Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FXDKC8Do3ys9a_PLDkwMAMSbdss.roa
File: FXDKC8Do3ys9a_PLDkwMAMSbdss.roa (raw, json)
Hash identifier: Tsj9tSd3OXnBkPhUtt3WSSbs/WwChLdS91woji7ePYc=
Subject key identifier: 15:70:CA:0B:C0:E8:DF:2B:3D:6B:F3:CB:0E:4C:0C:00:C4:9B:76:CB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019D0B2FBA36D146A6E479AD9DDF905E329F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FXDKC8Do3ys9a_PLDkwMAMSbdss.roa
Signing time: Fri 20 Mar 2026 12:19:30 +0000
ROA not before: Fri 20 Mar 2026 12:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39351
IP address blocks: 192.71.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:2f:ba:36:d1:46:a6:e4:79:ad:9d:df:90:5e:32:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 20 12:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1570ca0bc0e8df2b3d6bf3cb0e4c0c00c49b76cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:3a:cf:f6:e6:52:25:c7:94:7c:76:6a:1a:
10:ad:3f:6a:bd:e6:3b:b8:6e:0c:58:86:f0:7b:5a:
30:37:ac:72:76:0c:0e:8f:8a:f4:20:69:03:40:20:
26:df:d0:41:f6:e3:a9:49:e0:a1:a8:fb:29:1d:4a:
c6:9b:bf:2d:68:7b:68:51:a7:3c:64:64:ab:4e:0b:
c1:0c:53:45:d9:a4:9c:bd:37:14:85:ce:e7:0d:0b:
98:35:e4:07:ee:5a:27:5c:c8:35:c8:84:cb:51:fd:
6e:4c:ad:0c:99:91:f4:1e:2d:e1:d8:5c:1e:07:a2:
13:45:89:be:78:28:10:6d:25:f9:eb:c1:ab:d4:c4:
d0:18:9c:79:e9:c9:44:b5:62:e9:4c:e3:55:0f:7d:
5f:36:8b:65:2f:76:17:6e:b7:dc:a0:cf:94:1f:d7:
f2:38:a9:f4:ca:b0:04:f2:bd:08:a8:46:50:6b:36:
d1:48:cd:39:b5:d4:16:96:9a:97:7e:b1:34:c6:34:
3d:71:15:50:4c:f1:4f:e4:98:9e:03:08:16:67:3f:
ac:22:a6:56:11:ad:15:90:68:45:f9:8b:f5:70:79:
0c:da:7a:02:ae:b7:7a:98:45:8c:ca:3b:39:37:70:
78:44:9c:28:3b:08:2d:04:a3:f0:d2:c0:59:8e:4f:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:CA:0B:C0:E8:DF:2B:3D:6B:F3:CB:0E:4C:0C:00:C4:9B:76:CB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FXDKC8Do3ys9a_PLDkwMAMSbdss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.171.0/24
Signature Algorithm: sha256WithRSAEncryption
51:81:23:a4:da:c4:2b:dd:d8:44:32:37:08:67:63:ba:73:8b:
7f:c7:97:05:8f:69:24:36:55:ec:54:55:f8:47:22:35:df:a0:
92:f3:87:02:e8:e7:20:1f:72:6f:99:1c:ac:3a:0f:4e:87:b0:
72:04:15:d0:ec:98:de:27:02:a7:84:9f:6a:ad:6e:d4:1c:87:
16:d0:62:13:df:64:d2:09:ce:63:95:45:ed:7a:b7:d3:20:ac:
6d:c3:a7:c0:d5:cc:d7:82:68:50:79:18:a3:83:4b:07:74:25:
1c:c9:0f:c1:53:62:e2:ed:eb:8c:6e:bd:5b:bf:9b:c4:cc:01:
34:84:a7:b1:cc:d0:75:07:ae:cc:2e:bc:0f:5d:fb:83:10:6d:
09:9e:79:a1:ac:99:9b:aa:70:1b:33:a5:b1:42:e3:78:77:bd:
f7:bf:58:15:93:15:98:1d:15:e7:fb:c6:e2:14:bb:30:95:8a:
57:db:0e:4a:7d:88:25:ea:54:55:26:68:a4:68:57:6e:21:1e:
4e:35:0a:39:84:19:42:c8:b5:c4:72:3c:19:4b:67:86:73:45:
e6:af:a8:35:d9:cb:a7:e4:47:a4:6d:67:6b:4c:f4:e5:c0:9c:
5c:bd:0f:5a:b2:4c:0e:96:16:3d:97:14:24:e1:7e:88:ac:66:
a2:24:19:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0LL7o20Uam5Hmtnd+QXjKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjYwMzIwMTIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTcwY2EwYmMwZThkZjJiM2Q2YmYzY2IwZTRjMGMwMGM0OWI3NmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg06z/bmUiXHlHx2ahoQrT9qveY7
uG4MWIbwe1owN6xydgwOj4r0IGkDQCAm39BB9uOpSeChqPspHUrGm78taHtoUac8
ZGSrTgvBDFNF2aScvTcUhc7nDQuYNeQH7lonXMg1yITLUf1uTK0MmZH0Hi3h2Fwe
B6ITRYm+eCgQbSX568Gr1MTQGJx56clEtWLpTONVD31fNotlL3YXbrfcoM+UH9fy
OKn0yrAE8r0IqEZQazbRSM05tdQWlpqXfrE0xjQ9cRVQTPFP5JieAwgWZz+sIqZW
Ea0VkGhF+Yv1cHkM2noCrrd6mEWMyjs5N3B4RJwoOwgtBKPw0sBZjk9fwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVwygvA6N8rPWvzyw5MDADEm3bLMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvRlhES0M4RG8zeXM5YV9QTERrd01BTVNiZHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEerMA0G
CSqGSIb3DQEBCwUAA4IBAQBRgSOk2sQr3dhEMjcIZ2O6c4t/x5cFj2kkNlXsVFX4
RyI136CS84cC6OcgH3JvmRysOg9Oh7ByBBXQ7JjeJwKnhJ9qrW7UHIcW0GIT32TS
Cc5jlUXterfTIKxtw6fA1czXgmhQeRijg0sHdCUcyQ/BU2Li7euMbr1bv5vEzAE0
hKexzNB1B67MLrwPXfuDEG0JnnmhrJmbqnAbM6WxQuN4d733v1gVkxWYHRXn+8bi
FLswlYpX2w5KfYgl6lRVJmikaFduIR5ONQo5hBlCyLXEcjwZS2eGc0Xmr6g12cun
5EekbWdrTPTlwJxcvQ9askwOlhY9lxQk4X6IrGaiJBmO
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:29:49 2026 by rpki-client