Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/no2DAadLlyCgfJ3yGfXMXAle7ss.roa
File: no2DAadLlyCgfJ3yGfXMXAle7ss.roa (raw, json)
Hash identifier: wO/hILyjAZxEBMqsImhYXJk4hOHjBmxpFt4GY+g4M0Q=
Subject key identifier: 9E:8D:83:01:A7:4B:97:20:A0:7C:9D:F2:19:F5:CC:5C:09:5E:EE:CB
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019E0C4CC02162D00A0D599DEC2EB561EBE3
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/no2DAadLlyCgfJ3yGfXMXAle7ss.roa
Signing time: Sat 09 May 2026 10:33:36 +0000
ROA not before: Sat 09 May 2026 10:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203113
IP address blocks: 80.93.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:4c:c0:21:62:d0:0a:0d:59:9d:ec:2e:b5:61:eb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 9 10:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e8d8301a74b9720a07c9df219f5cc5c095eeecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:29:22:62:b4:c8:c0:04:ee:76:6a:20:3a:
40:e2:03:30:d3:67:9d:1b:1d:60:f4:9f:3c:27:8e:
da:8b:14:4d:a4:de:0f:d7:48:9e:3d:b5:f0:47:45:
92:34:5c:d5:f7:4b:da:84:b4:4c:58:ee:b1:2e:d5:
43:83:67:26:54:0f:7b:5c:c4:f5:3d:66:c5:3e:54:
35:49:64:d2:2f:44:1c:9d:2a:eb:68:6e:d5:19:29:
1f:4c:dc:3d:06:89:6c:3f:f3:75:c3:fe:eb:65:be:
4e:ce:ba:bb:06:cd:22:61:f0:38:d7:a9:db:14:ac:
b8:91:dd:ae:36:e6:f1:a5:f3:a7:07:13:45:2c:2f:
b8:1a:ff:50:eb:14:bb:60:40:fc:24:0a:fe:68:a2:
80:c0:28:9b:23:08:be:d8:bd:80:f1:0e:06:55:ca:
0c:42:0b:49:92:48:83:e5:61:7e:ea:6d:60:e2:c0:
19:73:48:6e:f2:9b:a6:f3:17:32:2e:d3:5f:f6:51:
77:8c:47:40:89:46:89:2a:88:9c:16:fc:3c:f8:d9:
41:dc:f9:b7:ec:f8:6e:aa:d4:ec:96:43:c8:94:6a:
0d:09:ea:08:4c:22:42:d3:aa:c0:35:68:e4:9a:e0:
a9:3c:4e:d3:85:04:35:1b:f9:c2:03:4f:8c:32:a8:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:83:01:A7:4B:97:20:A0:7C:9D:F2:19:F5:CC:5C:09:5E:EE:CB
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/no2DAadLlyCgfJ3yGfXMXAle7ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f7:ff:24:5f:8e:6a:a3:33:a6:8c:e3:82:b2:d3:5e:74:78:
30:98:6d:20:06:a1:85:00:df:0b:4d:88:ea:cd:7b:47:be:e2:
35:df:27:6b:72:6d:b4:bc:84:46:6b:c7:82:98:14:3b:b3:27:
98:19:0d:ed:b2:dd:66:fe:b9:d9:87:35:66:f8:e9:69:22:86:
b5:f3:35:6e:76:37:4e:3c:cc:1a:9b:a8:81:7b:93:37:25:1d:
f1:04:bc:0b:33:57:1c:94:bd:e0:b9:d1:78:11:f7:65:7c:1c:
ba:e0:9c:ac:e7:70:c0:41:f4:82:f5:d5:cc:e2:09:63:4c:99:
c3:56:eb:0c:aa:12:cc:14:65:f7:61:25:fe:6e:b7:62:4a:9e:
ed:e7:3a:5e:bc:4e:3e:95:9a:b9:93:b5:56:99:28:fb:63:c1:
67:00:74:92:03:0c:eb:5e:dc:00:31:90:47:40:8c:2e:54:69:
f3:0a:e5:b6:c8:a2:19:42:87:1c:88:67:0e:aa:cb:5c:a2:6c:
79:d6:ce:1c:c7:9b:2c:12:b6:89:a4:91:65:87:ef:38:6c:11:
7a:99:cd:29:83:da:42:d7:07:8b:07:70:cc:6e:20:44:f2:30:
12:8b:78:5f:94:cd:59:ba:f1:db:bd:9b:38:10:60:0e:83:57:
02:b1:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:55 2026 by rpki-client