Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa
File: ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa (raw, json)
Hash identifier: 4rl0pPgQIU0Crlhy77h+Q6D88ZrjN5G5RHR1CY+u6PM=
Subject key identifier: 66:B5:BD:04:13:07:5F:3E:07:B0:2A:42:6E:9C:A3:97:E4:00:0B:07
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A07393C9A53A08AC68750945D352EB13DA
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa
Signing time: Sat 05 Sep 2026 21:57:40 +0000
ROA not before: Sat 05 Sep 2026 21:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:93:c9:a5:3a:08:ac:68:75:09:45:d3:52:eb:13:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 5 21:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66b5bd0413075f3e07b02a426e9ca397e4000b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:2d:ea:56:04:5b:79:d4:7c:7d:eb:78:aa:
9f:33:28:d3:1c:18:16:0b:cc:c7:d4:c2:d5:51:15:
db:0d:84:93:30:c4:f7:12:53:76:2b:a5:2e:9b:5d:
b3:62:cf:c4:d3:99:48:e7:34:09:83:d0:64:d1:e9:
97:3a:6f:66:21:2c:c6:96:aa:4c:66:39:19:c0:7e:
76:49:ef:54:e2:97:f5:c5:8d:49:1f:88:f6:bd:85:
24:50:3e:eb:9a:81:04:dc:3e:3a:ec:f5:32:3d:5f:
44:64:33:ab:6f:b1:ca:fb:a1:34:fb:36:a3:3f:cc:
68:78:74:4d:cb:37:ba:ed:a9:e3:19:fc:60:88:d2:
87:8b:74:17:f1:e5:f1:ed:78:8c:06:39:01:f1:7d:
c8:3b:a0:fb:3e:39:1f:49:c4:2f:34:4a:e5:22:81:
a0:fd:aa:99:28:d1:d5:26:a9:5c:71:ef:b5:9d:85:
ae:a3:c9:9d:f2:87:b9:6b:17:b6:01:69:94:8d:a3:
ee:38:0a:41:26:49:3a:ce:38:c6:3f:a5:b4:ba:46:
90:2d:56:9c:30:d9:d4:a7:fb:41:9f:43:e7:5e:61:
5e:9c:7f:55:1b:0e:aa:27:e8:3b:33:19:d9:3f:7d:
5a:6d:7b:20:f4:33:c9:21:3a:c5:72:35:a4:bd:94:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:BD:04:13:07:5F:3E:07:B0:2A:42:6E:9C:A3:97:E4:00:0B:07
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ZrW9BBMHXz4HsCpCbpyjl-QACwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d6:3f:dc:e8:c7:bb:9e:1c:19:26:bf:ee:cb:ae:de:a7:c7:
e1:50:4d:1b:3a:9c:7f:74:ea:7a:80:b9:b2:59:e9:ae:d3:f4:
d9:38:52:3f:10:90:2d:2d:5e:5a:7e:8a:76:13:b8:3b:58:5d:
8e:ae:d5:43:d1:9e:8b:b7:be:77:fc:61:ce:0a:c9:8a:4a:16:
fb:a9:90:74:f5:9e:6b:f2:2a:31:f1:be:fe:d5:ba:22:d6:33:
ab:6e:d7:db:0b:67:f6:0b:e1:fa:7b:53:da:91:58:a4:e4:d9:
08:d4:79:93:4e:48:aa:7d:21:33:91:93:8d:cf:59:46:64:2b:
33:d9:95:2f:b1:50:ad:fb:68:92:0b:49:c6:41:be:d5:2f:72:
21:bf:b2:aa:5a:17:f3:1d:f5:78:87:43:b2:88:6c:97:ce:cd:
52:bf:e4:73:34:f7:aa:7a:87:4b:62:11:47:0d:74:01:36:52:
bb:44:a4:7b:cc:43:9a:c5:7c:bf:b1:00:d1:30:74:82:a9:47:
e9:eb:b3:15:9b:28:78:12:c4:6d:a3:ba:0b:fa:44:ae:09:98:
15:09:c0:97:ec:a4:d3:50:7e:0e:b2:88:51:9c:87:d5:97:85:
6c:7c:74:29:f6:99:4d:3c:8d:08:79:07:94:e1:dc:f8:71:5c:
ab:86:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 10:37:16 2026 by rpki-client