Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/yvcdVOQJQVFB2pQJalrHWMllL-k.roa
File: yvcdVOQJQVFB2pQJalrHWMllL-k.roa (raw, json)
Hash identifier: KbrKNE2dhgHdH/9U8YQI6hzWv2o+CIOcYTmCUBWWIWY=
Subject key identifier: CA:F7:1D:54:E4:09:41:51:41:DA:94:09:6A:5A:C7:58:C9:65:2F:E9
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01A1AB13CCC0BC7BB5CC26B6D15CA392690E
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/yvcdVOQJQVFB2pQJalrHWMllL-k.roa
Signing time: Thu 05 Nov 2026 09:39:23 +0000
ROA not before: Thu 05 Nov 2026 09:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218780
IP address blocks: 80.93.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:13:cc:c0:bc:7b:b5:cc:26:b6:d1:5c:a3:92:69:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Nov 5 09:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caf71d54e409415141da94096a5ac758c9652fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:15:89:8c:52:09:dc:30:a7:27:47:3f:42:
87:e9:73:c1:45:4f:a6:53:3a:f4:ca:e2:fc:9b:54:
6e:eb:8d:42:1e:3e:a1:60:9c:2f:71:43:4e:1a:a9:
f4:37:41:22:da:d4:31:68:6e:53:d3:6a:6f:3a:0c:
b1:1b:6d:e9:e2:a2:50:51:e4:0f:89:77:40:26:d3:
63:f1:17:97:fa:0b:90:b8:6a:56:a6:74:c7:3d:b0:
33:ae:62:70:f8:6f:8c:ba:29:18:6c:f4:63:2f:60:
e8:e9:17:ba:53:39:88:48:c1:ba:32:71:9d:65:53:
7e:7b:ec:44:8e:a2:9a:f5:b7:bf:55:7a:c6:ea:43:
60:c5:01:21:8e:f1:f4:05:5a:57:c3:46:d6:46:a8:
a6:3c:e0:91:57:9d:fe:bc:93:b3:45:9c:64:fb:95:
79:ba:a2:28:66:c7:a3:3e:5d:e8:cb:01:89:7a:95:
a0:da:35:df:a8:50:07:77:81:85:17:f1:17:a9:ec:
ec:23:48:0d:e5:fa:31:59:b2:f5:43:33:3b:8e:7a:
61:2d:a0:0a:8a:03:56:e3:09:aa:1a:7b:2b:b3:34:
02:b2:97:0a:ba:f4:6e:fb:6c:56:09:d6:da:a0:8a:
42:e7:dd:9a:79:34:f8:37:3d:2f:90:3a:49:7a:e0:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:1D:54:E4:09:41:51:41:DA:94:09:6A:5A:C7:58:C9:65:2F:E9
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/yvcdVOQJQVFB2pQJalrHWMllL-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.201.0/24
Signature Algorithm: sha256WithRSAEncryption
67:25:ff:13:b1:96:fa:17:30:8f:0a:1e:a8:26:57:6b:5b:2e:
2f:c6:62:ed:bc:ab:fb:66:0b:16:25:c8:51:a0:77:4a:f5:4d:
af:63:c6:ef:bb:24:dd:1f:81:25:07:0c:2b:e5:e3:d9:3e:56:
2d:c1:c8:f5:45:f1:52:97:8f:2c:7d:d3:ed:2e:c8:71:7e:db:
81:03:6f:a3:f2:08:bb:af:f7:23:59:cf:bb:76:f1:c8:2d:92:
a2:cb:33:43:e5:93:ab:a4:70:a6:20:3b:3d:23:54:61:2f:95:
57:27:3d:79:ef:11:b9:95:79:6d:71:04:4b:73:8a:b6:7c:9d:
f0:22:72:50:ad:3a:29:dc:de:d5:16:b6:1f:68:47:d9:bf:51:
a4:a9:4a:ad:33:93:f4:cc:13:c4:08:7c:37:bc:20:99:1b:76:
5a:56:24:e2:0b:b7:17:84:a9:48:e8:0f:c7:2e:75:dc:26:0a:
34:b2:40:a4:f0:b9:ba:15:92:bf:93:77:a0:dc:99:ee:27:75:
9a:86:e8:ea:8c:57:dc:3c:d5:0e:59:56:10:d8:d7:f1:04:0d:
3f:51:89:dc:5d:23:4d:47:8c:75:8b:3a:9e:58:ab:36:dd:bf:
96:b1:d1:35:32:d1:60:5e:a6:ef:1a:06:d0:eb:fa:7a:bb:6f:
0e:fc:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:25 2026 by rpki-client