:07:28:4f:8d:
91:2f:88:f4:fd:47:52:32:8e:80:0d:66:6c:16:4b:c5:31:fc:
bd:2a:7b:41:ef:1a:07:b9:4c:62:03:ec:11:75:99:7a:9b:79:
4e:ed:53:cd:2e:14:70:a7:ec:40:33:20:37:b4:8c:ad:16:55:
fc:ed:48:9b:51:41:58:f5:fb:0d:5a:37:18:6a:91:4a:49:a2:
2f:f0:ba:70:1a:41:28:09:54:8a:8f:b2:b2:0d:de:33:cd:3a:
57:9f:9f:b0:b4:b0:05:a2:90:69:a7:c9:3e:26:45:94:cf:10:
c2:76:8c:67:c9:a6:79:71:69:68:88:c3:f6:35:91:79:63:79:
b4:b7:97:96:4a:e3:cd:cf:93:21:83:91:6b:24:67:36:6f:1f:
71:73:28:21:bb:6f:39:cb:10:6d:e6:5a:2d:d1:66:2b:af:87:
ed:e0:21:be:39:d0:9d:00:b9:0c:c6:3a:4a:95:f7:7d:2b:ee:
db:48:15:d0:26:95:1e:0b:d0:96:52:d2:6b:e4:94:06:f3:95:
8f:36:97:a4:b2:59:2c:a9:aa:b0:99:56:d2:5f:31:ac:f4:8b:
2a:c3:56:f5:02:50:fe:b5:44:a9:43:51:c9:49:db:28:24:4e:
ef:9e:87:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:35 2026 by rpki-client