Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/8XrW66dn6aX1xmzBfwG411jolgw.roa
File: 8XrW66dn6aX1xmzBfwG411jolgw.roa (raw, json)
Hash identifier: iGYKXdb2wrGRWVeQkvRCYx5Zsjbe+E+pdOHzl4qC7dc=
Subject key identifier: F1:7A:D6:EB:A7:67:E9:A5:F5:C6:6C:C1:7F:01:B8:D7:58:E8:96:0C
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A11AB2C782EC42053DAEFB95FFD3230204
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/8XrW66dn6aX1xmzBfwG411jolgw.roa
Signing time: Thu 08 Oct 2026 08:48:06 +0000
ROA not before: Thu 08 Oct 2026 08:48:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 80.93.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:b2:c7:82:ec:42:05:3d:ae:fb:95:ff:d3:23:02:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 8 08:48:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f17ad6eba767e9a5f5c66cc17f01b8d758e8960c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:97:b0:91:e2:4e:2c:be:7c:8c:06:3b:9e:
39:1a:96:03:5e:cd:88:12:0c:b5:6f:2c:38:b0:f2:
2f:b5:9d:67:7c:00:e5:a0:c0:90:63:18:47:2d:06:
ed:93:33:c5:70:1a:7d:6f:80:97:9c:1c:6c:3d:ca:
a8:62:33:26:3e:74:5f:2f:88:ce:40:d3:42:df:0c:
f5:e7:8e:a4:2e:af:59:80:b8:90:0e:1d:bf:11:57:
42:f7:29:5b:33:7b:24:52:f1:8e:b8:7e:83:76:45:
19:b5:4c:25:c0:e1:b8:64:0c:a5:79:14:fa:11:28:
25:4f:d0:3b:71:71:76:50:c8:6d:a2:e7:b5:42:1a:
66:3d:cb:45:2b:58:17:80:69:e9:3e:83:77:f6:2d:
66:c5:50:86:21:c6:0d:31:68:3d:da:9a:42:bd:4e:
c0:03:1d:43:a3:e0:de:f3:6b:d2:7a:4d:c5:27:93:
ad:93:48:84:74:f3:73:65:89:2e:07:26:9b:99:cb:
c1:88:c6:b1:70:25:2c:0f:c1:b7:24:91:0d:21:f8:
95:30:1c:3e:83:86:fb:f1:70:19:50:84:dc:d5:e7:
c5:f7:1d:3b:c1:a2:22:32:30:49:c9:d8:fd:42:bb:
5a:d9:13:18:f6:93:a3:3d:99:00:2d:ef:0e:78:f4:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:D6:EB:A7:67:E9:A5:F5:C6:6C:C1:7F:01:B8:D7:58:E8:96:0C
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/8XrW66dn6aX1xmzBfwG411jolgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f6:a9:42:24:56:3c:37:83:f5:39:5a:ae:56:32:2c:fa:6a:
d0:78:bb:87:9a:59:43:49:f9:ed:5c:42:7f:60:a9:92:cf:14:
d4:cf:51:61:da:15:fb:4d:29:65:1c:06:70:79:04:3d:f1:0f:
26:ec:14:ae:88:9a:fb:0d:96:21:ff:57:9e:97:44:11:f4:32:
c7:8c:1d:02:cb:f3:d0:5d:0c:5a:9e:c9:e7:f9:c1:60:4f:9b:
d8:8d:9b:19:29:93:2d:dc:04:e2:d9:9c:53:0a:5e:32:36:02:
a4:1c:c7:cb:44:1e:28:8a:ff:65:25:aa:e9:75:41:9a:ea:e8:
6e:e8:53:51:08:a9:34:9a:4e:f5:76:02:c8:41:e8:a0:da:ee:
c0:06:b7:90:7a:29:f0:9e:97:ff:1c:05:7f:6f:58:5c:53:d7:
bc:fd:7b:89:40:69:18:ab:5c:22:29:50:83:6b:0c:f4:4e:ba:
32:26:0d:40:67:b6:40:f6:86:83:b1:bc:25:e5:d8:05:71:83:
1d:00:66:ac:a8:f1:6a:b1:ae:dc:bd:79:4a:0c:ee:ce:fb:8e:
1a:04:c1:d7:f7:c3:53:fb:03:78:f9:06:9a:68:92:6c:b6:ee:
1b:6e:a8:10:cd:70:a0:c4:07:4c:32:f5:fb:f9:37:a5:21:14:
d0:2c:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:51:13 2026 by rpki-client