Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa
File: OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa (raw, json)
Hash identifier: NUQ/hLaY/s6wtpegscjb37Ii8FsiiXqqFFzr8BzeZgs=
Subject key identifier: 39:96:83:43:48:57:BB:23:ED:5F:0D:0C:32:D8:8A:E2:2D:19:E4:27
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019E590BF849BAAADD8F1164E0E936CCD050
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa
Signing time: Sun 24 May 2026 08:13:37 +0000
ROA not before: Sun 24 May 2026 08:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203106
IP address blocks: 80.93.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:0b:f8:49:ba:aa:dd:8f:11:64:e0:e9:36:cc:d0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 24 08:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=399683434857bb23ed5f0d0c32d88ae22d19e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:a0:cc:90:2d:c7:54:34:75:20:0e:d7:52:
1b:c7:06:aa:c9:ec:c4:db:44:38:d2:21:0a:cf:f2:
2a:40:b6:db:97:1d:62:68:99:c9:5b:1b:c2:0a:5a:
f6:31:f0:eb:d9:9e:f6:77:85:e6:4e:44:45:c7:37:
2e:af:dd:4f:e6:70:6d:8f:43:5c:46:d9:d3:e5:03:
cb:3e:64:d0:85:ef:b0:b9:fb:8b:c7:d6:e0:51:33:
b6:29:56:78:2e:73:38:1f:79:51:33:ed:35:3f:c4:
f1:00:8c:5b:d5:6a:45:1f:d4:ff:0e:fb:e2:23:21:
ab:c3:16:1b:1d:60:03:23:e2:23:35:e8:da:8c:9f:
ad:5e:e9:9a:0a:87:71:f5:a0:84:3b:61:71:4d:23:
44:9f:8a:b3:b7:fa:64:25:9a:83:10:cc:f3:32:25:
24:4c:49:97:43:1a:0d:c6:76:fa:b3:7f:5e:68:f6:
4d:e5:12:5c:36:de:2c:88:02:77:03:df:f5:2f:6e:
aa:54:e8:5b:91:43:65:d2:ee:4c:0a:1d:ec:1d:e7:
f3:1f:79:66:e9:40:ed:ed:b8:4a:ce:24:8a:a8:54:
62:06:cb:0b:76:bf:26:5c:96:ba:95:b0:a4:da:a2:
b2:72:df:82:c7:3c:3f:be:04:ea:e3:c6:7c:01:df:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:83:43:48:57:BB:23:ED:5F:0D:0C:32:D8:8A:E2:2D:19:E4:27
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a9:32:51:17:c7:35:c5:0a:31:60:2e:37:8c:d5:b0:2a:55:
c3:80:b3:2a:c1:4f:df:a3:07:08:53:d6:ba:49:30:72:97:70:
fb:c6:22:d5:60:22:d6:0c:8d:5a:f8:9e:46:e8:f4:49:0d:54:
46:bf:d9:b4:32:25:81:f7:47:74:41:4a:d2:34:f0:d6:60:23:
6d:e9:4e:c8:53:8b:f4:a8:d3:f8:37:13:24:27:ad:e0:ac:89:
6b:17:69:af:bf:e6:a2:b7:11:b2:3a:b0:9f:e0:2f:15:f1:b8:
96:16:69:39:40:cf:df:e6:b4:60:2d:48:5c:f6:57:9b:4d:bb:
e6:65:e4:cc:27:ed:27:36:93:00:4c:c8:99:06:74:c9:16:04:
fd:b6:f7:e7:c5:d0:93:8e:7b:66:5d:49:27:a9:c2:f7:bf:a0:
72:55:b4:dd:99:f5:cf:0d:e9:74:6c:b5:96:d6:44:56:44:d0:
81:b9:a1:0e:1e:82:3f:bc:f5:ba:0f:1f:de:06:fb:3a:ef:be:
96:ad:b7:b0:eb:d4:fa:2e:70:82:3c:43:8e:08:80:27:b4:ca:
d8:0f:f9:4f:2e:4f:c5:45:df:5c:30:0e:ee:03:da:f3:f4:b5:
54:86:35:8c:68:03:91:0d:61:5f:65:50:11:fa:59:0c:4b:6c:
6a:fa:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 02:40:00 2026 by rpki-client