Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa
File: CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa (raw, json)
Hash identifier: oQVnzprII4acW9Ta1GIdsJeE2nYKrDwH1ZpjheR06vc=
Subject key identifier: 08:8A:45:3F:FE:58:2D:6E:C2:18:B7:77:34:14:A5:14:BE:CC:68:2E
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A0703646AEE3080A2BE0E3299F815CD4C9
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa
Signing time: Sat 05 Sep 2026 06:16:40 +0000
ROA not before: Sat 05 Sep 2026 06:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:36:46:ae:e3:08:0a:2b:e0:e3:29:9f:81:5c:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 5 06:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=088a453ffe582d6ec218b7773414a514becc682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:f1:e6:ab:87:71:c1:4c:98:45:6e:52:cd:
b0:30:0c:90:f8:88:c1:a8:c0:a8:ac:58:02:ce:d7:
58:12:42:83:e5:68:18:71:5f:4a:cc:c1:ef:3c:71:
2d:7c:36:60:b8:ef:b4:d1:2a:3c:a8:91:d8:61:62:
38:7e:1f:6c:9b:e1:20:89:15:dd:10:ab:f5:32:b6:
8d:7a:4e:9f:7b:7c:ff:b2:94:a8:dd:75:d4:2e:ef:
e9:cf:11:37:23:e1:dc:92:0c:cf:4c:ca:aa:d9:ed:
07:71:52:c9:d5:47:2e:09:f9:43:dd:28:45:64:14:
93:4c:b5:b5:6e:73:66:59:bd:8a:d2:2e:07:d2:90:
51:9a:91:dc:95:bb:c7:6d:96:b7:73:9a:5b:a7:65:
12:10:03:32:7d:44:8c:5d:0c:5e:4f:66:fe:e5:2d:
f0:c4:50:44:98:fd:4b:23:4b:83:86:71:89:b1:91:
8a:d4:a8:8c:87:58:ba:5e:1e:28:46:ca:f8:a7:ec:
12:71:35:5a:4c:b0:4e:f2:c5:8b:70:41:b1:d5:25:
07:48:bd:d1:cb:a1:6a:40:c2:7d:b8:9d:74:98:48:
2b:8a:0f:a2:36:fc:a8:d6:a7:c8:7f:f4:a5:38:05:
fb:ec:06:01:d1:1b:4c:79:ed:e9:3b:89:ac:5a:97:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:45:3F:FE:58:2D:6E:C2:18:B7:77:34:14:A5:14:BE:CC:68:2E
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CIpFP_5YLW7CGLd3NBSlFL7MaC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f1:cd:c5:1b:6a:40:52:7c:4d:5d:cc:7a:2d:c0:44:0b:e1:
fe:55:8b:13:72:3a:b6:14:d3:75:dc:f0:04:0f:9a:75:fe:29:
0d:f7:0a:6c:c8:aa:10:d2:11:77:67:76:68:f1:32:d2:57:d8:
ce:5f:48:16:a6:fd:bf:ae:64:f2:05:3e:f1:dd:c0:3b:33:f6:
69:99:ef:e2:84:cc:af:64:a9:bf:6b:a8:4a:19:64:38:5b:25:
47:8a:16:95:73:a3:b2:16:c8:50:73:e9:84:e2:c0:cb:d5:ed:
33:c8:e9:e3:9a:8d:84:40:e9:f8:0d:8a:1d:28:e2:8f:a0:bd:
73:99:a5:6b:2e:6b:87:69:53:88:9e:f9:3c:f5:15:c7:d0:58:
c3:91:42:70:46:d9:79:7b:9a:6f:45:82:7c:f9:39:0e:25:b9:
bf:14:46:a6:25:fe:46:3d:82:2f:ce:92:45:2c:fa:45:a2:c7:
19:96:c6:f8:7c:74:e1:33:73:a0:30:00:3c:af:96:f4:b5:e0:
49:92:5d:ec:c7:03:0d:b0:7a:a1:14:d3:a2:21:ff:66:3f:fe:
ab:09:aa:c9:d4:53:63:b6:45:84:7f:11:46:36:d5:ab:55:af:
04:e5:e9:52:3d:a9:f9:b1:02:6a:81:16:a9:4f:f9:65:c0:9a:
f0:7a:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:29:52 2026 by rpki-client