Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/UXz0jpkUeBEw9xnHd9lIRQcm0Eg.roa
File: UXz0jpkUeBEw9xnHd9lIRQcm0Eg.roa (raw, json)
Hash identifier: fY8g4jQlyWJZWP6eg5ROj3tw/niaiE2PaDyYHZ89Ksg=
Subject key identifier: 51:7C:F4:8E:99:14:78:11:30:F7:19:C7:77:D9:48:45:07:26:D0:48
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019C955821D9035F36B65AB4A9A84DCA9DB3
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/UXz0jpkUeBEw9xnHd9lIRQcm0Eg.roa
Signing time: Wed 25 Feb 2026 15:08:26 +0000
ROA not before: Wed 25 Feb 2026 15:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20915
IP address blocks: 87.254.25.0/24 maxlen: 24
217.25.0.0/20 maxlen: 24
217.25.9.0/24 maxlen: 24
2a00:eac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:58:21:d9:03:5f:36:b6:5a:b4:a9:a8:4d:ca:9d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Feb 25 15:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=517cf48e9914781130f719c777d948450726d048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:c2:18:04:20:b3:92:ef:d3:18:e9:b6:90:
74:9e:d6:0d:8a:c7:b5:6c:4f:2f:37:2d:0b:b5:ae:
c9:5d:e1:4a:fd:14:45:70:e6:89:8b:f8:dd:e4:1d:
55:1e:3e:71:aa:2e:ca:25:f7:d6:40:76:29:42:a0:
da:cc:07:9e:4a:9d:32:3c:40:69:ff:2c:4c:ba:4a:
2e:4a:b0:e5:90:f9:ca:cc:f6:23:15:03:a5:ef:fd:
fa:49:d8:9b:a6:97:9c:cb:42:96:50:7d:ee:d6:a5:
7e:7e:bd:17:5e:2e:dc:2d:fa:b0:1e:47:9c:e7:77:
3c:f1:7a:6d:8d:39:d5:a6:93:0c:8e:39:4f:20:cc:
2a:c0:f9:07:4b:da:16:45:e9:0b:dd:56:63:95:e7:
fc:82:75:61:b5:75:be:34:7d:dd:02:d9:07:44:e9:
ca:93:31:00:b5:a4:08:79:45:4b:7d:78:b5:d4:a4:
80:f2:ea:71:f8:1b:ed:60:2a:d3:e6:b9:31:7f:d6:
ee:55:91:27:08:20:bd:e4:47:90:8d:fa:64:57:6b:
da:16:19:c0:ea:a7:a9:d1:52:9c:68:53:b6:1a:3f:
f1:9d:49:e6:8e:e6:43:23:88:ab:ad:c8:ad:ce:66:
5f:48:4d:d8:2a:b6:b7:ea:61:95:c1:cd:de:bb:e0:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7C:F4:8E:99:14:78:11:30:F7:19:C7:77:D9:48:45:07:26:D0:48
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/UXz0jpkUeBEw9xnHd9lIRQcm0Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.25.0/24
217.25.0.0/20
IPv6:
2a00:eac0::/32
Signature Algorithm: sha256WithRSAEncryption
57:e3:0b:39:dd:7f:e7:69:59:4b:b3:22:fe:64:46:ef:16:64:
75:b0:87:fa:90:f0:c4:a3:83:9e:23:95:3e:c0:f2:39:70:13:
ca:12:4b:e7:fd:d0:84:34:d3:fd:60:f4:19:99:3b:c9:6c:c8:
b3:7a:18:83:87:6f:2c:c1:52:70:f4:61:4f:87:9a:23:0f:47:
fb:76:e9:b6:28:06:b5:6a:a8:90:b1:c5:77:0e:5a:26:27:ec:
ae:50:c8:6f:df:d7:28:05:bb:40:1d:15:a2:c7:50:bd:9c:72:
58:64:f6:eb:fd:2c:9e:8e:78:96:73:63:60:dd:ed:0d:94:86:
de:0e:55:98:33:46:61:22:e8:84:87:0b:fd:85:3a:43:a2:21:
9e:55:2d:f7:40:00:4f:29:8b:a7:2e:7c:1f:4b:a1:be:c9:4d:
e8:9c:94:58:f3:1c:73:7b:3c:3d:cb:e4:88:b1:15:6a:cd:a9:
6d:e8:ab:24:76:f2:7d:4b:ce:2e:e5:b8:c4:54:e5:4a:09:3f:
ac:15:4a:cf:e3:0f:91:a6:6d:6e:9f:e3:e0:f7:87:0f:85:f4:
75:b9:b9:c9:ff:91:45:36:b3:81:78:d4:3c:43:87:a8:51:fd:
f1:f2:8b:a0:e2:27:db:ed:b4:dd:34:ea:aa:21:0e:e4:5d:8d:
0d:43:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:34 2026 by rpki-client