Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/n06nHj_xxwr30tNE6n8TkYIPe0I.roa
File: n06nHj_xxwr30tNE6n8TkYIPe0I.roa (raw, json)
Hash identifier: lm5ZR7vFv0OsqckI6SDnmB+7Trp+Rhpfh8fs1YnJr1Y=
Subject key identifier: 9F:4E:A7:1E:3F:F1:C7:0A:F7:D2:D3:44:EA:7F:13:91:82:0F:7B:42
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A07392DFC6505FDE437D4704E8BCE21096
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/n06nHj_xxwr30tNE6n8TkYIPe0I.roa
Signing time: Sat 05 Sep 2026 21:56:40 +0000
ROA not before: Sat 05 Sep 2026 21:56:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:92:df:c6:50:5f:de:43:7d:47:04:e8:bc:e2:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 5 21:56:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f4ea71e3ff1c70af7d2d344ea7f1391820f7b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:4e:d2:af:46:45:6d:2f:4c:9d:08:4a:6d:
21:86:9f:ef:c8:22:2d:b3:4f:7d:5d:94:06:28:fd:
07:90:ea:01:c4:93:de:46:52:51:cb:bc:ac:91:03:
0c:26:fa:15:52:65:fe:a4:92:3c:07:78:8b:9c:cc:
34:50:17:a8:5b:4c:0f:fe:28:65:86:0f:1d:57:f3:
49:3d:2c:34:a4:7a:ea:eb:fd:50:57:e1:f7:48:04:
39:98:f7:22:87:08:3c:44:ca:50:ab:2b:bc:db:d3:
07:b6:1b:78:86:aa:4c:53:2d:94:cf:5a:ec:cc:67:
a5:d2:56:a4:20:30:8d:71:34:32:d2:a8:cb:31:b1:
14:44:61:24:1c:62:4d:74:be:e8:eb:86:1d:89:b4:
8f:a6:27:12:eb:5c:c2:7b:3a:f7:70:36:45:ad:b1:
09:81:ec:16:85:1b:60:01:c6:b3:f8:9f:79:6e:c3:
c7:91:62:75:af:6b:ab:e8:25:59:88:3d:a4:e2:e9:
ac:f1:93:db:cb:42:d5:b3:ec:c1:2a:5e:d3:54:7a:
31:29:15:3f:7a:f4:88:68:e7:89:52:1d:0c:ce:93:
9a:cc:df:10:3e:82:13:2c:9f:ed:fb:b9:3a:3e:b6:
96:b9:a2:4b:37:5b:9b:9a:d3:9a:e5:60:c2:6c:8f:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:A7:1E:3F:F1:C7:0A:F7:D2:D3:44:EA:7F:13:91:82:0F:7B:42
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/n06nHj_xxwr30tNE6n8TkYIPe0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f9:41:5c:d8:4b:d2:58:3c:16:2e:39:2e:f8:ab:87:d4:20:
56:60:76:37:7e:3d:c1:06:a5:6a:da:5e:a5:65:62:b4:6a:2d:
33:ec:a4:bc:d5:1f:71:cd:98:ac:c7:a7:cb:48:ad:3d:f7:c4:
0a:74:9b:5a:42:3c:3b:a2:97:d8:8e:17:80:f6:39:c9:75:c0:
ae:90:d0:6a:00:d3:69:c7:eb:bb:9e:ae:aa:5c:21:e0:ec:75:
31:a6:b0:44:e3:29:a6:bb:3e:fc:6b:dd:9a:73:d0:2a:69:1e:
a8:5f:9c:20:7d:c3:40:02:70:b1:a7:2b:19:b3:57:0b:6e:56:
26:09:d0:8d:1b:52:cf:97:c8:e5:9c:19:71:cb:fd:d2:fc:cf:
e4:4e:2a:e4:c9:0e:23:de:e7:cd:bc:8d:fe:af:e6:1e:3c:e8:
f3:9c:ad:33:2e:36:f0:11:ee:b0:e0:c2:bf:b7:f9:76:83:0a:
27:e0:8b:0a:fb:5a:cf:35:c7:a1:7d:a4:57:47:f9:43:7f:47:
9a:a3:e3:a8:8a:d0:d9:86:37:0c:6d:19:58:ee:69:5b:de:c6:
e2:99:e4:ab:c1:cb:e2:4f:c1:cc:1b:25:81:a1:63:61:76:c0:
44:3e:4e:83:2f:c8:2f:c8:27:91:d9:a3:ae:78:5b:48:bf:5f:
e0:d5:f7:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBzkt/GUF/eQ31HBOi84hCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwOTA1MjE1NjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjRlYTcxZTNmZjFjNzBhZjdkMmQzNDRlYTdmMTM5MTgyMGY3YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxhO0q9GRW0vTJ0ISm0hhp/vyCIt
s099XZQGKP0HkOoBxJPeRlJRy7yskQMMJvoVUmX+pJI8B3iLnMw0UBeoW0wP/ihl
hg8dV/NJPSw0pHrq6/1QV+H3SAQ5mPcihwg8RMpQqyu829MHtht4hqpMUy2Uz1rs
zGel0lakIDCNcTQy0qjLMbEURGEkHGJNdL7o64YdibSPpicS61zCezr3cDZFrbEJ
gewWhRtgAcaz+J95bsPHkWJ1r2ur6CVZiD2k4ums8ZPby0LVs+zBKl7TVHoxKRU/
evSIaOeJUh0MzpOazN8QPoITLJ/t+7k6PraWuaJLN1ubmtOa5WDCbI9YGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9Opx4/8ccK99LTROp/E5GCD3tCMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvbjA2bkhqX3h4d3IzMHRORTZuOFRrWUlQZTBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3PMA0G
CSqGSIb3DQEBCwUAA4IBAQAg+UFc2EvSWDwWLjku+KuH1CBWYHY3fj3BBqVq2l6l
ZWK0ai0z7KS81R9xzZisx6fLSK0998QKdJtaQjw7opfYjheA9jnJdcCukNBqANNp
x+u7nq6qXCHg7HUxprBE4ymmuz78a92ac9AqaR6oX5wgfcNAAnCxpysZs1cLblYm
CdCNG1LPl8jlnBlxy/3S/M/kTirkyQ4j3ufNvI3+r+YePOjznK0zLjbwEe6w4MK/
t/l2gwon4IsK+1rPNcehfaRXR/lDf0eao+OoitDZhjcMbRlY7mlb3sbimeSrwcvi
T8HMGyWBoWNhdsBEPk6DL8gvyCeR2aOueFtIv1/g1feK
-----END CERTIFICATE-----
Generated at Tue Sep 8 10:38:16 2026 by rpki-client