Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa
File: ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa (raw, json)
Hash identifier: l8C6p4QFcok/PgmLUUkYCpOJ4hYEhzcrxtTn9OMHuUo=
Subject key identifier: 66:E0:0A:DC:75:85:1B:BA:2E:D5:25:A8:3D:A0:55:5B:BF:79:D9:D4
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A1354125736E7720CD159861B0AC68F009
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa
Signing time: Tue 13 Oct 2026 12:33:44 +0000
ROA not before: Tue 13 Oct 2026 12:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.201.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:41:25:73:6e:77:20:cd:15:98:61:b0:ac:68:f0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 13 12:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66e00adc75851bba2ed525a83da0555bbf79d9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:d9:c4:08:66:f7:6c:99:d1:5e:2f:c8:e8:
08:63:bf:fc:9c:4c:6d:4f:4e:7f:31:2b:1e:7e:e4:
40:c3:69:09:86:6a:ae:7a:8d:36:a7:85:2a:21:32:
69:19:13:b7:60:ee:9e:30:15:0a:cb:c2:64:51:a6:
97:db:a1:ce:83:5d:a5:6f:d8:e5:6d:5d:b8:87:13:
1f:76:41:6e:78:e6:33:66:86:2f:14:0d:14:dc:fe:
17:65:68:ad:bb:d6:4e:ab:c7:df:cf:81:99:34:50:
5f:9a:2c:8d:f5:f8:8e:2d:97:db:b8:75:fa:1c:ba:
9b:19:95:a3:1c:1e:ac:ca:9a:e2:1a:93:2b:e2:69:
26:b6:77:8a:5e:fa:d1:82:d6:b1:96:f8:39:5f:d9:
42:f4:e7:af:72:db:d7:0e:78:a8:f4:c3:66:69:33:
9d:6b:c2:e9:61:2f:d7:fe:16:ee:bb:eb:11:99:e0:
e7:6f:e3:72:c9:a3:e3:ea:73:10:e9:8d:6e:56:90:
79:56:9a:69:9f:16:17:f3:f8:6e:1b:1b:d8:dd:9e:
46:2a:15:81:15:2e:5d:7c:bb:2a:35:7b:37:79:2f:
84:3e:50:95:e7:fd:08:fb:82:0c:8b:0e:34:50:ab:
33:b8:06:89:0e:e4:1e:23:17:8e:e0:a2:2b:ed:56:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:0A:DC:75:85:1B:BA:2E:D5:25:A8:3D:A0:55:5B:BF:79:D9:D4
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ZuAK3HWFG7ou1SWoPaBVW7952dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.196.0/24
80.93.198.0/23
80.93.201.0/24
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
43:73:46:99:3e:5d:cc:84:17:51:e0:98:bb:a3:5b:66:50:7b:
0b:58:8c:e6:c2:1d:62:05:90:74:cc:c6:ec:3e:cd:15:37:24:
06:c0:4b:c7:0c:b2:ef:ce:be:b3:c8:3e:6e:51:f0:41:95:5a:
aa:cf:00:2b:4a:b0:66:be:f4:34:aa:fb:78:7e:8b:61:60:cf:
16:22:d3:98:6f:93:8b:4e:b8:6b:98:e5:08:f0:20:df:28:c8:
95:ca:e1:1e:f3:0c:de:28:9e:d5:d2:3b:3e:46:df:e0:2e:48:
d2:73:60:db:ac:70:ca:03:50:94:1e:e2:b3:37:67:39:6d:f0:
27:b4:69:95:fa:4c:95:7e:64:cb:1f:7b:f2:37:11:db:5e:69:
32:28:8e:9d:14:60:7c:04:a3:88:4b:1d:66:e5:f1:3d:c0:11:
f1:af:27:2e:01:a0:e2:ee:57:54:9d:87:01:e2:a6:84:b3:c8:
7a:3f:bc:c8:f8:a7:fb:cf:24:78:6e:d2:e0:28:9a:ba:82:52:
4e:2d:4d:03:8a:6c:12:23:b1:d1:b9:36:af:87:a3:1e:e5:e1:
26:8f:b6:cf:f6:f9:ad:c8:5d:1d:0e:d8:2b:bc:d7:38:26:98:
b4:ed:b7:28:c3:3f:1b:07:3f:6f:29:8b:08:51:aa:d4:12:48:
be:21:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:31 2026 by rpki-client