Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/dazbjQKPx5PG8Kn6MfNc-0C7xAE.roa
File: dazbjQKPx5PG8Kn6MfNc-0C7xAE.roa (raw, json)
Hash identifier: 7gr0wAtYEjRjBQY+9SWNmYmDIlOWaFZnN/rA0YLabZE=
Subject key identifier: 75:AC:DB:8D:02:8F:C7:93:C6:F0:A9:FA:31:F3:5C:FB:40:BB:C4:01
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019E590BF7F157CC0D25A151991ED1183123
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/dazbjQKPx5PG8Kn6MfNc-0C7xAE.roa
Signing time: Sun 24 May 2026 08:13:37 +0000
ROA not before: Sun 24 May 2026 08:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.195.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:0b:f7:f1:57:cc:0d:25:a1:51:99:1e:d1:18:31:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 24 08:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75acdb8d028fc793c6f0a9fa31f35cfb40bbc401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:a5:a1:73:02:94:99:5a:11:43:2a:7a:b2:
e3:dd:01:83:25:71:ea:07:14:27:09:9c:57:c0:b2:
92:cb:79:77:60:3f:8b:40:4f:62:99:69:a9:11:6d:
5d:ba:e1:e0:85:cf:b6:c0:02:58:27:38:1f:68:6b:
51:d0:ce:2a:92:8f:c5:48:10:45:87:8b:c6:d5:f3:
7b:19:27:56:e7:6f:85:6b:b8:9f:51:e1:0e:93:88:
e2:d3:48:f3:9a:bb:fd:12:75:31:04:e5:16:bd:de:
e0:3f:be:aa:2e:46:9f:2c:8b:fc:64:c2:90:ce:a1:
bc:cf:7d:ff:26:76:50:5d:e3:f7:30:86:7b:6b:23:
5a:e6:cb:31:d8:cd:e6:58:48:33:56:56:7e:2c:d6:
97:8c:15:b2:75:55:8d:b1:28:b2:f5:9a:7d:e6:1e:
ec:ca:73:71:30:56:5a:67:36:e0:f1:e5:65:18:c4:
c0:62:49:0f:2a:72:3b:3a:a5:7b:e6:e2:ea:ea:e6:
8a:99:e7:7f:e9:1c:18:86:67:9a:7d:d6:8f:2c:5c:
f5:22:ab:57:12:24:ea:64:1f:ca:88:ca:a2:2c:34:
52:01:36:67:44:cd:fc:fd:25:d6:02:b5:68:c5:4f:
8b:58:81:cc:c2:27:07:bc:c5:55:d5:59:9a:c3:5e:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:DB:8D:02:8F:C7:93:C6:F0:A9:FA:31:F3:5C:FB:40:BB:C4:01
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/dazbjQKPx5PG8Kn6MfNc-0C7xAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.195.0-80.93.196.255
80.93.198.0/24
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
59:6b:1c:39:6a:75:73:4e:39:3a:a7:90:80:eb:60:38:85:92:
70:e0:56:ee:f0:4c:9b:f5:2b:55:cb:ff:17:0c:a0:bc:0d:3e:
9a:96:17:a6:08:43:42:13:7d:57:46:4f:e9:74:76:20:dd:b5:
2f:ad:a4:dd:b4:d1:18:64:53:1b:4a:6e:a9:71:7e:b6:92:7d:
29:20:cc:d5:cf:23:22:3c:63:e8:32:4d:fb:e5:a6:5e:8e:ae:
98:b6:67:45:10:9f:2b:c0:cd:38:d2:4e:9c:4e:ea:d9:20:57:
63:85:30:92:96:d1:1c:18:6e:83:22:b4:b6:37:a8:2c:ac:d7:
2e:6c:b7:58:31:40:59:08:bf:e1:92:84:fe:db:82:82:36:3f:
91:1d:b2:4b:30:aa:4f:f7:ac:49:09:af:9b:d5:fc:9e:98:7a:
93:d9:6e:6b:a8:0e:80:5d:b8:06:4e:f1:d5:af:1e:4b:a0:82:
9b:be:b1:cc:16:c9:f4:50:e1:40:42:cf:a0:1e:d4:f7:76:b1:
d8:a7:95:81:9e:dc:54:dd:6a:d1:2a:b3:26:08:d8:5d:53:67:
5a:c7:bd:58:fc:f9:c0:52:5c:12:01:b0:f1:21:83:fb:0e:90:
52:62:12:36:76:cc:f9:62:c5:e0:00:a5:1e:56:37:04:5e:81:
30:dc:b7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 02:39:07 2026 by rpki-client