Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/NFV8_rlpMbYJWC5GtsaC08jVRLk.roa
File: NFV8_rlpMbYJWC5GtsaC08jVRLk.roa (raw, json)
Hash identifier: bXitEDnu53nb2nGB6+lObhnl3YIH0YhpwjL7l9qv+QU=
Subject key identifier: 34:55:7C:FE:B9:69:31:B6:09:58:2E:46:B6:C6:82:D3:C8:D5:44:B9
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019E63E78170238A8FC87FDF0C162C552E4D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/NFV8_rlpMbYJWC5GtsaC08jVRLk.roa
Signing time: Tue 26 May 2026 10:49:36 +0000
ROA not before: Tue 26 May 2026 10:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:e7:81:70:23:8a:8f:c8:7f:df:0c:16:2c:55:2e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 26 10:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34557cfeb96931b609582e46b6c682d3c8d544b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:86:da:c3:c3:68:f3:5c:15:ca:7d:00:f7:
9d:a1:57:71:d6:9b:57:e0:c2:8b:c7:95:6f:63:64:
9f:d2:68:cf:2c:38:d2:42:30:47:66:cb:9d:be:3a:
4f:8f:e7:cb:32:19:bc:8a:9b:7c:d7:89:46:10:1f:
87:aa:64:0b:9a:b4:4e:ca:47:89:e6:4a:09:f0:ae:
20:52:c6:e8:cf:43:d7:94:16:a4:1b:e2:1d:98:9d:
0a:1d:5c:61:6f:46:d1:1c:82:a3:7c:b6:a9:13:6a:
b4:43:3d:ef:af:b3:76:1b:00:6b:d6:d1:67:30:84:
9d:6b:96:45:13:fb:80:4c:9a:d8:41:1e:a3:e9:59:
74:e3:d6:38:ba:ea:af:06:5b:a7:bf:d4:ae:5e:fa:
c6:82:b9:f3:4a:d7:a2:ce:c8:5b:48:60:5e:00:cc:
3c:cf:7c:a3:2e:66:3a:da:6e:c4:47:53:29:37:a8:
f0:93:88:9d:4d:68:f7:cd:c6:86:1c:0f:41:2c:fa:
1b:58:56:c7:eb:d2:23:4b:9a:48:0e:34:b7:28:b6:
21:59:76:35:c3:f5:8e:6e:76:fd:ab:1e:1a:87:ae:
16:e9:e4:04:c7:5e:53:f3:92:a3:45:ea:99:35:52:
25:a8:92:42:ae:f9:3c:24:0e:a4:b9:3d:09:02:58:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:55:7C:FE:B9:69:31:B6:09:58:2E:46:B6:C6:82:D3:C8:D5:44:B9
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/NFV8_rlpMbYJWC5GtsaC08jVRLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.196.0/24
80.93.198.0/24
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
75:aa:b2:65:68:ac:f6:bc:af:33:01:68:23:de:d3:9d:b1:00:
44:1c:b3:2d:8e:c7:09:38:45:cf:b7:27:d4:3d:a4:0a:4e:f4:
c8:9b:50:9c:2f:10:a7:1b:c0:0d:63:93:42:37:61:1a:fd:47:
f2:85:fc:bd:4e:50:24:8d:bd:68:c0:d7:c4:d2:e7:e5:7e:0d:
4f:f6:d8:cb:e6:ea:c9:41:13:11:24:6c:2c:74:bc:14:2f:9f:
1a:5d:0f:52:d4:b9:b1:9c:8e:0f:f9:e6:f0:a8:66:ff:7f:e3:
2a:f8:f2:66:25:cc:36:28:11:8f:1f:36:0a:36:d8:6d:cc:c6:
e0:15:d9:34:3e:e6:27:40:f3:3c:68:10:32:41:6b:1d:45:6b:
99:f5:95:06:26:78:7a:1c:bb:01:61:4b:d1:ce:7f:bb:b7:ad:
66:67:96:a3:28:4f:7f:38:61:78:7d:a3:2d:6c:d9:9d:01:ae:
62:bc:89:6f:41:09:52:7b:60:cf:99:a0:ce:f4:96:1b:44:f6:
2d:5c:50:49:96:39:b6:e2:e3:f8:ee:86:cb:83:24:a8:ee:c1:
64:52:fe:67:8b:3d:58:46:45:d3:1d:17:da:23:50:6d:af:27:
95:a0:24:96:e9:f5:eb:43:67:4a:05:7a:83:4b:e0:a5:fc:a9:
93:fb:89:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 03:00:57 2026 by rpki-client