Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/f5NHYm3oiEkykKgZ26zyrX-OOZI.roa
File: f5NHYm3oiEkykKgZ26zyrX-OOZI.roa (raw, json)
Hash identifier: C2Tql1A+E0tiNLNiMtrkT3dG1rhkjFjLKfhL4IdgKYw=
Subject key identifier: 7F:93:47:62:6D:E8:88:49:32:90:A8:19:DB:AC:F2:AD:7F:8E:39:92
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A05DEF828980963D0706DC79A1FB16D852
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/f5NHYm3oiEkykKgZ26zyrX-OOZI.roa
Signing time: Tue 01 Sep 2026 17:06:12 +0000
ROA not before: Tue 01 Sep 2026 17:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:ef:82:89:80:96:3d:07:06:dc:79:a1:fb:16:d8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 1 17:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f9347626de888493290a819dbacf2ad7f8e3992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:28:0c:c2:0d:12:15:f9:bb:7e:f0:ec:31:
27:91:fe:22:f9:ef:1d:1c:af:d6:10:9d:bc:01:3c:
0f:c9:a5:3a:cd:f0:42:d5:84:e5:12:b4:c0:ff:8d:
02:f3:82:70:9d:ff:93:9b:fb:5c:c2:b0:f9:5e:fc:
76:96:90:a5:8f:0d:df:5f:70:25:35:97:98:fc:a7:
7f:99:41:1b:b0:24:ed:66:b5:3f:70:c6:09:78:76:
c5:cc:48:17:47:f8:72:bd:43:82:16:59:52:55:19:
3b:43:e0:40:5c:e0:ff:fc:ca:35:81:cb:e2:aa:cf:
94:7a:54:31:bc:9d:83:46:4d:bc:91:25:4e:5a:e2:
40:67:12:45:5b:1d:53:db:9e:71:e4:c8:15:f3:41:
1f:e0:e0:ba:0a:dd:3d:13:e1:df:fb:50:2c:28:02:
a2:56:e9:af:1c:02:21:74:14:df:1b:3a:a7:cd:de:
05:84:70:f3:de:0f:07:04:ee:ba:be:f7:44:7f:5c:
e7:04:b3:78:64:f0:00:d7:59:b1:8c:65:02:fc:27:
82:6e:ce:f4:28:40:62:c2:6f:3b:10:96:53:ac:3e:
40:9f:da:a6:ec:d4:b8:e9:56:10:c0:57:05:c1:a4:
aa:e5:b7:0b:7e:d7:f6:8b:7a:9a:f1:a8:05:36:45:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:93:47:62:6D:E8:88:49:32:90:A8:19:DB:AC:F2:AD:7F:8E:39:92
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/f5NHYm3oiEkykKgZ26zyrX-OOZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.196.0/24
80.93.198.0/23
80.93.204.0-80.93.206.255
Signature Algorithm: sha256WithRSAEncryption
62:8b:ca:4a:46:3b:07:04:a8:4b:dd:31:1d:24:54:8d:d1:3e:
e8:8a:b3:24:c5:21:9f:aa:a2:7b:72:eb:a7:53:5f:3f:73:81:
b9:5f:30:f9:b6:92:d0:58:79:9c:4b:db:98:a4:99:be:6f:44:
af:3f:e5:a3:37:a4:ef:55:6a:45:52:f6:1e:d3:27:d1:13:62:
a4:3d:34:6f:fb:3f:fb:c7:10:ff:f2:d1:5c:f8:dd:ef:6c:d1:
cd:09:19:51:b8:84:d9:27:72:46:05:4c:46:a5:34:e0:21:18:
2e:35:23:25:56:38:10:ca:d4:cf:58:be:48:a3:57:f4:4d:96:
e3:e8:26:44:b5:3d:52:1f:9a:56:93:b5:32:4f:c8:f3:ea:3b:
12:a5:f2:aa:4f:bf:8b:ec:a2:02:f2:18:56:41:b5:38:1c:dd:
24:ea:22:06:dc:e5:0e:d2:bd:28:42:a8:f0:42:41:45:01:9c:
3a:b6:19:c7:e6:42:3a:bb:b3:f3:19:6e:2e:45:2d:26:28:c9:
5c:71:f8:45:ac:97:38:29:1f:07:3c:7a:e2:57:51:83:e5:99:
1d:e7:31:b8:80:d6:aa:dc:e0:b7:6f:15:47:40:a1:7f:52:d4:
10:ea:5b:a2:37:c7:1d:03:91:63:2a:59:14:7a:dc:71:5d:f0:
79:83:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 09:41:35 2026 by rpki-client