Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/LnJF2aD-QXKwpEm_SmQC9mOkxDQ.roa
File: LnJF2aD-QXKwpEm_SmQC9mOkxDQ.roa (raw, json)
Hash identifier: Pb/xRiuCx9q0KwFGi99PEmlzF0Owu6wPxhv4o/s2A64=
Subject key identifier: 2E:72:45:D9:A0:FE:41:72:B0:A4:49:BF:4A:64:02:F6:63:A4:C4:34
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 01A08176C8E5AE7778FCAA9B4419212F5CC3
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/LnJF2aD-QXKwpEm_SmQC9mOkxDQ.roa
Signing time: Tue 08 Sep 2026 14:40:40 +0000
ROA not before: Tue 08 Sep 2026 14:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40792
IP address blocks: 80.249.134.0/24 maxlen: 24
2a13:edc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:76:c8:e5:ae:77:78:fc:aa:9b:44:19:21:2f:5c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Sep 8 14:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e7245d9a0fe4172b0a449bf4a6402f663a4c434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:63:b2:d6:17:28:e5:26:e1:83:e6:c1:0a:
8f:25:ed:63:f1:e9:74:9c:4c:2e:7c:4f:36:d1:43:
a4:55:a2:d6:de:b9:78:6a:12:8d:ba:c4:ba:53:33:
3b:da:5c:5d:d5:d6:01:19:75:c1:71:66:3e:e3:0f:
44:f6:5a:7e:af:03:0f:9b:13:cb:da:94:f9:de:38:
7c:8f:9f:5c:64:44:be:4c:7f:b8:15:01:c5:d0:dc:
eb:1a:0b:d2:87:17:37:1d:51:31:bb:b2:d7:c4:31:
e1:d2:44:90:3d:bb:4e:68:29:86:07:6a:65:63:4c:
94:c9:66:a3:76:90:2d:50:62:dd:c4:2e:0d:d8:60:
90:28:f8:b0:ff:f1:e6:b8:9c:62:55:2e:24:e8:c1:
c4:c2:40:af:4c:1f:71:73:52:5b:8a:51:7a:16:7f:
3d:41:5a:c7:e2:92:d7:85:e2:67:41:7c:ff:13:a3:
86:ca:66:93:6b:1d:92:d5:d8:f3:1f:64:c2:e4:5a:
d2:5b:74:5c:59:54:9e:4e:87:eb:84:c0:70:25:cf:
30:66:9b:a4:c7:de:9c:fc:8b:eb:68:84:71:d0:ac:
b8:31:c7:9b:66:ea:14:dc:8f:60:f3:87:44:31:71:
83:17:78:4b:66:40:5f:ad:e1:8d:0b:15:15:98:fe:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:72:45:D9:A0:FE:41:72:B0:A4:49:BF:4A:64:02:F6:63:A4:C4:34
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/LnJF2aD-QXKwpEm_SmQC9mOkxDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.134.0/24
IPv6:
2a13:edc0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:94:a4:59:b0:c7:3c:2b:db:40:b5:a8:34:05:25:a1:ba:2d:
5c:5b:a5:39:0b:ce:9d:cb:eb:eb:65:dc:2b:15:0c:67:0a:a7:
0d:32:0a:ed:82:2e:4c:7e:33:f7:d4:ba:56:e4:2a:90:b3:4e:
ff:3b:2a:bf:0a:5e:0b:af:b9:a1:55:99:c7:46:1b:b7:7d:c6:
02:42:3f:f8:a0:bf:4f:49:95:10:37:67:d7:ef:12:f1:33:45:
6f:51:0f:3c:b5:94:ac:52:49:6a:dd:2b:d6:c9:01:3c:a3:da:
4b:e2:51:54:b2:bd:24:1d:82:1c:59:5f:78:02:4d:53:2f:ba:
85:e9:e1:9d:c8:20:a8:f1:fe:5e:a2:c7:40:9b:dd:8d:da:bb:
78:9b:b8:f6:98:87:aa:50:51:3f:b8:c5:40:d9:fe:6a:6b:20:
2a:22:42:83:62:fd:8b:66:37:20:6d:0e:f7:a2:3c:14:d1:8a:
25:85:9f:7b:ea:ed:f8:c8:c3:c7:19:d3:4e:92:8d:d7:94:e3:
c4:b5:ed:d3:6a:88:41:53:c6:82:9c:68:8d:88:ba:f5:a0:9c:
cc:46:06:ab:12:88:13:74:4f:f4:e7:19:2a:69:35:21:9e:7b:
c4:4c:c7:34:3d:1e:25:4d:d3:00:7a:9c:cf:9c:a6:c9:9a:61:
fc:46:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:35 2026 by rpki-client