Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa
File: UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa (raw, json)
Hash identifier: xgK5dHExfmkfjOi2PqzjV2F80ioIPm+SIscsQO2bVck=
Subject key identifier: 50:4B:4A:DA:CF:59:BE:AA:86:08:F1:6C:DC:C2:75:60:51:DE:48:BD
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019C8F16DFF5EBF3257BA255DBC00B3CE922
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa
Signing time: Tue 24 Feb 2026 09:59:26 +0000
ROA not before: Tue 24 Feb 2026 09:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216211
IP address blocks: 80.249.134.0/24 maxlen: 24
2a13:edc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:16:df:f5:eb:f3:25:7b:a2:55:db:c0:0b:3c:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Feb 24 09:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=504b4adacf59beaa8608f16cdcc2756051de48bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:f6:94:dc:3f:db:ac:b1:3a:61:2b:de:b0:
c9:71:f5:8d:2e:33:fd:b8:f4:e2:b6:ed:cb:c1:e7:
31:b1:df:15:49:5a:29:68:4c:ba:0e:a5:a5:74:0a:
70:e6:58:42:b5:d6:b5:d8:fa:5f:ff:41:a4:c1:5a:
da:73:02:b3:9c:93:8d:82:00:2f:24:aa:9a:e8:98:
ff:83:3f:41:5c:c2:2e:25:b7:f3:1d:a9:94:fd:3a:
35:f6:94:ef:60:9a:93:10:ce:83:57:76:d3:f3:fb:
1f:14:e5:0a:a3:15:e6:d6:46:98:83:b3:1b:d7:de:
6c:c3:b0:98:23:18:f7:78:5b:4b:08:54:8a:94:e1:
ad:e8:60:9a:43:a8:0e:21:c0:b5:4f:df:30:df:5b:
34:3a:e4:7c:78:b1:7f:fc:04:57:19:5e:5b:ff:b9:
03:fc:54:d2:ba:fb:ec:07:08:94:50:53:62:64:02:
fe:7a:01:32:76:1e:c8:7a:ea:b2:fb:b6:ad:bc:f8:
fb:ec:0c:43:b4:64:53:46:6a:c9:8f:7d:f3:02:e2:
82:a9:48:1d:cb:95:e2:19:18:e1:3f:0e:dd:31:63:
f8:93:83:2f:c8:a2:57:fb:eb:98:94:a2:27:d9:3b:
48:a0:d3:ce:55:f1:34:4d:b4:d9:98:31:4c:2f:e9:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4B:4A:DA:CF:59:BE:AA:86:08:F1:6C:DC:C2:75:60:51:DE:48:BD
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.134.0/24
IPv6:
2a13:edc0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:a8:92:15:cb:76:c1:b0:ac:c2:c7:b9:29:7b:3a:b9:a8:69:
47:4b:59:48:40:ae:e9:9e:08:1d:6e:fc:d4:c2:80:ff:8e:0e:
31:14:b7:81:19:11:9a:0e:cd:d6:97:b7:d1:f6:c8:cc:dc:0c:
be:1e:8d:c3:3e:91:c1:98:af:d1:ac:c0:e0:31:21:95:33:1f:
b2:70:83:3a:bb:03:6e:e4:09:eb:dd:b4:0b:58:51:75:97:d2:
16:37:66:2b:8a:ef:1a:2b:02:87:91:b1:29:81:d0:91:53:d4:
65:ac:b0:a3:e4:6a:18:2f:e2:01:4b:fe:84:b3:9d:89:4c:f2:
36:a0:67:e0:6e:e9:69:31:da:4b:e2:3c:1c:d5:49:35:6f:49:
e8:25:1e:0f:36:5b:74:ea:ea:42:1c:4a:ff:9e:28:72:11:ac:
7a:b1:13:9d:75:3b:35:35:e0:d7:9a:b1:32:76:f2:90:6a:c5:
52:5d:06:8d:63:ff:76:63:fb:03:f5:fe:07:ce:15:be:e6:86:
bb:47:c1:bc:33:75:2b:f0:12:bf:cf:03:f9:44:16:77:df:2e:
88:1f:7a:02:d9:d1:fe:8b:56:fc:7a:98:30:bb:46:26:ac:b1:
28:32:05:7e:97:a2:75:2e:6b:ae:62:d1:7a:5d:34:be:3b:12:
b3:63:eb:18
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZyPFt/16/Mle6JV28ALPOkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5
ZTY1YTEwHhcNMjYwMjI0MDk1OTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDRiNGFkYWNmNTliZWFhODYwOGYxNmNkY2MyNzU2MDUxZGU0OGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL32lNw/26yxOmEr3rDJcfWNLjP9
uPTitu3Lwecxsd8VSVopaEy6DqWldApw5lhCtda12Ppf/0GkwVracwKznJONggAv
JKqa6Jj/gz9BXMIuJbfzHamU/To19pTvYJqTEM6DV3bT8/sfFOUKoxXm1kaYg7Mb
195sw7CYIxj3eFtLCFSKlOGt6GCaQ6gOIcC1T98w31s0OuR8eLF//ARXGV5b/7kD
/FTSuvvsBwiUUFNiZAL+egEydh7Ieuqy+7atvPj77AxDtGRTRmrJj33zAuKCqUgd
y5XiGRjhPw7dMWP4k4MvyKJX++uYlKIn2TtIoNPOVfE0TbTZmDFML+lmewIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFBLStrPWb6qhgjxbNzCdWBR3ki9MB8GA1UdIwQY
MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct
YmQyYjNhYmFlMTIxLzEvVUV0SzJzOVp2cXFHQ1BGczNNSjFZRkhlU0wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx
LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUPmGMA0E
AgACMAcDBQMqE+3AMA0GCSqGSIb3DQEBCwUAA4IBAQBKqJIVy3bBsKzCx7kpezq5
qGlHS1lIQK7pnggdbvzUwoD/jg4xFLeBGRGaDs3Wl7fR9sjM3Ay+Ho3DPpHBmK/R
rMDgMSGVMx+ycIM6uwNu5Anr3bQLWFF1l9IWN2Yriu8aKwKHkbEpgdCRU9RlrLCj
5GoYL+IBS/6Es52JTPI2oGfgbulpMdpL4jwc1Uk1b0noJR4PNlt06upCHEr/nihy
Eax6sROddTs1NeDXmrEydvKQasVSXQaNY/92Y/sD9f4HzhW+5oa7R8G8M3Ur8BK/
zwP5RBZ33y6IH3oC2dH+i1b8epgwu0YmrLEoMgV+l6J1LmuuYtF6XTS+OxKzY+sY
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:29 2026 by rpki-client