Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/fnggY0IhO9mDzoeT1t0WuzkAzWI.roa
File: fnggY0IhO9mDzoeT1t0WuzkAzWI.roa (raw, json)
Hash identifier: 9e6IMcnEkPPF9sv33WqexenQbytaWL15Ul9zWEcxcQo=
Subject key identifier: 7E:78:20:63:42:21:3B:D9:83:CE:87:93:D6:DD:16:BB:39:00:CD:62
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019EFEF3452EB02665277D8CFB1C7624C1F8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/fnggY0IhO9mDzoeT1t0WuzkAzWI.roa
Signing time: Thu 25 Jun 2026 13:23:36 +0000
ROA not before: Thu 25 Jun 2026 13:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5413
IP address blocks: 80.93.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:f3:45:2e:b0:26:65:27:7d:8c:fb:1c:76:24:c1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jun 25 13:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e78206342213bd983ce8793d6dd16bb3900cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:bb:f1:8e:83:31:86:70:e3:90:7e:85:09:
af:82:11:3e:c9:52:18:4e:e5:70:eb:4c:2b:38:ac:
90:74:2a:06:e7:d7:f7:2a:0b:4b:8f:1e:75:60:70:
5f:9c:8f:46:24:87:ad:a7:c9:64:74:24:1a:23:e4:
c6:8a:38:d4:b8:59:ea:a6:e5:52:a3:fb:97:6d:f9:
de:22:20:99:da:df:a7:e5:a1:66:ed:ec:bd:3c:42:
9b:50:e3:53:5f:d3:ea:39:63:42:49:9c:12:66:6d:
dc:c3:0b:b7:22:47:33:31:65:64:78:88:b5:b0:99:
7d:2a:df:b0:04:86:ca:5c:21:ce:4c:55:93:e7:d7:
a1:24:65:a0:25:59:47:33:54:67:19:5b:61:c3:1f:
2b:d4:ae:cd:33:5f:ed:00:d9:83:03:f9:e0:46:26:
84:13:f8:5e:ae:1a:c4:57:5b:a0:e2:2f:48:86:6e:
fa:35:a1:3b:ba:b1:ec:6a:16:96:29:0d:0c:68:16:
fa:b8:45:83:3f:27:01:3d:11:56:85:b7:20:b6:73:
63:1b:c9:01:84:87:f5:8b:c4:cc:a8:31:da:4e:57:
b3:19:9e:41:cb:ca:5e:c5:de:f4:82:b7:06:46:4a:
6e:35:0e:d5:f0:8b:01:07:70:86:61:d9:4f:10:ab:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:20:63:42:21:3B:D9:83:CE:87:93:D6:DD:16:BB:39:00:CD:62
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/fnggY0IhO9mDzoeT1t0WuzkAzWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.200.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4b:09:a3:d6:59:14:b7:a0:d6:1d:6a:0c:66:17:45:3d:03:
3b:c7:0a:2a:8f:7a:0c:64:76:79:89:ea:0b:f9:6e:b5:ca:36:
2e:70:90:54:67:f1:2d:c8:12:3e:7c:cc:9c:6c:2a:0d:b4:1c:
7c:78:12:6f:e9:59:5f:04:00:f4:24:4d:e2:65:2a:2f:72:b2:
dd:0d:8e:27:09:ec:11:f9:9e:a4:d0:f5:a9:18:8d:f6:46:96:
c4:07:cc:53:70:72:cd:ad:1c:9e:d5:cd:9f:f8:23:e2:cc:3a:
b4:94:cc:b2:92:c4:b3:0a:c5:19:f2:0c:69:ba:fd:33:f7:a3:
da:5f:3b:58:84:28:17:4b:84:e7:ef:e7:44:fa:d9:1f:10:3d:
ca:8c:84:38:a2:1c:1e:83:cf:02:ae:40:29:e2:09:43:c8:89:
11:67:0f:53:1b:84:75:cf:15:e1:6c:6d:dd:3f:c9:b7:55:e5:
37:49:06:9b:d5:31:ed:17:ef:44:55:b9:fa:8d:a6:90:f2:79:
fa:99:a3:db:45:6e:c6:78:23:c6:9d:83:e8:b5:6b:a2:1b:dd:
67:8d:94:cd:ea:9e:dd:ae:69:2f:38:17:16:98:b5:33:ad:23:
dd:9d:b2:7b:e2:c2:b8:f6:9c:23:43:49:b2:9e:94:62:ee:73:
43:4c:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 16:47:58 2026 by rpki-client