Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/StKopN7mKY_G686fwWfLGQIs1ZE.roa
File: StKopN7mKY_G686fwWfLGQIs1ZE.roa (raw, json)
Hash identifier: Lt0qVcoh5gF6hn1K+QcayMd775gMjWFzF0XYTOVMzcE=
Subject key identifier: 4A:D2:A8:A4:DE:E6:29:8F:C6:EB:CE:9F:C1:67:CB:19:02:2C:D5:91
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019EA60389E1ED396C85C4BAD5A315BCF290
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/StKopN7mKY_G686fwWfLGQIs1ZE.roa
Signing time: Mon 08 Jun 2026 06:55:10 +0000
ROA not before: Mon 08 Jun 2026 06:55:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 80.93.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:03:89:e1:ed:39:6c:85:c4:ba:d5:a3:15:bc:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 8 06:55:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ad2a8a4dee6298fc6ebce9fc167cb19022cd591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:20:8d:ba:dd:1b:b2:60:2a:ee:4b:31:14:cf:
f2:78:9f:6b:2e:35:d6:f2:af:63:8b:b2:01:1d:b3:
b5:d0:1b:3b:0d:a0:28:90:10:d8:26:ac:0c:74:c2:
0c:6c:1b:d6:ef:97:3e:c8:ad:22:d7:96:64:2c:cc:
23:90:a4:96:b8:c7:f7:e7:8f:0b:f3:ca:a7:22:4d:
7b:f5:ee:4c:53:4e:04:5c:84:4b:19:f7:4a:81:b4:
0f:1e:01:bf:e8:0a:04:e4:09:2d:de:c0:44:f0:fb:
06:a6:03:b8:d2:5d:54:68:81:83:7a:31:23:3f:67:
18:51:dd:58:4e:04:68:bf:7c:f8:46:cc:01:a7:31:
58:22:8c:5a:35:bb:62:15:7d:12:b9:b5:58:c8:fd:
e1:92:c8:62:52:3a:11:82:93:84:b6:db:7a:1c:8f:
79:5c:c9:cb:12:85:23:c3:63:8e:a2:54:6e:89:07:
26:e3:ad:1a:11:5b:f6:9b:ad:45:b8:8f:75:34:7b:
5e:89:1d:15:2f:2f:98:c4:fd:34:2e:4b:5f:a5:8b:
61:f5:21:35:a6:1b:5e:53:5d:58:cb:6b:ad:ad:ff:
12:3f:be:1f:c0:72:79:07:cf:9a:51:ba:fc:58:26:
b8:15:a7:cc:97:a7:50:06:2a:e3:95:42:d9:7b:a1:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D2:A8:A4:DE:E6:29:8F:C6:EB:CE:9F:C1:67:CB:19:02:2C:D5:91
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/StKopN7mKY_G686fwWfLGQIs1ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.196.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7b:85:6f:b3:69:7b:2c:55:65:60:82:3e:e2:2e:d8:fb:bb:
75:3f:8c:dc:f7:42:43:35:47:60:5e:8b:f7:ea:16:ff:ed:c6:
8e:66:a9:94:1e:7f:b1:30:89:1b:60:b9:0f:0f:f2:b2:8f:d7:
1a:ec:85:50:09:85:84:27:83:bb:1f:8e:b5:10:2e:eb:12:f1:
8b:bf:a9:cd:42:ba:86:36:74:f0:92:3b:87:ae:c4:3e:24:7c:
cd:59:09:9a:fc:5a:bd:69:af:44:2b:00:d3:51:bc:2c:0b:b1:
f8:e6:19:e5:d7:1c:c1:bf:4e:0a:8b:07:d2:06:3c:eb:89:de:
e4:fc:ae:78:04:17:2b:5a:f1:12:e8:12:10:76:a8:22:35:e1:
0d:7a:a0:95:37:3d:df:44:31:0b:e5:8d:7e:52:38:4e:2d:c8:
db:2d:eb:9c:21:b7:ac:0e:e0:91:66:f8:79:ce:71:6b:da:f5:
b5:07:fa:61:99:d8:b0:73:c6:06:d5:1c:96:9b:86:44:84:7a:
0a:85:e3:29:20:46:bb:75:39:02:f8:89:40:13:7f:d9:34:9b:
6a:d2:6a:64:ff:68:1f:61:af:80:a4:9f:fa:c8:d6:6e:ef:a2:
e4:1f:9b:7e:d5:76:94:8a:4e:5a:da:9f:49:b7:05:8f:10:12:
ac:dd:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 07:18:23 2026 by rpki-client