Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/byfII41hx7v6GfkLHOOgwLy3GLA.roa
File: byfII41hx7v6GfkLHOOgwLy3GLA.roa (raw, json)
Hash identifier: Zo/z6gr7446Px1jbq5uM2vZhtDDjC3+TH8hqZRTm9rc=
Subject key identifier: 6F:27:C8:23:8D:61:C7:BB:FA:19:F9:0B:1C:E3:A0:C0:BC:B7:18:B0
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019FFF23DB5AF5BFB24D8F34C4C4A53C162D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/byfII41hx7v6GfkLHOOgwLy3GLA.roa
Signing time: Fri 14 Aug 2026 07:19:27 +0000
ROA not before: Fri 14 Aug 2026 07:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:23:db:5a:f5:bf:b2:4d:8f:34:c4:c4:a5:3c:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Aug 14 07:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f27c8238d61c7bbfa19f90b1ce3a0c0bcb718b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b0:fb:53:10:e9:fd:19:a8:f2:c3:9d:80:cb:
27:bb:f8:cc:cc:fb:24:94:13:2c:66:e9:ba:36:93:
6c:43:09:af:03:01:37:ae:c4:a5:ad:23:2d:fe:fb:
d5:9d:03:d1:73:b9:96:59:b4:60:f3:03:60:d8:c8:
a2:72:f0:d6:d4:f6:5f:1f:aa:a5:06:c7:03:91:93:
16:53:f5:fb:57:d2:10:9e:c7:01:b2:12:0b:a2:83:
b6:51:65:58:0a:1a:fb:63:fa:7a:0b:2b:22:44:3c:
46:ce:ff:e2:49:f9:c2:b1:09:77:60:8b:8b:93:fe:
06:77:52:30:a3:69:65:99:a4:72:ff:9c:1e:a8:e9:
b9:fd:0e:f7:ce:29:9c:46:54:69:46:0f:8c:e3:fa:
c5:3f:5c:3f:c4:28:bd:5b:3d:00:c1:00:88:ab:f4:
50:df:89:59:fd:16:97:d7:3e:b1:99:e7:c5:0a:48:
60:b4:37:a2:ae:a7:ec:ef:7f:10:e2:ad:11:c0:b4:
81:42:1b:84:34:02:77:b9:cf:09:c1:eb:3f:27:e7:
c3:af:7e:1e:f6:01:90:12:bb:3b:d1:61:db:2b:95:
35:54:54:e9:ed:cd:88:d0:fa:05:f9:50:c0:26:25:
a6:da:15:61:71:b4:54:cb:22:31:eb:ab:b8:88:ac:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:C8:23:8D:61:C7:BB:FA:19:F9:0B:1C:E3:A0:C0:BC:B7:18:B0
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/byfII41hx7v6GfkLHOOgwLy3GLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.196.0/24
80.93.198.0/23
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
34:df:70:38:02:b8:c6:c8:6d:68:e8:13:8e:ce:97:ca:76:0f:
ad:f6:13:d3:0e:98:7c:22:d7:43:a5:66:27:ef:76:c4:78:5d:
63:0d:67:a0:0b:d1:96:06:13:9b:9a:82:38:3d:b8:de:e2:7a:
1c:b8:fa:35:fb:93:fb:cb:d7:99:74:9c:95:2c:ea:29:58:e8:
14:98:42:cb:76:37:a3:86:78:4d:95:4f:0b:cc:89:52:b4:02:
2a:14:e6:a3:34:0c:12:cc:3a:2c:d4:47:3d:39:9d:51:d8:f7:
ca:d2:88:b7:67:c8:ad:08:76:1d:a0:05:4f:f3:a8:86:1e:86:
52:8c:06:d0:86:9f:fa:d1:30:e6:a0:0d:e7:eb:3c:af:57:67:
64:89:c9:68:72:7b:48:45:6b:d3:a2:c5:a1:b0:1a:11:06:7e:
aa:74:0b:27:2a:12:3c:19:8a:2c:cc:1d:81:d8:eb:b7:ba:0f:
ba:9b:f4:bb:3b:24:82:86:23:7a:1d:3a:4a:98:95:9b:92:b6:
e0:6c:48:4c:f6:7d:34:c0:69:05:c4:ad:98:eb:07:38:6f:a3:
76:50:2c:77:4a:69:60:4f:eb:cb:15:6c:f0:bb:06:96:0b:d7:
9b:70:f0:64:17:3e:d8:91:7d:69:00:9b:75:5f:8c:a5:85:78:
ee:6d:1f:5e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ//I9ta9b+yTY80xMSlPBYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwODE0MDcxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjI3YzgyMzhkNjFjN2JiZmExOWY5MGIxY2UzYTBjMGJjYjcxOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LD7UxDp/Rmo8sOdgMsnu/jMzPsk
lBMsZum6NpNsQwmvAwE3rsSlrSMt/vvVnQPRc7mWWbRg8wNg2MiicvDW1PZfH6ql
BscDkZMWU/X7V9IQnscBshILooO2UWVYChr7Y/p6CysiRDxGzv/iSfnCsQl3YIuL
k/4Gd1Iwo2llmaRy/5weqOm5/Q73zimcRlRpRg+M4/rFP1w/xCi9Wz0AwQCIq/RQ
34lZ/RaX1z6xmefFCkhgtDeirqfs738Q4q0RwLSBQhuENAJ3uc8Jwes/J+fDr34e
9gGQErs70WHbK5U1VFTp7c2I0PoF+VDAJiWm2hVhcbRUyyIx66u4iKyrvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG8nyCONYce7+hn5CxzjoMC8txiwMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvYnlmSUk0MWh4N3Y2R2ZrTEhPT2d3THkzR0xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUF3EAwQB
UF3GAwQCUF3MMA0GCSqGSIb3DQEBCwUAA4IBAQA033A4ArjGyG1o6BOOzpfKdg+t
9hPTDph8ItdDpWYn73bEeF1jDWegC9GWBhObmoI4Pbje4nocuPo1+5P7y9eZdJyV
LOopWOgUmELLdjejhnhNlU8LzIlStAIqFOajNAwSzDos1Ec9OZ1R2PfK0oi3Z8it
CHYdoAVP86iGHoZSjAbQhp/60TDmoA3n6zyvV2dkiclocntIRWvTosWhsBoRBn6q
dAsnKhI8GYoszB2B2Ou3ug+6m/S7OySChiN6HTpKmJWbkrbgbEhM9n00wGkFxK2Y
6wc4b6N2UCx3SmlgT+vLFWzwuwaWC9ebcPBkFz7YkX1pAJt1X4ylhXjubR9e
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:51:24 2026 by rpki-client