Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/n8Ar6yZ9Ovc8XyhHpKqyRmilyw0.roa
File: n8Ar6yZ9Ovc8XyhHpKqyRmilyw0.roa (raw, json)
Hash identifier: dainUddhHAc9H2ZAWT/7mC+Af9YFXMBJZgNeWSYw42A=
Subject key identifier: 9F:C0:2B:EB:26:7D:3A:F7:3C:5F:28:47:A4:AA:B2:46:68:A5:CB:0D
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019EFA6B46A83C2EEFBB624A5717F6DC78C6
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/n8Ar6yZ9Ovc8XyhHpKqyRmilyw0.roa
Signing time: Wed 24 Jun 2026 16:16:34 +0000
ROA not before: Wed 24 Jun 2026 16:16:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 80.71.224.0/24 maxlen: 24
81.29.144.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:6b:46:a8:3c:2e:ef:bb:62:4a:57:17:f6:dc:78:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 24 16:16:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc02beb267d3af73c5f2847a4aab24668a5cb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:c8:ca:44:33:95:56:91:a5:ad:4d:8c:1b:
21:4d:9d:b4:8b:cd:5f:ef:7d:0d:26:ea:16:b3:6b:
1b:39:08:8e:2d:5e:5c:f1:bf:d9:3a:78:7a:f0:78:
67:7f:c5:30:56:5a:d6:ef:c6:70:8f:58:ce:92:73:
25:5e:06:73:51:c7:d8:12:72:45:3d:27:35:a1:4f:
a5:21:f2:1f:ae:05:af:04:6f:9c:64:7e:8e:8b:84:
ee:39:bf:4d:e4:c6:b5:72:ec:90:99:b2:85:7d:50:
a5:00:e4:1e:dc:6f:94:de:ff:2c:1d:00:1d:b8:72:
e7:7c:ef:91:8f:d2:fb:67:17:03:1f:e1:b9:8a:23:
65:57:a6:fe:1e:7e:37:ee:fc:3c:11:ac:12:2b:1a:
2d:18:da:45:c5:4b:a6:f9:4f:81:f1:d3:e2:e0:61:
1a:5e:15:bc:a9:93:d6:5f:c5:97:ec:67:0c:ea:00:
88:15:ce:4e:c9:c4:2a:97:b9:6b:24:9c:ef:03:c8:
0d:2d:70:c1:e9:80:90:bd:74:06:a6:cb:88:c7:e4:
15:d8:14:2c:80:81:a7:f5:ec:c4:be:c5:8c:5c:f4:
c0:52:3a:d0:a8:65:30:78:97:1c:cf:0b:f9:fb:e5:
a1:0f:f6:3e:f7:5b:c7:96:63:1d:43:de:17:b9:66:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C0:2B:EB:26:7D:3A:F7:3C:5F:28:47:A4:AA:B2:46:68:A5:CB:0D
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/n8Ar6yZ9Ovc8XyhHpKqyRmilyw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
81.29.144.0/24
81.29.151.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fe:be:ce:a2:49:6f:c9:61:a9:66:8c:a0:5c:97:4f:6a:f2:
e9:50:06:b3:5a:74:53:be:60:79:48:1e:da:e3:58:ba:2c:bb:
c5:57:ea:d6:31:7c:c9:1e:64:b3:b7:db:7c:49:a3:5f:3f:ea:
8c:8e:89:99:b5:cc:6e:3f:81:be:98:e5:f3:ff:9e:62:a7:8a:
ca:44:bb:06:9f:03:c3:1b:de:05:12:54:1c:bc:75:6b:4a:b7:
13:85:db:f6:b9:09:bb:0d:86:ee:aa:f9:b9:1b:4d:37:8c:78:
cd:b7:d4:ec:00:6b:62:43:98:74:c6:7d:17:96:d4:0f:65:b9:
cf:7b:0a:c6:49:06:0e:b2:c2:81:28:3d:6f:ef:a2:26:ce:84:
7d:76:89:ab:b1:44:90:04:81:8a:b5:29:c3:64:65:8c:17:6c:
b4:35:2f:61:2c:34:0b:ee:5f:39:c2:77:6c:0c:ed:ca:a0:4a:
ae:22:e9:7a:ff:9b:6f:7a:e0:c6:04:3b:e8:f8:6d:2a:6a:cf:
b4:88:54:4d:a0:59:ea:9f:7d:28:45:7e:98:e7:10:6e:4c:47:
2b:12:1e:fb:c5:c5:88:84:af:ad:e6:0b:6d:0b:70:75:17:f9:
4a:da:2d:30:d4:ec:a6:5b:32:3b:7f:d1:cd:2d:5f:a8:bb:65:
2e:a9:5d:6a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ76a0aoPC7vu2JKVxf23HjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjYwNjI0MTYxNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmMwMmJlYjI2N2QzYWY3M2M1ZjI4NDdhNGFhYjI0NjY4YTVjYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxXIykQzlVaRpa1NjBshTZ20i81f
730NJuoWs2sbOQiOLV5c8b/ZOnh68Hhnf8UwVlrW78Zwj1jOknMlXgZzUcfYEnJF
PSc1oU+lIfIfrgWvBG+cZH6Oi4TuOb9N5Ma1cuyQmbKFfVClAOQe3G+U3v8sHQAd
uHLnfO+Rj9L7ZxcDH+G5iiNlV6b+Hn437vw8EawSKxotGNpFxUum+U+B8dPi4GEa
XhW8qZPWX8WX7GcM6gCIFc5OycQql7lrJJzvA8gNLXDB6YCQvXQGpsuIx+QV2BQs
gIGn9ezEvsWMXPTAUjrQqGUweJcczwv5++WhD/Y+91vHlmMdQ94XuWaiuwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ/AK+smfTr3PF8oR6SqskZopcsNMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvbjhBcjZ5WjlPdmM4WHloSHBLcXlSbWlseXcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEfgAwQA
UR2QAwQAUR2XAwQAUR2dMA0GCSqGSIb3DQEBCwUAA4IBAQBR/r7OoklvyWGpZoyg
XJdPavLpUAazWnRTvmB5SB7a41i6LLvFV+rWMXzJHmSzt9t8SaNfP+qMjomZtcxu
P4G+mOXz/55ip4rKRLsGnwPDG94FElQcvHVrSrcThdv2uQm7DYbuqvm5G003jHjN
t9TsAGtiQ5h0xn0XltQPZbnPewrGSQYOssKBKD1v76ImzoR9domrsUSQBIGKtSnD
ZGWMF2y0NS9hLDQL7l85wndsDO3KoEquIul6/5tveuDGBDvo+G0qas+0iFRNoFnq
n30oRX6Y5xBuTEcrEh77xcWIhK+t5gttC3B1F/lK2i0w1OymWzI7f9HNLV+ou2Uu
qV1q
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:01 2026 by rpki-client