Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/vwQY97vonjbxh1XkzUzde2yV1fw.roa
File: vwQY97vonjbxh1XkzUzde2yV1fw.roa (raw, json)
Hash identifier: wZk00VJ4ASC7xKiTcPZZlql2bIhIHVpzXkrQAMaWtdc=
Subject key identifier: BF:04:18:F7:BB:E8:9E:36:F1:87:55:E4:CD:4C:DD:7B:6C:95:D5:FC
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A11AB2C71F45724842C7177D76ED2CB9D2
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/vwQY97vonjbxh1XkzUzde2yV1fw.roa
Signing time: Thu 08 Oct 2026 08:48:06 +0000
ROA not before: Thu 08 Oct 2026 08:48:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.198.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:b2:c7:1f:45:72:48:42:c7:17:7d:76:ed:2c:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Oct 8 08:48:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf0418f7bbe89e36f18755e4cd4cdd7b6c95d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:4f:09:da:2e:cd:a1:d6:a8:f1:ab:1e:7c:
fb:31:0e:da:85:8f:bd:c4:32:d2:13:dc:de:6a:3c:
7d:28:c0:9f:f8:57:41:4f:be:4c:2e:4e:05:93:1b:
1d:53:bf:2d:35:fd:a5:b3:9a:62:28:71:0f:ad:f5:
da:47:28:f1:b3:0d:d6:a1:9c:78:5f:e3:9c:98:4c:
45:a7:b0:7a:ce:75:97:d6:71:a6:da:b5:4f:c0:90:
44:1f:32:13:86:68:fd:7b:51:53:bb:a3:09:c5:0f:
7f:3b:1f:63:47:9e:12:81:3c:2d:b1:e0:c4:75:74:
45:57:e1:6a:da:0b:ff:4b:4f:bb:0c:7d:11:ac:cb:
34:1a:89:90:49:34:97:3b:fa:09:ef:9e:c9:5c:aa:
92:78:dc:4a:2d:a7:fa:91:cf:49:6b:f3:32:8f:b0:
4b:b3:f8:27:7b:03:5b:31:bb:45:4f:ee:26:24:29:
e0:80:39:97:c8:b7:28:31:4d:2e:4c:de:41:61:a7:
15:81:4f:86:a2:86:b2:25:5f:41:16:f8:61:04:1f:
43:f4:e6:7d:a9:21:09:a5:62:ee:9e:98:dc:84:90:
61:4a:57:18:cd:2c:d9:48:73:27:59:38:7b:af:05:
97:4c:21:83:af:73:c6:c9:6b:96:d7:e2:dd:9d:0f:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:18:F7:BB:E8:9E:36:F1:87:55:E4:CD:4C:DD:7B:6C:95:D5:FC
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/vwQY97vonjbxh1XkzUzde2yV1fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.196.0/24
80.93.198.0/23
80.93.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:c0:cd:a0:48:1f:17:52:e7:de:28:f8:f1:7e:bf:da:04:2f:
b9:aa:9d:b7:d2:fb:6a:41:53:fc:56:d8:cf:86:40:be:7a:c2:
4c:97:62:63:32:7d:c1:5b:44:73:bc:5b:8f:07:8e:29:23:f5:
88:f3:34:5b:81:47:de:b4:76:c3:cd:f4:5c:e3:f2:2c:b0:ef:
01:4c:54:b5:c8:80:c4:65:8d:12:88:1e:c1:c2:2c:74:7c:d2:
55:a3:b5:97:0a:28:62:f7:34:46:11:a5:20:b1:93:87:d1:7b:
6d:f7:3e:a6:55:3e:8f:23:a9:c9:65:92:c3:93:d1:95:1e:06:
41:8d:79:65:3f:a5:0c:da:17:80:f1:73:8f:16:c0:5c:6c:fd:
bf:29:e3:01:bc:02:bf:16:c3:d5:50:8b:86:f5:db:99:bc:3b:
a3:19:a6:ae:f3:34:56:1b:2e:ab:3e:6c:61:21:d9:86:e0:09:
81:67:01:2b:e4:7a:f7:dd:ac:d5:97:c4:bd:cf:a9:fe:9f:1f:
10:91:28:fb:9b:d7:68:6b:2a:ec:a1:51:a9:8c:08:35:2e:97:
36:da:b6:e8:a5:ef:d0:e4:9b:a7:cf:1c:0d:c4:38:d6:39:dd:
b8:b0:ce:c9:26:18:1d:f8:36:60:23:01:56:b5:a8:f4:7f:ef:
99:70:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:11:08 2026 by rpki-client