Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/PQO2hcV7XNNe1K-3-5PH9bQKqT0.roa
File: PQO2hcV7XNNe1K-3-5PH9bQKqT0.roa (raw, json)
Hash identifier: aW02WRcgdroknFFj4vScvuH20uNQMG1muB63TMLP0sQ=
Subject key identifier: 3D:03:B6:85:C5:7B:5C:D3:5E:D4:AF:B7:FB:93:C7:F5:B4:0A:A9:3D
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A06AF732A6A0B863C8D1B4CFCB234FD5B8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/PQO2hcV7XNNe1K-3-5PH9bQKqT0.roa
Signing time: Fri 04 Sep 2026 05:49:40 +0000
ROA not before: Fri 04 Sep 2026 05:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:f7:32:a6:a0:b8:63:c8:d1:b4:cf:cb:23:4f:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 4 05:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d03b685c57b5cd35ed4afb7fb93c7f5b40aa93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:7d:67:90:e3:77:5c:7d:0c:87:a4:07:81:
3c:68:59:70:76:4c:b7:f8:5e:23:d4:97:e9:62:5c:
ae:f2:3f:98:a7:70:66:e2:be:80:a1:89:5e:8f:2d:
5c:39:08:ee:cd:1e:ac:46:d3:a9:91:11:8a:54:fe:
37:55:40:ab:30:3a:d5:65:dd:67:cb:3e:6e:7b:c4:
e1:fe:d3:aa:b8:83:55:23:50:d1:dd:ea:0a:c8:76:
97:84:54:5e:af:e4:be:d0:5e:d4:83:6f:6d:81:9a:
5c:76:7a:04:1b:de:ff:b4:a4:f9:f0:0f:47:87:17:
3a:d7:f5:23:aa:21:2c:bf:b2:90:13:c3:2e:71:01:
8e:e6:26:62:0e:da:54:da:72:35:e7:75:e1:d4:47:
53:b6:a5:05:c6:3c:62:9c:64:7a:e9:92:3f:ec:26:
1a:56:c3:46:45:27:5c:22:7e:8d:f3:3f:e4:c2:fc:
29:71:84:cf:08:c6:38:0f:44:5a:c5:b9:26:95:e5:
22:7a:92:f2:8d:65:a8:32:d8:25:64:a5:3d:eb:33:
34:ed:d1:f2:24:7f:ea:b4:37:a4:af:58:d2:70:aa:
91:70:b1:5e:aa:ea:96:c9:d5:ad:5f:a8:9d:95:d3:
29:1a:7c:a1:8b:44:9e:f8:5b:f9:ce:2f:2d:57:b7:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:03:B6:85:C5:7B:5C:D3:5E:D4:AF:B7:FB:93:C7:F5:B4:0A:A9:3D
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/PQO2hcV7XNNe1K-3-5PH9bQKqT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.196.0/24
80.93.198.0/24
80.93.204.0-80.93.206.255
Signature Algorithm: sha256WithRSAEncryption
57:c6:aa:02:e6:04:99:4c:fc:61:1d:c5:e5:8d:0c:27:c9:f8:
61:91:2a:6b:da:78:81:67:18:c0:b7:e7:33:c7:d2:4b:47:29:
ed:49:08:66:94:9b:fb:8f:d3:08:62:b5:0b:89:bd:c7:3d:23:
4f:82:8a:7e:13:2e:7f:4f:7c:16:9f:1b:cc:6c:13:e0:0b:5d:
40:0c:78:4c:f6:ef:a3:4d:ca:dd:57:f0:94:18:a7:f5:95:21:
b9:b5:0b:d2:2b:72:45:6d:d6:bb:d2:85:b2:48:d3:d1:51:02:
fd:88:24:ba:06:73:21:de:a6:8b:7b:0d:7a:3b:bb:e6:ea:73:
d1:e5:9b:58:c3:5e:25:ed:ea:89:b9:13:99:6e:39:02:4a:2a:
2a:dc:98:b5:2f:4b:71:79:1e:2f:87:84:7f:44:c3:8c:40:89:
e5:db:aa:56:0f:f3:ba:61:58:f9:aa:14:9a:d8:61:21:db:35:
01:f8:4a:75:b9:a8:98:af:3f:85:43:65:91:78:a0:ba:26:2f:
e6:0c:64:f3:b2:74:56:33:6d:31:b7:5a:a6:9e:69:49:17:31:
51:02:50:c3:c4:7e:16:54:58:87:b4:96:e1:7c:37:64:93:70:
fd:de:57:45:b7:60:26:07:4c:c2:fa:0d:72:2c:65:90:2e:1a:
7e:c4:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:29:51 2026 by rpki-client