Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/EoZXPLgamlT6093vWm3SmEYhwgs.roa
File: EoZXPLgamlT6093vWm3SmEYhwgs.roa (raw, json)
Hash identifier: HUH+6JXC0SApj3JabiBKlWDFZT3mbj9eA3QYkZkbdjc=
Subject key identifier: 12:86:57:3C:B8:1A:9A:54:FA:D3:DD:EF:5A:6D:D2:98:46:21:C2:0B
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A05DF06C3C70A850BDAEAFA37683041E8E
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/EoZXPLgamlT6093vWm3SmEYhwgs.roa
Signing time: Tue 01 Sep 2026 17:07:12 +0000
ROA not before: Tue 01 Sep 2026 17:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:f0:6c:3c:70:a8:50:bd:ae:af:a3:76:83:04:1e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 1 17:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1286573cb81a9a54fad3ddef5a6dd2984621c20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:82:4c:68:40:cf:ef:a3:13:54:f2:cc:c5:
4a:07:be:47:85:bc:6a:fd:17:a5:27:59:89:bf:24:
62:93:a7:30:8d:b5:06:47:ec:69:df:a5:8a:8a:be:
11:ee:d8:a3:64:66:b4:d3:ec:a4:f9:48:b1:f7:8e:
95:7d:0b:35:71:1f:db:cb:43:16:c7:e3:38:48:c7:
cf:d2:85:25:67:79:6b:a3:67:7f:eb:19:3b:46:ff:
a0:e3:e3:de:54:8c:7d:11:6f:a8:a6:b2:49:8f:98:
a9:e8:d5:a1:69:25:69:53:8d:f5:09:a2:12:d4:30:
9f:11:8c:d6:93:63:b1:64:f6:7e:f5:85:69:b2:d1:
e0:af:1f:91:b4:8e:c2:a7:c8:b7:1d:98:0a:3b:3e:
ec:53:5f:70:46:38:63:4c:3a:a8:bd:16:95:a3:96:
99:c6:cf:9e:ed:f8:b2:d8:6d:01:d8:d1:d3:a6:3b:
6e:5d:80:45:4f:5c:b8:ce:96:53:82:8f:67:62:a6:
1e:72:4a:82:95:4e:2c:d5:9a:f9:a2:3b:ed:19:21:
31:92:21:01:47:4d:f3:8e:e1:b6:e9:19:7c:51:21:
23:e4:29:6b:15:e0:30:83:0d:f5:13:75:2c:f6:11:
8e:37:f3:2e:70:94:6e:af:d7:79:db:f9:5d:30:9a:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:57:3C:B8:1A:9A:54:FA:D3:DD:EF:5A:6D:D2:98:46:21:C2:0B
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/EoZXPLgamlT6093vWm3SmEYhwgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0f:f0:cf:4d:88:72:32:af:12:d3:04:06:96:99:b1:f6:97:
d8:ec:4d:58:bf:ff:ee:b8:02:e9:3b:12:a5:6b:7e:8c:da:f8:
d1:33:09:28:d3:10:3e:de:d3:0d:6d:87:01:d6:48:4e:2c:d4:
c7:d5:2d:d4:aa:63:23:d0:12:22:45:0b:10:82:ac:6f:36:1f:
b7:16:3d:87:90:c4:65:36:93:45:de:67:b4:a8:c2:2d:51:0b:
67:9a:ac:ef:48:d6:4c:68:7e:73:c1:37:78:a6:eb:59:82:c9:
3c:0d:91:a0:bc:51:0c:61:e1:01:9f:75:ea:e8:9a:25:78:d2:
1e:14:56:7d:74:92:ab:b7:ca:5f:73:ef:88:67:41:e8:cf:da:
8e:0c:94:80:6a:a4:b7:d2:a0:9e:96:f5:c6:44:f1:92:51:f3:
e0:f4:f9:58:d5:85:1b:6c:48:27:b0:ae:bd:86:a8:cb:75:f2:
05:d5:de:42:da:a2:e9:f7:71:4d:c2:78:b7:9b:8b:85:fe:44:
dc:f2:ee:0b:4f:8b:3d:40:96:b1:67:97:71:50:28:70:a0:3a:
39:a0:27:ed:cc:ff:c2:c3:cb:c2:3a:05:43:85:b1:4f:54:6f:
bf:01:01:2a:06:82:d1:47:fd:23:57:0c:8b:59:85:9c:b1:c4:
08:1a:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 09:41:40 2026 by rpki-client