Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/b29AL1mA7CmTDu2kGZf4kV3UOVc.roa
File: b29AL1mA7CmTDu2kGZf4kV3UOVc.roa (raw, json)
Hash identifier: ovdt1kfDZYCzTBUhDXu2Yh787nA620clvHtONm+6cbc=
Subject key identifier: 6F:6F:40:2F:59:80:EC:29:93:0E:ED:A4:19:97:F8:91:5D:D4:39:57
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A080D7BCF7DE685B00BFFD48A97A505E04
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/b29AL1mA7CmTDu2kGZf4kV3UOVc.roa
Signing time: Tue 08 Sep 2026 11:46:56 +0000
ROA not before: Tue 08 Sep 2026 11:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 80.71.226.0/24 maxlen: 24
81.29.146.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:d7:bc:f7:de:68:5b:00:bf:fd:48:a9:7a:50:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 8 11:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f6f402f5980ec29930eeda41997f8915dd43957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:01:f5:d3:b4:dc:6a:12:d6:35:46:ff:96:
d1:09:e6:75:64:8f:e0:ca:20:60:24:c9:89:97:33:
42:97:a8:07:e5:db:2c:b3:1b:e3:58:71:13:5d:0f:
70:fa:a9:58:36:26:b6:f2:91:23:87:71:01:1a:68:
9c:64:9d:13:d5:5f:a1:fc:3b:e4:90:ca:21:f3:37:
27:ad:bb:d3:db:1f:c3:0c:c7:3b:06:e9:dc:3e:e7:
75:9b:24:e7:0e:03:ac:33:3f:1e:ab:cf:3c:89:b3:
58:6b:b4:54:00:63:b1:4d:35:23:35:b0:90:77:15:
8c:df:d6:a1:27:e1:0e:da:0b:d0:db:1c:f5:fb:75:
fc:83:8c:b6:7f:29:ce:49:60:34:1e:39:66:b8:0a:
60:b3:d0:29:f0:81:95:6f:98:aa:6d:e6:fe:5b:22:
a0:dd:f4:70:5d:aa:9e:7f:66:a9:be:ee:d8:c0:8a:
91:6d:08:b2:23:de:2c:14:65:f4:91:1b:6a:c7:1f:
da:fd:f1:43:14:03:c7:5c:15:37:1c:d4:ad:6d:35:
9f:c2:71:0e:2a:8d:de:34:e2:87:7e:c1:00:4e:69:
a3:e5:01:15:2b:25:db:8b:4a:55:c8:8e:68:b9:31:
4f:57:13:bb:7f:86:7f:11:0b:f8:c2:5f:42:20:9a:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:40:2F:59:80:EC:29:93:0E:ED:A4:19:97:F8:91:5D:D4:39:57
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/b29AL1mA7CmTDu2kGZf4kV3UOVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.226.0/24
81.29.146.0/24
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
73:dd:61:22:61:1f:80:bb:f1:17:2c:55:aa:29:a8:29:e6:1d:
22:53:16:c1:39:51:32:dd:3b:5d:d5:c5:2a:d6:11:fc:06:24:
93:e2:13:f5:ec:6d:aa:bf:91:d6:0a:c5:b5:29:06:a9:a0:7d:
07:df:03:12:a4:92:68:ad:fa:1e:5a:05:d1:5b:da:af:13:fe:
0d:cd:c8:b0:45:4d:26:56:cc:1a:e0:bf:e4:60:b1:3e:98:8a:
cb:a6:81:9a:07:41:db:f9:37:60:4d:38:09:e8:a9:98:2a:d5:
ba:c6:67:51:b9:6a:69:8a:9d:d3:f2:6c:3d:e6:fc:73:17:c8:
a4:02:0f:16:8d:13:04:97:c2:9d:1e:c3:30:b1:4a:04:35:a0:
d5:81:71:dc:7d:f4:79:15:d4:82:52:ad:83:e6:10:05:b7:d1:
83:ac:32:a1:fa:0f:a3:24:78:db:c7:7e:e1:5c:72:ea:02:67:
0c:90:e1:38:12:12:52:46:0a:e4:7f:45:40:10:fb:dd:0d:01:
31:e6:38:94:bb:7e:36:db:84:00:e5:01:8d:51:e5:31:39:01:
fd:b4:cc:48:bb:ac:aa:f4:82:cb:3c:9c:79:60:8a:50:e8:a5:
9c:74:fe:b2:38:2b:88:bd:b6:35:99:76:e7:09:cf:a0:29:af:
1d:51:9b:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaCA17z33mhbAL/9SKl6UF4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjYwOTA4MTE0NjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjZmNDAyZjU5ODBlYzI5OTMwZWVkYTQxOTk3Zjg5MTVkZDQzOTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20wB9dO03GoS1jVG/5bRCeZ1ZI/g
yiBgJMmJlzNCl6gH5dsssxvjWHETXQ9w+qlYNia28pEjh3EBGmicZJ0T1V+h/Dvk
kMoh8zcnrbvT2x/DDMc7BuncPud1myTnDgOsMz8eq888ibNYa7RUAGOxTTUjNbCQ
dxWM39ahJ+EO2gvQ2xz1+3X8g4y2fynOSWA0HjlmuApgs9Ap8IGVb5iqbeb+WyKg
3fRwXaqef2apvu7YwIqRbQiyI94sFGX0kRtqxx/a/fFDFAPHXBU3HNStbTWfwnEO
Ko3eNOKHfsEATmmj5QEVKyXbi0pVyI5ouTFPVxO7f4Z/EQv4wl9CIJpePQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG9vQC9ZgOwpkw7tpBmX+JFd1DlXMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvYjI5QUwxbUE3Q21URHUya0daZjRrVjNVT1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEfiAwQA
UR2SAwQAUR2bMA0GCSqGSIb3DQEBCwUAA4IBAQBz3WEiYR+Au/EXLFWqKagp5h0i
UxbBOVEy3Ttd1cUq1hH8BiST4hP17G2qv5HWCsW1KQapoH0H3wMSpJJorfoeWgXR
W9qvE/4NzciwRU0mVswa4L/kYLE+mIrLpoGaB0Hb+TdgTTgJ6KmYKtW6xmdRuWpp
ip3T8mw95vxzF8ikAg8WjRMEl8KdHsMwsUoENaDVgXHcffR5FdSCUq2D5hAFt9GD
rDKh+g+jJHjbx37hXHLqAmcMkOE4EhJSRgrkf0VAEPvdDQEx5jiUu34224QA5QGN
UeUxOQH9tMxIu6yq9ILLPJx5YIpQ6KWcdP6yOCuIvbY1mXbnCc+gKa8dUZvq
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:06:18 2026 by rpki-client