Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Z9-G8jBlIUV8JXo4mpweyF3YJ1U.roa
File: Z9-G8jBlIUV8JXo4mpweyF3YJ1U.roa (raw, json)
Hash identifier: dj5hMhYWdWHJcm+043OLfnQ2pOg2DSF2L7CpAN4Js2w=
Subject key identifier: 67:DF:86:F2:30:65:21:45:7C:25:7A:38:9A:9C:1E:C8:5D:D8:27:55
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019F473A30E47E4C8E5A7F86CB0BF2B8C471
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Z9-G8jBlIUV8JXo4mpweyF3YJ1U.roa
Signing time: Thu 09 Jul 2026 14:13:43 +0000
ROA not before: Thu 09 Jul 2026 14:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.193.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:3a:30:e4:7e:4c:8e:5a:7f:86:cb:0b:f2:b8:c4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 9 14:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67df86f2306521457c257a389a9c1ec85dd82755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:1b:71:fe:cd:30:1c:03:42:8a:18:cd:9e:
dc:ed:b9:33:89:1b:0d:9b:83:2c:fc:11:d5:9b:48:
46:fd:41:4a:f5:a0:5f:de:40:fd:d0:f4:cc:18:13:
af:58:bc:43:9a:96:dd:91:5a:61:99:62:fd:01:f0:
f2:46:83:91:fa:12:40:3c:cb:3b:08:9f:44:76:6e:
ff:48:cf:04:1f:cc:d0:a6:8f:3a:66:42:aa:e5:31:
30:be:50:36:45:0f:78:eb:45:6d:17:f1:27:5c:1e:
c0:b9:84:2a:5a:12:0e:d3:70:78:82:d1:c4:4f:f2:
18:da:d8:68:28:e3:fa:2d:50:99:02:ae:b7:53:3e:
de:86:9b:ec:1e:f4:e2:6f:3e:63:36:66:d3:96:7c:
6c:c9:12:fb:52:24:ff:d2:6e:da:8c:d1:e2:28:e0:
7f:0b:b4:95:64:99:68:4c:9b:b0:76:d4:bb:2d:b8:
40:71:b4:68:30:2f:01:60:b2:37:73:61:a6:b9:87:
df:47:a9:79:ff:69:ad:ab:02:cb:5f:aa:bc:c3:c7:
9b:2f:07:3c:4c:59:d6:f5:f1:d3:09:ed:18:df:b2:
e9:c4:72:0c:13:9c:29:1b:23:ad:18:3a:ec:33:31:
48:44:5d:f1:6a:f8:ea:0f:1c:2e:f0:26:2b:eb:e0:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:86:F2:30:65:21:45:7C:25:7A:38:9A:9C:1E:C8:5D:D8:27:55
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/Z9-G8jBlIUV8JXo4mpweyF3YJ1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/23
80.93.196.0/24
80.93.198.0/23
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
41:d9:52:89:03:a1:b3:9b:b2:61:1d:0b:88:59:b6:c0:e3:0b:
5a:04:37:cb:b6:c0:35:fb:c2:8d:f0:57:ed:0d:55:3c:e5:82:
2c:7d:d2:a8:f6:e5:fb:41:28:91:3d:0b:3b:8e:f4:13:1e:51:
1e:0b:62:66:e0:5b:91:3e:98:4f:c6:29:a9:1f:95:60:68:3c:
90:5d:1a:a4:37:f9:51:af:be:eb:b6:a6:1f:45:99:44:01:25:
8f:d7:8a:c3:e7:6d:c9:49:79:1b:8d:8b:c6:a6:29:c4:8d:76:
19:36:da:bd:d2:c5:ea:37:f9:fb:e3:5d:85:48:e8:4b:02:09:
c2:b7:81:8c:d7:b1:97:f9:fa:af:71:b4:5d:bd:21:a3:bd:9f:
35:5a:ce:95:6c:38:49:96:89:48:e5:86:db:aa:42:a5:04:16:
ef:00:d3:6c:f8:2f:4c:54:3e:31:49:76:31:7d:e6:a5:53:b8:
8a:52:20:16:a1:c0:65:e9:6c:02:68:45:8c:64:60:11:97:7e:
9a:e9:21:23:68:9d:8b:74:da:2f:8c:71:37:55:ac:06:4d:05:
38:fe:b5:60:43:02:d6:6b:65:42:e1:e6:cd:06:9d:e8:f5:92:
fe:f2:20:7f:d6:73:47:73:c3:5a:10:ba:8d:a8:18:4b:09:55:
09:12:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 18:28:17 2026 by rpki-client