Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/bNVcTEQWuBJOVEkJKvvpn0x1LQY.roa
File: bNVcTEQWuBJOVEkJKvvpn0x1LQY.roa (raw, json)
Hash identifier: db/7CXm5TJpdUEcZf0SNVrz/OUOOmbh0qZYabVLKMZk=
Subject key identifier: 6C:D5:5C:4C:44:16:B8:12:4E:54:49:09:2A:FB:E9:9F:4C:75:2D:06
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A0673E222D635AC8E68AFDA83AC917FD54
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/bNVcTEQWuBJOVEkJKvvpn0x1LQY.roa
Signing time: Thu 03 Sep 2026 12:28:40 +0000
ROA not before: Thu 03 Sep 2026 12:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1834
IP address blocks: 80.93.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:3e:22:2d:63:5a:c8:e6:8a:fd:a8:3a:c9:17:fd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 3 12:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cd55c4c4416b8124e5449092afbe99f4c752d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:57:68:7f:16:54:35:7c:29:5f:9d:ea:8f:
f3:a4:ce:da:a2:07:b7:9b:de:27:67:39:35:86:0b:
5b:db:b1:c7:72:6c:ab:68:bc:3a:ef:7a:6a:cf:f3:
7a:1a:f1:cc:2a:46:5a:a3:82:2e:a5:d5:d9:19:b3:
66:51:99:91:64:33:97:19:24:82:af:0d:74:4f:15:
56:51:ec:02:16:fa:f4:07:aa:8e:eb:b4:4b:fd:73:
33:a2:95:48:f1:e1:08:7d:39:ea:3d:fe:b4:8b:7f:
13:00:d1:c6:39:77:f4:1c:00:31:34:72:73:93:2f:
0e:2d:26:c8:bd:58:e7:d4:5f:56:fc:a6:9d:7c:b2:
df:d7:db:5b:9b:88:cd:29:d9:ae:1a:71:35:8a:1f:
5a:73:53:1b:3b:b8:08:0a:58:cc:52:fe:73:89:21:
6b:59:c0:9d:ac:d2:d1:ec:9c:1c:24:d9:50:e7:cb:
5a:0a:9d:d7:15:d3:3f:3e:13:78:9f:a5:e5:6a:90:
50:d9:64:29:2a:f5:54:3e:ac:29:94:e5:02:9f:5d:
8b:74:5b:f4:00:44:ce:35:6e:88:49:f5:1c:9f:62:
e6:96:c1:c5:b2:a9:8a:cf:b8:87:dd:0a:74:7a:7b:
a9:4b:65:94:26:5f:18:6e:e4:c4:31:42:fc:6e:91:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D5:5C:4C:44:16:B8:12:4E:54:49:09:2A:FB:E9:9F:4C:75:2D:06
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/bNVcTEQWuBJOVEkJKvvpn0x1LQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6d:d4:c4:92:1d:91:b5:9f:53:4b:a6:25:ef:5b:48:d0:a2:
0f:41:f2:20:81:cd:3e:59:2e:cf:15:48:dd:42:42:14:ab:dd:
8f:0e:85:58:a7:3d:fe:1a:e0:41:16:71:dc:b1:cc:8a:26:94:
8a:41:46:5e:d6:c2:32:87:bf:71:fc:e2:eb:77:77:19:80:c3:
7e:ce:ce:7d:89:c0:e1:27:e8:e7:c9:7a:61:85:e4:92:e6:82:
3c:8e:a2:eb:56:6e:ce:26:64:85:7d:eb:30:1a:3e:88:76:1b:
f1:04:ff:61:39:e5:1d:9d:bc:41:1e:14:52:3c:6e:64:ab:cf:
cd:1b:1c:80:23:75:0e:1a:e9:cb:56:4f:68:35:41:3a:40:4f:
5d:bd:2a:54:aa:9f:d3:9c:15:76:f6:83:3f:c0:94:35:66:95:
c4:8a:d0:29:56:3c:68:47:22:e1:2a:d9:e6:74:ce:b8:f1:ec:
3c:38:e4:55:85:a0:d6:a7:68:e6:53:41:51:0f:47:6e:58:a0:
98:dd:86:41:96:c5:ec:ca:d9:db:25:65:17:e9:f0:42:d0:cd:
22:c5:c2:56:2b:c9:3f:3d:8d:e0:f3:e5:e8:9d:ac:a4:ab:d8:
90:92:24:f9:32:15:c5:65:f2:34:22:e7:45:70:ee:b4:82:43:
f7:f8:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:29:52 2026 by rpki-client