Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/zVma1odFcJAM_KGu4P72WLr1Nt0.roa
File: zVma1odFcJAM_KGu4P72WLr1Nt0.roa (raw, json)
Hash identifier: l9EFPDT7uBlw444mi6SqVRE82+jg0O4FQzDjQsNWVQo=
Subject key identifier: CD:59:9A:D6:87:45:70:90:0C:FC:A1:AE:E0:FE:F6:58:BA:F5:36:DD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019DAEB453BD7BC724F4075959716C599ED4
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/zVma1odFcJAM_KGu4P72WLr1Nt0.roa
Signing time: Tue 21 Apr 2026 06:22:26 +0000
ROA not before: Tue 21 Apr 2026 06:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.194.0/24 maxlen: 24
80.93.195.0/24 maxlen: 24
80.93.196.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:b4:53:bd:7b:c7:24:f4:07:59:59:71:6c:59:9e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Apr 21 06:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd599ad6874570900cfca1aee0fef658baf536dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:65:2c:47:74:14:76:a9:1e:c0:7f:35:5f:
7b:65:8a:28:23:62:22:79:22:a4:d9:81:1c:09:d5:
cf:d9:c6:c5:04:b1:a4:48:ed:45:9f:ba:51:a7:a9:
55:71:48:eb:96:bb:ca:c1:3d:e6:43:ac:d6:f0:6b:
4b:40:50:9e:7a:3c:da:68:e7:15:74:6c:5c:1b:c5:
42:dc:6a:6e:18:93:9e:42:f0:01:5b:a2:42:14:21:
5a:b5:32:75:e6:d7:64:50:49:a9:a6:da:96:dd:47:
6c:53:1f:87:d8:be:39:cf:40:37:fa:71:49:f7:68:
1a:83:82:4b:e5:54:59:20:dc:70:3b:33:9b:15:0f:
e5:91:ca:39:2e:59:64:5d:aa:37:07:8b:a3:07:b5:
2d:0e:95:5d:80:67:c8:87:19:6d:8a:31:81:89:44:
ff:2c:58:b0:21:5a:34:4a:70:9a:5e:dc:44:84:0b:
56:59:cd:43:d4:8f:d8:ad:0b:5a:7f:49:ba:77:bf:
e8:79:8b:a9:16:fa:81:2d:68:72:bd:23:f5:61:5f:
ef:11:7d:3b:f2:92:3b:68:a7:88:5b:d3:b0:7a:ee:
55:4b:05:df:61:57:54:a0:0a:93:1f:97:23:cd:6b:
21:91:7c:0a:53:0f:2f:d5:a9:0f:9f:3d:93:80:89:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:9A:D6:87:45:70:90:0C:FC:A1:AE:E0:FE:F6:58:BA:F5:36:DD
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/zVma1odFcJAM_KGu4P72WLr1Nt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.194.0-80.93.196.255
80.93.199.0/24
80.93.204.0/24
80.93.206.0/23
Signature Algorithm: sha256WithRSAEncryption
48:62:47:53:2b:76:e0:1d:dc:e1:33:64:90:da:67:83:85:36:
45:5a:23:44:8f:a5:f6:e8:d1:cd:7e:a0:68:b6:f4:b5:c4:a6:
83:e7:13:d9:eb:8d:20:71:9f:f5:af:57:2b:12:fd:43:83:4c:
7a:af:d7:ed:0b:e9:71:e3:9b:12:47:e2:55:d0:8e:28:7d:92:
38:3f:fb:fe:db:26:a7:86:56:e0:bb:74:19:09:ce:94:e9:3f:
25:0b:89:98:26:dd:24:ab:54:ea:28:bf:2b:3c:90:1d:04:1f:
1c:b3:ec:71:8f:fa:ba:f3:6b:57:f7:f8:31:e2:64:56:bf:07:
23:6d:67:f2:5c:2f:46:d8:ff:5d:e2:3d:89:f8:7a:2c:b1:45:
5a:85:ed:42:3f:59:89:32:44:09:e6:98:d6:aa:36:82:32:e6:
08:3b:f6:04:e6:99:fe:1e:21:4d:c5:af:24:ec:1b:b9:d7:bc:
63:04:4f:d4:e8:d9:75:8c:23:11:ce:62:25:06:fe:72:b6:de:
e7:80:15:d5:29:f8:2e:61:12:20:21:9e:10:1b:2e:6b:43:01:
a0:98:d3:78:d9:e2:fb:4d:f6:bf:c0:ca:ad:35:c4:45:01:7e:
e3:99:fb:a7:48:9b:7a:39:6b:55:b1:32:46:fe:28:e2:69:03:
20:5c:85:3d
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ2utFO9e8ck9AdZWXFsWZ7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwNDIxMDYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDU5OWFkNjg3NDU3MDkwMGNmY2ExYWVlMGZlZjY1OGJhZjUzNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaplLEd0FHapHsB/NV97ZYooI2Ii
eSKk2YEcCdXP2cbFBLGkSO1Fn7pRp6lVcUjrlrvKwT3mQ6zW8GtLQFCeejzaaOcV
dGxcG8VC3GpuGJOeQvABW6JCFCFatTJ15tdkUEmpptqW3UdsUx+H2L45z0A3+nFJ
92gag4JL5VRZINxwOzObFQ/lkco5LllkXao3B4ujB7UtDpVdgGfIhxltijGBiUT/
LFiwIVo0SnCaXtxEhAtWWc1D1I/YrQtaf0m6d7/oeYupFvqBLWhyvSP1YV/vEX07
8pI7aKeIW9Oweu5VSwXfYVdUoAqTH5cjzWshkXwKUw8v1akPnz2TgIkvCwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFM1ZmtaHRXCQDPyhruD+9li69TbdMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvelZtYTFvZEZjSkFNX0tHdTRQNzJXTHIxTnQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAUF3AMAwD
BAFQXcIDBABQXcQDBABQXccDBABQXcwDBAFQXc4wDQYJKoZIhvcNAQELBQADggEB
AEhiR1MrduAd3OEzZJDaZ4OFNkVaI0SPpfbo0c1+oGi29LXEpoPnE9nrjSBxn/Wv
VysS/UODTHqv1+0L6XHjmxJH4lXQjih9kjg/+/7bJqeGVuC7dBkJzpTpPyULiZgm
3SSrVOoovys8kB0EHxyz7HGP+rrza1f3+DHiZFa/ByNtZ/JcL0bY/13iPYn4eiyx
RVqF7UI/WYkyRAnmmNaqNoIy5gg79gTmmf4eIU3FryTsG7nXvGMET9To2XWMIxHO
YiUG/nK23ueAFdUp+C5hEiAhnhAbLmtDAaCY03jZ4vtN9r/Ayq01xEUBfuOZ+6dI
m3o5a1WxMkb+KOJpAyBchT0=
-----END CERTIFICATE-----
Generated at Thu Apr 23 04:51:46 2026 by rpki-client