Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/4XZnkEKp-uK_gTMIZt6YebiBv1k.roa
File: 4XZnkEKp-uK_gTMIZt6YebiBv1k.roa (raw, json)
Hash identifier: DdSenes6KRRZzkLiTnmZJz9e6S5719MOIJUSLiKWFDs=
Subject key identifier: E1:76:67:90:42:A9:FA:E2:BF:81:33:08:66:DE:98:79:B8:81:BF:59
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A1AB13CC0F8F2DB4CBE5F6C0BDDEE6E9F0
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/4XZnkEKp-uK_gTMIZt6YebiBv1k.roa
Signing time: Thu 05 Nov 2026 09:39:23 +0000
ROA not before: Thu 05 Nov 2026 09:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:13:cc:0f:8f:2d:b4:cb:e5:f6:c0:bd:de:e6:e9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Nov 5 09:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e176679042a9fae2bf81330866de9879b881bf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:9d:fe:b5:8c:45:76:35:e8:0f:af:3a:b6:f0:
70:1b:d4:31:01:95:26:f1:d8:ad:61:6e:43:4d:2e:
76:15:32:af:fa:a1:ff:08:35:a4:2c:21:76:62:c1:
1a:3d:6f:65:dd:eb:fa:42:d9:2d:e2:d7:cb:60:e8:
ee:f3:e7:85:85:92:72:8c:0f:8d:77:92:7e:f4:d8:
64:af:5a:f9:97:2c:16:05:ab:0a:e0:10:ab:4a:35:
cf:80:9a:8c:bf:98:30:84:0c:b9:f5:01:71:62:be:
17:2f:91:56:b6:9c:80:d3:11:df:5c:12:0a:ec:cc:
b2:c9:20:e0:7a:e2:0a:40:bd:a7:db:3b:83:6c:6b:
fb:c6:02:a8:b1:45:a3:d4:4f:4e:16:79:95:ec:b5:
8f:5e:37:9e:bd:81:df:4c:8c:9e:35:43:3f:6a:75:
16:6a:b3:19:6a:cb:4e:c6:b8:04:07:65:08:19:07:
7a:b4:49:f9:59:b5:b5:45:aa:72:fa:3e:04:66:36:
d5:05:88:80:14:1a:cc:a0:66:8f:fe:fe:3d:ff:46:
3f:1c:39:0e:49:b0:5c:d2:87:8e:c6:64:c9:f8:00:
3e:b0:53:db:02:d8:73:e7:d4:e3:2b:a3:87:5a:e7:
80:79:95:5d:11:33:17:e3:f3:3e:8a:3a:65:ac:8b:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:67:90:42:A9:FA:E2:BF:81:33:08:66:DE:98:79:B8:81:BF:59
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/4XZnkEKp-uK_gTMIZt6YebiBv1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.196.0/24
80.93.198.0/23
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:62:42:89:c7:f2:9b:7a:e8:e6:af:e7:7d:1a:a1:45:32:95:
e2:d5:57:bf:50:e3:92:ae:b9:bb:71:54:c0:13:ed:02:a1:f9:
ae:22:7e:4a:96:11:a4:50:b8:ff:32:c6:6d:cb:27:bd:8e:a1:
56:2a:60:8a:2d:20:e7:64:bf:fc:cc:f7:84:41:02:86:87:0a:
db:90:2f:1b:31:9c:a7:4c:e6:5f:c7:20:f6:a5:af:2b:05:5e:
5c:49:70:5a:2c:51:bd:2d:56:b6:a1:3f:01:6c:fd:8e:3d:bb:
27:63:b2:75:a2:bf:bf:25:50:6f:e8:fc:0c:67:5f:9f:d0:12:
a2:02:da:1d:27:69:44:8a:18:07:1a:a7:a1:7a:6b:27:8f:50:
7b:d3:71:d9:20:6e:0f:0e:09:96:d1:c6:29:0e:73:54:f1:67:
b9:82:01:f1:fa:58:5c:8f:4f:e1:3f:47:1a:10:8d:cd:2a:15:
d3:52:b9:c1:04:3f:79:6c:c2:81:2f:0f:6f:37:d7:e9:57:a4:
2f:5a:24:ee:76:9e:5d:23:ed:80:fd:d1:e4:cf:1c:bb:56:e0:
f6:f5:9b:52:2b:35:57:00:29:25:38:a0:d0:b1:67:4a:7c:59:
3b:e7:33:ca:e1:4d:19:58:df:b4:85:51:c0:0f:a7:35:6a:5b:
eb:08:5f:3d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaGrE8wPjy20y+X2wL3e5unwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYxMTA1MDkzOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTc2Njc5MDQyYTlmYWUyYmY4MTMzMDg2NmRlOTg3OWI4ODFiZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+p3+tYxFdjXoD686tvBwG9QxAZUm
8ditYW5DTS52FTKv+qH/CDWkLCF2YsEaPW9l3ev6Qtkt4tfLYOju8+eFhZJyjA+N
d5J+9Nhkr1r5lywWBasK4BCrSjXPgJqMv5gwhAy59QFxYr4XL5FWtpyA0xHfXBIK
7MyyySDgeuIKQL2n2zuDbGv7xgKosUWj1E9OFnmV7LWPXjeevYHfTIyeNUM/anUW
arMZastOxrgEB2UIGQd6tEn5WbW1Rapy+j4EZjbVBYiAFBrMoGaP/v49/0Y/HDkO
SbBc0oeOxmTJ+AA+sFPbAthz59TjK6OHWueAeZVdETMX4/M+ijplrIslKQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOF2Z5BCqfriv4EzCGbemHm4gb9ZMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvNFhabmtFS3AtdUtfZ1RNSVp0NlllYmlCdjFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUF3BAwQA
UF3EAwQBUF3GAwQCUF3MMA0GCSqGSIb3DQEBCwUAA4IBAQBcYkKJx/Kbeujmr+d9
GqFFMpXi1Ve/UOOSrrm7cVTAE+0CofmuIn5KlhGkULj/MsZtyye9jqFWKmCKLSDn
ZL/8zPeEQQKGhwrbkC8bMZynTOZfxyD2pa8rBV5cSXBaLFG9LVa2oT8BbP2OPbsn
Y7J1or+/JVBv6PwMZ1+f0BKiAtodJ2lEihgHGqehemsnj1B703HZIG4PDgmW0cYp
DnNU8We5ggHx+lhcj0/hP0caEI3NKhXTUrnBBD95bMKBLw9vN9fpV6QvWiTudp5d
I+2A/dHkzxy7VuD29ZtSKzVXACklOKDQsWdKfFk75zPK4U0ZWN+0hVHAD6c1alvr
CF89
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:24:16 2026 by rpki-client