Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ggKowSBJI_1cKbhHt8jNiyBMxWg.roa
File: ggKowSBJI_1cKbhHt8jNiyBMxWg.roa (raw, json)
Hash identifier: +g7SQAulM4vhb7trkwkqrhln0oDoYyI23BOwKJl2oms=
Subject key identifier: 82:02:A8:C1:20:49:23:FD:5C:29:B8:47:B7:C8:CD:8B:20:4C:C5:68
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A09EA0B53BBE03248D4E442E09B541BF02
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ggKowSBJI_1cKbhHt8jNiyBMxWg.roa
Signing time: Mon 14 Sep 2026 06:35:27 +0000
ROA not before: Mon 14 Sep 2026 06:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.193.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 06:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:a0:b5:3b:be:03:24:8d:4e:44:2e:09:b5:41:bf:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 14 06:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8202a8c1204923fd5c29b847b7c8cd8b204cc568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:fd:44:10:68:07:42:6d:48:2b:08:7d:04:
1f:86:bc:d0:61:cb:53:57:11:2c:7d:20:27:4e:c3:
cd:a0:76:5e:5c:93:8b:88:fa:7a:c2:39:46:f4:75:
d4:b0:20:2f:eb:83:c6:e6:ea:2a:0d:f5:a9:99:aa:
16:e8:76:55:f9:ce:2e:aa:55:2a:13:a7:7f:d6:5e:
c5:2b:57:1e:f0:9d:e4:df:7b:04:7b:0c:76:72:9d:
a7:0f:9d:13:8f:72:ed:a3:d2:7d:f0:b8:7e:6b:c7:
63:8b:a1:a0:4f:3a:b3:57:50:97:b1:12:a4:c4:90:
38:8f:eb:c0:f7:d8:13:a9:c1:39:2d:91:a0:83:56:
3a:d8:4d:f3:96:b6:55:dc:2d:1e:f3:6a:cb:36:a8:
e9:f5:16:0b:4e:6a:15:eb:70:56:db:80:97:22:28:
89:4c:02:7b:09:e8:46:ff:89:04:f4:94:06:4e:5e:
2b:2c:bd:d1:ab:89:05:aa:9b:39:d4:f6:ef:ca:60:
17:40:e1:ed:00:96:a5:57:39:95:c5:44:f7:01:da:
a4:e4:bb:3f:bb:ff:ff:86:44:08:e6:d0:62:90:a6:
42:b9:d3:0d:45:b3:64:38:2f:98:2b:db:27:6e:e8:
52:2a:c0:b5:e6:2b:ee:b5:a7:1c:06:f1:8b:ee:c4:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:A8:C1:20:49:23:FD:5C:29:B8:47:B7:C8:CD:8B:20:4C:C5:68
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ggKowSBJI_1cKbhHt8jNiyBMxWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/23
80.93.196.0/24
80.93.198.0/24
80.93.204.0-80.93.206.255
Signature Algorithm: sha256WithRSAEncryption
1f:d8:f2:25:0b:2b:61:60:ac:42:5f:c4:4e:fa:11:aa:b7:25:
05:29:fe:7f:b9:4a:d1:4e:a6:cb:ca:dd:fa:9d:04:9f:ba:ba:
2e:15:39:9f:88:af:2a:c4:63:73:9c:50:61:56:f5:ac:45:6b:
7c:b8:7a:26:97:3f:a9:81:c0:09:f9:41:98:5f:a9:3a:c0:d7:
c8:06:0c:17:b4:e1:61:2b:e2:9b:47:85:c9:c7:97:ff:9d:56:
e2:19:ed:72:53:3a:bd:cd:d4:25:2f:64:30:e1:dc:20:77:91:
69:e2:90:45:35:41:79:34:4f:4d:06:b2:0d:3f:4a:48:24:ab:
26:65:2e:e9:60:bd:52:36:63:41:6f:bc:fd:31:f5:ad:67:33:
2a:85:35:a9:9b:8d:fb:3a:77:2a:3c:7f:77:b0:01:07:ad:c3:
54:24:b9:08:fe:de:eb:ed:cc:f6:d1:b1:a6:4e:fa:e3:4d:51:
42:cd:79:35:ae:4b:0d:bb:17:fb:6d:e4:8e:9d:3c:47:d1:c9:
02:80:e3:ed:db:86:8a:16:7e:31:d6:d9:55:60:2b:ab:85:49:
09:58:14:f4:26:f4:ab:0b:fa:86:74:2b:59:df:7b:d5:2c:8c:
c1:41:cf:94:8f:82:59:b0:c3:94:91:7b:92:c1:a2:6d:e2:c0:
c2:48:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 15:57:55 2026 by rpki-client