Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/GueQ_mhDztm052O4uyOCzydd4Hs.roa
File: GueQ_mhDztm052O4uyOCzydd4Hs.roa (raw, json)
Hash identifier: epijumWayC3hiz/5d4RYWJuCrfwASsOYBSEL2afKyYw=
Subject key identifier: 1A:E7:90:FE:68:43:CE:D9:B4:E7:63:B8:BB:23:82:CF:27:5D:E0:7B
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019C8F16E090E03AE77CDCFD567FDE139AA0
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/GueQ_mhDztm052O4uyOCzydd4Hs.roa
Signing time: Tue 24 Feb 2026 09:59:26 +0000
ROA not before: Tue 24 Feb 2026 09:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216245
IP address blocks: 80.249.134.0/24 maxlen: 24
2a13:edc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:16:e0:90:e0:3a:e7:7c:dc:fd:56:7f:de:13:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Feb 24 09:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ae790fe6843ced9b4e763b8bb2382cf275de07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:05:1e:8a:d3:1e:33:c7:27:cb:f5:84:8a:
b0:0a:d0:76:33:c7:2e:fa:c5:a8:89:50:6a:be:1f:
4f:1d:49:f4:57:6b:fc:7e:38:65:99:2e:82:64:50:
c2:10:61:14:09:3d:c8:87:61:fd:2b:26:f7:51:d9:
ed:f5:0d:24:aa:73:02:05:3d:3a:de:9a:e5:89:9e:
70:5e:6c:e4:ce:8c:4f:34:12:af:4f:e4:b5:e2:44:
86:1a:81:c1:0c:5c:49:61:52:24:39:59:89:27:ef:
f2:e7:4f:91:78:82:31:b5:96:2c:d9:09:9c:ba:10:
8a:e3:a9:43:7a:8d:16:a9:cc:2f:32:ae:8a:9b:c4:
52:34:f3:6e:e2:97:fc:6d:51:31:e8:e6:31:bd:2d:
b3:1a:ed:c8:eb:1d:c4:05:a7:e1:17:43:31:d2:14:
b2:8b:b3:81:be:4c:a4:05:ee:5b:e1:1b:14:5c:2d:
7d:f7:ca:60:64:a9:f6:bc:4c:9f:1c:74:62:c2:33:
69:9c:7b:8f:27:64:5d:d4:77:ad:f2:ed:e0:d0:92:
02:de:5e:e0:40:12:00:74:60:6f:ff:a6:de:12:73:
5e:8c:37:b3:f9:69:8f:62:e4:1e:36:8b:60:d1:56:
b6:0d:78:7f:1c:74:e7:73:ba:5d:0a:be:16:ad:eb:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E7:90:FE:68:43:CE:D9:B4:E7:63:B8:BB:23:82:CF:27:5D:E0:7B
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/GueQ_mhDztm052O4uyOCzydd4Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.134.0/24
IPv6:
2a13:edc0::/29
Signature Algorithm: sha256WithRSAEncryption
98:0a:dc:7e:a6:f6:53:6e:42:a5:75:24:f3:f0:b0:bd:85:01:
02:54:45:3a:19:7b:85:6a:99:16:79:40:56:86:1a:2c:e3:d4:
47:38:dc:90:5a:b4:9c:75:0a:14:22:7b:19:01:e9:62:16:65:
58:4d:42:3d:5d:53:56:73:15:b4:f7:9a:3a:01:ee:12:c8:7d:
64:f1:da:88:84:50:5d:52:f3:d3:ef:14:36:5a:30:c5:49:e4:
a5:13:e5:65:b2:80:bf:78:dd:b4:ba:41:80:df:3a:07:ba:f0:
99:78:1f:a0:da:ba:f3:48:e9:d7:4d:d4:4f:f3:18:8b:c8:d0:
ea:bb:50:ab:f7:2a:16:78:7d:c0:7e:52:20:98:25:b0:a9:48:
dc:01:fa:81:d0:ec:6c:9e:b1:df:67:79:f5:a4:79:b4:7e:1c:
b7:d3:f9:57:72:90:de:26:eb:31:9d:c1:bf:31:86:73:be:3b:
f4:9a:60:85:bd:07:30:5b:e6:50:72:da:3c:77:c3:9b:58:42:
f1:e6:ae:0e:22:05:df:68:19:ae:a8:81:4e:87:48:ea:e1:5e:
4c:40:2e:3c:81:80:d7:25:d2:03:3d:2a:91:c5:42:f6:bf:51:
89:bc:8b:66:88:cd:b9:d5:9d:a4:0d:ec:b2:db:0b:47:26:91:
6c:8b:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:18 2026 by rpki-client