Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CxF7LDw8pI782-p1Fq0ewqlSc5U.roa
File: CxF7LDw8pI782-p1Fq0ewqlSc5U.roa (raw, json)
Hash identifier: +NFPkwDyR3XQAWm/PGSRbJQS/rrBSbxTpwvhLWnn4lU=
Subject key identifier: 0B:11:7B:2C:3C:3C:A4:8E:FC:DB:EA:75:16:AD:1E:C2:A9:52:73:95
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019DAEB4545BA0DF27C58B2945A3FEAA28DA
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CxF7LDw8pI782-p1Fq0ewqlSc5U.roa
Signing time: Tue 21 Apr 2026 06:22:26 +0000
ROA not before: Tue 21 Apr 2026 06:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215672
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:b4:54:5b:a0:df:27:c5:8b:29:45:a3:fe:aa:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Apr 21 06:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b117b2c3c3ca48efcdbea7516ad1ec2a9527395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:ce:6d:5f:db:ae:07:81:02:83:9a:ac:8e:
b1:06:39:21:60:a6:76:57:58:46:08:2e:9f:6e:b5:
19:dc:8b:2c:6a:7d:09:fa:05:05:f1:be:1c:ad:5f:
37:29:79:4b:6d:bb:42:a0:79:4f:06:12:3b:4d:85:
a7:b7:38:42:56:22:61:50:93:ab:45:3f:93:57:07:
a1:23:86:8e:de:89:8e:9b:3d:0a:a2:79:51:af:c3:
94:92:e2:76:8a:80:ba:88:08:45:08:78:22:90:0d:
43:81:c5:64:1e:e3:c0:75:b8:5e:85:8e:55:66:b5:
0c:fa:0e:f8:c4:01:7f:e8:4e:1d:18:9f:bf:f5:90:
47:d8:11:9f:50:1b:16:e4:e5:4a:6b:af:36:b8:a4:
01:f9:7d:62:8e:10:ba:8b:43:f5:9d:b4:73:4b:0d:
c0:16:45:40:ee:d9:a2:c5:19:49:64:eb:f2:9b:12:
7b:0f:34:27:6f:68:c5:56:74:cc:52:3d:dc:51:ff:
f4:6d:41:80:e6:24:32:18:c5:55:2e:c6:f1:16:67:
aa:ac:a5:f2:7d:96:28:71:ab:70:51:a0:21:25:c1:
4a:52:98:7d:15:56:f9:a4:6d:44:3f:c5:bd:6d:37:
1e:fd:14:d1:27:b3:fd:f1:85:31:03:8f:f5:d4:be:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:7B:2C:3C:3C:A4:8E:FC:DB:EA:75:16:AD:1E:C2:A9:52:73:95
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CxF7LDw8pI782-p1Fq0ewqlSc5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.204.0/23
Signature Algorithm: sha256WithRSAEncryption
13:f4:52:b1:f5:8f:e5:6a:15:7c:ab:39:ea:db:f9:44:e3:8f:
bb:60:04:67:6b:d3:1a:bd:08:91:d7:d6:e8:70:13:fd:fc:1e:
5a:6c:1d:d1:d2:db:7c:f2:96:f1:63:1b:c9:40:5f:1a:ed:29:
e9:fd:97:0e:91:e2:c8:77:4b:f0:d6:af:22:99:49:a7:15:71:
3b:60:17:1d:b7:20:31:5a:55:f0:1e:a4:ce:7e:05:da:26:0d:
33:cc:a8:91:9a:e4:f7:fd:e6:c8:d3:b8:5b:76:15:45:14:25:
4a:30:9d:be:2b:90:51:f6:14:de:31:5d:37:ce:49:e1:29:dc:
67:47:14:c8:98:a0:47:4f:21:25:a4:95:96:dc:32:eb:92:6c:
c5:99:aa:59:4d:8a:46:f6:e6:0a:bc:d8:24:9d:7f:13:7c:f5:
ca:00:28:64:93:09:f4:86:00:38:37:35:3f:fe:5a:ac:6e:a2:
2f:71:ce:c5:20:fd:7f:fe:01:b5:c2:ef:bb:39:4b:09:5d:71:
66:94:bc:a3:a6:4a:81:82:b5:95:75:14:5e:ca:d1:df:23:18:
51:d8:57:03:d5:20:e1:38:2f:41:9d:95:31:5e:c2:aa:24:df:
94:d9:7d:b9:aa:53:a5:34:91:33:58:31:2a:9f:c5:21:9f:8b:
1f:9f:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 04:53:34 2026 by rpki-client