Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/dYZsMYvx6UOC74SZFX9pIGO-8rI.roa
File: dYZsMYvx6UOC74SZFX9pIGO-8rI.roa (raw, json)
Hash identifier: AFzOlgk6h/FkVe+IxqK2pr/izYjgng/FXpPK4Sd4d9Q=
Subject key identifier: 75:86:6C:31:8B:F1:E9:43:82:EF:84:99:15:7F:69:20:63:BE:F2:B2
Certificate issuer: /CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Certificate serial: 01A06D495F97077967093AB822D11C443A94
Authority key identifier: FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/dYZsMYvx6UOC74SZFX9pIGO-8rI.roa
Signing time: Fri 04 Sep 2026 16:38:40 +0000
ROA not before: Fri 04 Sep 2026 16:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51561
IP address blocks: 80.247.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:49:5f:97:07:79:67:09:3a:b8:22:d1:1c:44:3a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Validity
Not Before: Sep 4 16:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75866c318bf1e94382ef8499157f692063bef2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:88:c9:fa:57:b7:61:50:b4:22:b1:3d:c8:
ec:95:c7:42:fd:39:7a:29:ab:4e:21:5b:72:1b:4b:
8d:00:6f:de:a3:11:d4:e3:c9:1a:24:a3:3f:c8:a7:
64:3e:f5:d3:4a:8a:ce:d8:16:5d:e9:cc:8d:9c:57:
41:9a:ab:7b:69:a7:8b:be:ad:6e:68:9d:3f:ef:2c:
81:ad:b9:80:34:23:00:00:d6:3e:a4:e3:8e:5b:6b:
75:90:38:2c:48:73:63:0c:dc:46:76:4d:e5:a7:10:
67:ca:44:33:42:36:45:2b:4c:0c:d8:44:13:29:ed:
cd:d0:d2:af:c6:06:21:97:ef:d4:4f:4d:73:50:c3:
57:6c:ed:bb:09:50:e5:13:18:5a:a5:ed:f6:84:19:
8b:56:19:a0:72:2e:23:98:38:c9:e8:db:08:e0:3f:
df:2d:c4:22:5a:5d:9e:a5:8c:c9:f4:e3:5f:af:82:
75:2c:54:26:fe:9c:f2:8d:68:ac:02:29:ba:f4:70:
68:26:97:58:8f:9b:77:0a:2a:c2:9f:38:64:4f:97:
0c:3f:55:1e:85:b0:e3:35:4d:59:b1:8d:7a:f3:df:
81:a7:cd:cb:66:03:ab:fc:a9:65:3e:5d:81:c2:47:
a8:c2:1c:df:f4:54:df:78:67:29:98:93:cc:c1:a5:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:6C:31:8B:F1:E9:43:82:EF:84:99:15:7F:69:20:63:BE:F2:B2
X509v3 Authority Key Identifier:
keyid:FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/dYZsMYvx6UOC74SZFX9pIGO-8rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.216.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ab:64:9f:4a:6a:34:8f:94:fd:29:81:63:62:e9:ed:22:d3:
17:89:e6:77:eb:80:8d:73:00:77:79:a5:14:87:2f:3f:fa:a5:
de:cc:91:97:96:9e:c0:c1:b4:f9:03:03:2c:4d:6d:ac:4c:31:
a6:56:51:fc:a1:69:ee:c1:9c:ee:dd:8c:ff:9c:3a:a0:96:49:
b8:8d:7a:f8:e9:c6:26:c1:be:0e:e1:51:39:03:9d:0e:5b:ed:
bf:35:92:78:38:e8:17:b0:46:d4:e2:d2:3d:4a:5f:81:15:86:
c6:e8:e1:6c:f4:40:51:b1:83:6a:28:18:f3:1f:7e:22:c3:c4:
a0:09:bd:d5:00:72:b7:d3:f6:1a:91:09:e1:0b:cd:a4:bd:3b:
b8:32:ce:8b:19:65:56:0f:a1:40:0c:89:9e:e3:a9:26:36:c2:
f9:6e:69:5b:0b:2d:18:90:e3:63:63:f7:fa:29:30:0b:88:d5:
7a:3a:f4:bf:b1:95:0c:a9:1e:9e:1a:df:66:af:0e:25:b5:4f:
ba:72:59:a0:f9:73:97:87:07:fa:ae:f6:67:5e:c4:58:20:dc:
91:56:4f:5a:f9:52:5a:0b:cb:69:89:b4:d5:bc:0b:15:c1:c4:
1c:18:66:32:5d:99:11:4b:f8:79:9c:3a:94:b0:5a:51:d5:3f:
aa:9c:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:45 2026 by rpki-client