Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qDQzgVf0qiHtVbsbveHOy9Eb5vo.roa
File: qDQzgVf0qiHtVbsbveHOy9Eb5vo.roa (raw, json)
Hash identifier: HMMK2VMNxGsQmUo1rS9nnzlbW5PzxDsLKFISaPqtC9w=
Subject key identifier: A8:34:33:81:57:F4:AA:21:ED:55:BB:1B:BD:E1:CE:CB:D1:1B:E6:FA
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019DE263DF18112E6E819748A1CA57D5213F
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qDQzgVf0qiHtVbsbveHOy9Eb5vo.roa
Signing time: Fri 01 May 2026 07:14:49 +0000
ROA not before: Fri 01 May 2026 07:14:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.194.0/24 maxlen: 24
80.93.195.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:63:df:18:11:2e:6e:81:97:48:a1:ca:57:d5:21:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 1 07:14:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a834338157f4aa21ed55bb1bbde1cecbd11be6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:b9:9c:e7:49:70:e6:33:65:b1:a5:76:f8:
3c:94:18:96:fd:16:fc:78:0a:76:6c:78:75:a5:45:
6d:03:df:74:6f:e6:d1:7a:01:62:ee:59:f8:b6:2c:
eb:b4:ec:8c:35:16:79:20:ad:99:4e:90:0c:a2:6b:
71:c3:7a:34:52:55:3e:7c:78:2f:b2:40:84:90:a1:
05:01:37:5b:05:b7:76:77:36:0c:7d:14:2c:5b:f2:
ea:8e:31:30:57:d7:99:bd:d1:20:b9:84:a3:77:01:
4b:d0:f0:2a:72:cf:7d:79:3f:2f:50:19:de:8c:27:
b3:d7:e2:1c:64:ca:76:e8:cd:98:c6:df:ef:76:a5:
96:02:87:87:98:7e:b5:45:cd:20:0e:e7:8a:63:a1:
c1:ec:00:b7:72:8c:62:84:30:23:3c:20:8c:1e:6f:
64:74:51:89:a2:05:e5:17:b7:7a:94:0e:64:56:ae:
06:18:8a:98:9f:bb:26:bb:4c:90:43:15:0d:26:5b:
d8:1b:e8:25:39:f7:ca:f4:d4:c3:2f:e7:b7:fe:19:
ff:90:f8:1f:6f:68:9e:08:e0:a7:52:ad:c7:19:46:
12:b4:d8:4e:07:d5:ab:b5:d8:d4:47:5d:c0:ea:b5:
42:01:cb:48:f3:ec:b5:97:5d:07:c9:39:d4:df:60:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:33:81:57:F4:AA:21:ED:55:BB:1B:BD:E1:CE:CB:D1:1B:E6:FA
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/qDQzgVf0qiHtVbsbveHOy9Eb5vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.194.0-80.93.196.255
80.93.198.0/23
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
60:47:0f:bc:2e:f4:0f:de:54:1b:a1:97:7f:38:fb:f3:3a:ed:
16:d8:e9:7c:47:fd:75:39:af:72:08:7c:9e:b2:fe:2a:c2:4e:
bb:92:c2:d5:cf:65:d8:27:41:95:5d:1e:6b:cf:f1:7c:d3:10:
9c:cd:ac:b1:4b:4a:d0:5b:b2:40:24:8f:ec:4a:fa:62:76:f9:
f8:9f:f1:39:3f:ec:51:fd:2b:45:2f:00:7b:0e:29:f5:f5:05:
9d:26:34:ca:70:c1:38:ca:fe:d0:94:f7:76:37:bf:df:cb:af:
26:40:66:5c:22:db:96:1e:3f:22:4d:c9:ef:56:5e:0e:fd:b8:
b0:0a:87:27:60:fe:95:7c:62:18:c4:1b:01:a7:0a:a5:54:1e:
b7:20:8a:b9:7f:67:56:9b:a8:19:fb:7f:d3:81:c6:7a:30:97:
b3:71:db:57:34:70:9f:e4:85:64:c3:24:29:70:e7:bc:cc:d5:
e9:c4:6b:f3:0c:33:d7:8e:43:a9:ea:da:5d:68:b0:52:1c:0a:
ca:3f:73:e4:e2:ff:02:92:ff:c5:14:54:6d:36:e0:58:8d:4b:
c9:22:30:c8:31:46:1e:c5:91:44:62:e9:d0:7c:e3:9d:52:80:
ec:af:2c:99:93:c5:a5:e9:0d:ef:fd:ce:c0:f3:ab:27:c9:9a:
2a:9b:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:05 2026 by rpki-client