Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/v63kgKJRT5CZvk-D6cng0EhS9_4.roa
File: v63kgKJRT5CZvk-D6cng0EhS9_4.roa (raw, json)
Hash identifier: ZZ4VIKbF7OyQhkR4EjSPOYxia+HGXDhexHWEoAphWR0=
Subject key identifier: BF:AD:E4:80:A2:51:4F:90:99:BE:4F:83:E9:C9:E0:D0:48:52:F7:FE
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A06AF733387763A1BDF2A8616CB7D6440F
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/v63kgKJRT5CZvk-D6cng0EhS9_4.roa
Signing time: Fri 04 Sep 2026 05:49:40 +0000
ROA not before: Fri 04 Sep 2026 05:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63025
IP address blocks: 80.93.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:f7:33:38:77:63:a1:bd:f2:a8:61:6c:b7:d6:44:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Sep 4 05:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfade480a2514f9099be4f83e9c9e0d04852f7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:e7:6a:de:eb:1d:10:96:83:16:63:5f:c1:
b8:5f:75:96:fc:3c:f7:11:7b:e8:de:c8:1d:ec:07:
d4:86:c8:ae:53:0a:ac:df:de:b8:2b:b2:5d:7f:aa:
bf:3b:c3:b8:b2:ec:13:55:b7:f1:04:9f:a5:3f:27:
6f:9d:68:de:d7:ef:8e:96:07:65:3a:0f:23:84:38:
3c:48:49:2e:0c:fb:0c:22:31:68:31:87:e1:4b:96:
5a:66:38:d8:5f:06:3c:6a:1d:8e:da:93:fb:45:3c:
97:b3:15:52:ef:39:d4:26:0e:20:c2:32:fb:34:9a:
28:ca:21:f2:99:bd:b8:47:8a:86:dc:a1:a2:f1:9f:
d6:4f:b5:79:e1:ee:57:a2:a3:88:7a:93:3e:a6:10:
0f:81:8c:56:22:13:b7:8d:2b:79:2f:7d:66:98:db:
d9:48:b9:b3:02:43:29:03:98:ec:0a:86:7a:65:b0:
23:94:23:ed:cf:37:ff:5e:01:e2:98:3f:95:99:8b:
26:bf:77:b5:d1:48:d8:27:1b:6a:c7:bc:00:e0:c0:
06:a6:83:04:6f:df:3c:9f:29:90:b7:a0:7a:c9:41:
f0:11:b0:6b:6b:69:b4:53:c1:7a:7a:22:69:21:1b:
3d:7c:a4:c7:ec:24:eb:58:49:bd:f4:89:58:1b:9a:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:E4:80:A2:51:4F:90:99:BE:4F:83:E9:C9:E0:D0:48:52:F7:FE
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/v63kgKJRT5CZvk-D6cng0EhS9_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.199.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b3:e1:b6:c0:be:a6:b9:a8:f1:12:2c:5f:14:83:e3:93:f5:
c5:ff:9a:ba:a6:1b:b0:68:f5:31:5e:bb:6a:a2:0b:d7:e1:5a:
ad:d8:fd:a5:1a:fa:0e:50:18:28:bc:6a:a4:31:7d:5b:78:fa:
23:62:62:e8:c6:50:9f:83:af:c5:58:20:82:74:a8:35:be:c1:
99:25:02:ae:7a:01:cb:26:4c:2a:e0:e7:16:e4:db:0c:2e:2d:
73:ac:ee:62:c1:3f:8c:5d:63:5e:80:60:ea:9c:4a:8d:3d:07:
16:a3:48:8e:f7:74:81:8f:86:43:94:06:ed:c9:cb:1f:93:03:
48:06:38:3b:44:74:d7:6a:20:44:be:3e:ff:b3:e7:8b:7e:70:
0d:4e:a0:41:80:e1:4b:96:4b:3a:1d:61:55:f4:c3:4b:c4:65:
95:35:ef:de:10:5d:94:91:a0:f5:e0:79:e7:32:62:3d:fd:20:
fc:b8:8d:5c:5d:68:d5:c4:ce:f7:85:2f:37:ef:bc:ca:f6:a7:
c4:72:0e:8c:74:e9:59:7e:fd:1a:0a:e6:3f:36:cc:58:f9:98:
49:e4:f0:52:9d:6f:96:57:a5:f2:ce:b3:89:d8:ea:c4:03:f1:
9b:05:98:f4:cd:84:dd:57:5f:35:ed:41:c8:c1:ed:a1:d7:5a:
93:62:2f:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBq9zM4d2OhvfKoYWy31kQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwOTA0MDU0OTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmFkZTQ4MGEyNTE0ZjkwOTliZTRmODNlOWM5ZTBkMDQ4NTJmN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0jnat7rHRCWgxZjX8G4X3WW/Dz3
EXvo3sgd7AfUhsiuUwqs3964K7Jdf6q/O8O4suwTVbfxBJ+lPydvnWje1++Olgdl
Og8jhDg8SEkuDPsMIjFoMYfhS5ZaZjjYXwY8ah2O2pP7RTyXsxVS7znUJg4gwjL7
NJooyiHymb24R4qG3KGi8Z/WT7V54e5XoqOIepM+phAPgYxWIhO3jSt5L31mmNvZ
SLmzAkMpA5jsCoZ6ZbAjlCPtzzf/XgHimD+VmYsmv3e10UjYJxtqx7wA4MAGpoME
b988nymQt6B6yUHwEbBra2m0U8F6eiJpIRs9fKTH7CTrWEm99IlYG5qDPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+t5ICiUU+Qmb5Pg+nJ4NBIUvf+MB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvdjYza2dLSlJUNUNadmstRDZjbmcwRWhTOV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3HMA0G
CSqGSIb3DQEBCwUAA4IBAQBjs+G2wL6muajxEixfFIPjk/XF/5q6phuwaPUxXrtq
ogvX4Vqt2P2lGvoOUBgovGqkMX1bePojYmLoxlCfg6/FWCCCdKg1vsGZJQKuegHL
Jkwq4OcW5NsMLi1zrO5iwT+MXWNegGDqnEqNPQcWo0iO93SBj4ZDlAbtycsfkwNI
Bjg7RHTXaiBEvj7/s+eLfnANTqBBgOFLlks6HWFV9MNLxGWVNe/eEF2UkaD14Hnn
MmI9/SD8uI1cXWjVxM73hS8377zK9qfEcg6MdOlZfv0aCuY/NsxY+ZhJ5PBSnW+W
V6XyzrOJ2OrEA/GbBZj0zYTdV1817UHIwe2h11qTYi+3
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:29:52 2026 by rpki-client