Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/6y3oRw3nYteMCJtK4uy0H0RCKeg.roa
File: 6y3oRw3nYteMCJtK4uy0H0RCKeg.roa (raw, json)
Hash identifier: 9i0Xm0a/amdzlzG2cdULFMUKlFI5eHMiCm8ALmpX8p0=
Subject key identifier: EB:2D:E8:47:0D:E7:62:D7:8C:08:9B:4A:E2:EC:B4:1F:44:42:29:E8
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019FC815BC116739967240DCF94FF81BF3E0
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/6y3oRw3nYteMCJtK4uy0H0RCKeg.roa
Signing time: Mon 03 Aug 2026 14:44:55 +0000
ROA not before: Mon 03 Aug 2026 14:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:15:bc:11:67:39:96:72:40:dc:f9:4f:f8:1b:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 3 14:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb2de8470de762d78c089b4ae2ecb41f444229e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6a:9b:4b:98:3f:b1:fc:08:a3:25:02:06:2a:
f0:db:36:3a:a4:7c:31:cd:fb:69:68:b3:f3:da:37:
7c:28:66:13:1a:7d:1b:19:85:f4:80:57:d0:5f:45:
fd:bb:19:bb:bb:2f:24:81:f3:fb:6d:19:3d:69:59:
a8:7e:10:00:2e:94:07:73:9f:a8:3c:1c:ec:f9:2b:
83:60:65:0b:52:47:37:1f:ce:e8:f2:ad:9c:f2:b8:
da:f3:b4:3f:aa:e6:2a:61:6e:0f:ca:7d:78:85:28:
b1:f3:4c:ef:a3:d7:2b:cb:60:7a:91:69:94:bd:7d:
06:6c:14:d7:11:1d:24:48:51:a0:fa:84:3d:77:da:
d0:b9:d0:0c:c2:c5:56:a1:a9:73:8e:b8:ef:40:30:
76:44:1b:75:7f:ad:ff:2b:7c:b2:d3:c6:41:af:b6:
43:3f:8a:65:11:36:97:d2:c2:61:6e:df:86:08:ef:
da:10:67:7c:a9:04:21:c4:72:96:48:78:d7:7b:ef:
d1:72:62:39:2f:b6:0b:15:64:33:02:4e:a3:a1:7a:
16:ca:b4:bd:5a:ec:df:f7:c9:28:bc:17:e7:85:8d:
cf:09:e9:fe:ce:cf:ea:b1:e2:ae:6d:11:cd:e3:9d:
a2:8e:ae:d4:ee:98:8f:15:d9:08:5e:37:39:d1:15:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2D:E8:47:0D:E7:62:D7:8C:08:9B:4A:E2:EC:B4:1F:44:42:29:E8
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/6y3oRw3nYteMCJtK4uy0H0RCKeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.196.0/24
80.93.198.0/23
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
39:79:86:b7:c2:4c:d7:b9:35:5d:39:e0:c7:af:ff:6e:67:16:
09:76:ef:d7:13:f2:00:90:18:3b:4b:6b:86:be:0d:f4:96:60:
93:d4:45:af:25:b3:13:02:b4:88:60:be:b7:f0:4d:e7:bc:f9:
19:2a:21:af:bf:78:a8:c3:ed:7c:9a:69:80:34:7b:b3:d7:ee:
ae:5f:43:d9:65:70:93:1f:b8:8e:7e:9c:9d:e1:f5:80:b5:03:
c6:f3:53:2a:9f:d0:56:7b:6a:2c:85:fd:b1:26:90:14:60:31:
72:19:01:2d:57:34:27:bb:c1:38:7d:52:bc:82:c6:42:cd:47:
2c:01:45:45:f0:3f:63:40:c9:a7:99:7d:4d:d7:cb:ec:ca:d0:
00:65:ba:9a:f7:61:0d:eb:c4:e2:58:32:64:0e:50:dd:6b:d7:
94:e8:af:60:69:9a:8a:03:48:02:ab:c6:bd:15:1d:32:75:bd:
a3:61:9f:18:6c:2f:b1:f2:8e:ff:14:0f:8c:97:cd:2c:d7:04:
9c:d6:95:91:8c:d0:f5:82:9c:de:b1:d9:f6:c4:c8:ef:bb:b4:
99:a0:df:16:65:db:99:f8:cb:a2:58:8c:b7:d5:f9:45:e2:d2:
a7:f3:a6:fb:2b:c0:d9:87:16:15:87:23:bd:81:e6:11:45:46:
03:69:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 21:30:14 2026 by rpki-client