Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FD2L6J-3SB7F_2EwJLtcULBxbUw.roa
File: FD2L6J-3SB7F_2EwJLtcULBxbUw.roa (raw, json)
Hash identifier: NTjusMri46vuUW76KmS8x+MgzSVphVEoyudgEtl75FM=
Subject key identifier: 14:3D:8B:E8:9F:B7:48:1E:C5:FF:61:30:24:BB:5C:50:B0:71:6D:4C
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694377793C6AAFEE64870EA133BBF4
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FD2L6J-3SB7F_2EwJLtcULBxbUw.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21743
IP address blocks: 91.234.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:43:77:79:3c:6a:af:ee:64:87:0e:a1:33:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=143d8be89fb7481ec5ff613024bb5c50b0716d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d3:08:16:59:01:2a:f4:5a:55:05:dd:dc:64:
d5:d1:ee:bd:9d:3d:a3:0f:2a:f6:e4:dd:09:53:65:
aa:2c:d0:6e:d7:ea:f7:60:a7:3e:e6:90:ab:91:2a:
9e:62:42:ec:be:7c:9f:97:81:14:64:45:39:37:6c:
fb:56:c0:f1:c0:df:cc:45:71:2f:2c:28:56:ec:0b:
e3:72:1a:a8:ff:8b:73:76:67:11:e6:9a:bf:69:26:
32:9d:51:6e:f7:4f:28:66:65:1e:cc:5e:7f:3a:91:
78:82:1d:7d:05:c9:a4:71:f7:b6:a6:10:dd:3f:b1:
9f:33:33:c2:48:7f:a5:5f:18:4a:04:25:4b:91:79:
1a:a7:37:68:ba:e0:a5:e7:41:9f:99:4a:46:d1:7c:
31:28:dc:31:8b:e4:ae:39:e5:70:21:de:b0:b7:c8:
58:93:a1:be:d9:df:c2:b4:4b:b2:63:d1:7e:88:be:
02:40:42:d9:61:4f:1c:c0:84:bd:d9:c0:5a:26:3d:
07:df:49:b6:e0:d8:5c:91:42:60:63:3c:de:8d:19:
9b:79:13:62:34:72:43:40:ff:67:e5:e9:b9:3f:f6:
ed:f6:e3:84:28:05:fa:8a:a5:8c:ea:34:d6:f9:db:
9c:0f:d8:48:0d:59:f5:2d:b8:3f:a6:5c:fa:25:d8:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:8B:E8:9F:B7:48:1E:C5:FF:61:30:24:BB:5C:50:B0:71:6D:4C
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FD2L6J-3SB7F_2EwJLtcULBxbUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.156.0/22
Signature Algorithm: sha256WithRSAEncryption
33:51:f5:36:3a:a5:b2:26:de:2b:d0:26:a6:98:37:a0:10:88:
f0:ae:88:4b:d2:3e:7f:cc:e4:57:c3:06:4d:3b:73:a2:a6:24:
2f:e5:0c:f0:89:ca:29:a3:21:de:8b:78:ce:51:81:1f:1c:b6:
34:ba:fb:18:fe:b3:dd:93:00:cc:0d:ca:e0:9b:70:87:26:86:
02:b8:e3:15:23:88:70:23:41:1d:22:da:d8:9e:d9:76:86:54:
e4:30:f8:41:1b:cf:35:7a:96:ad:f2:ed:55:1d:df:68:8b:d2:
6c:66:96:b8:90:c8:66:1f:9b:99:ed:57:23:94:11:c3:0f:f9:
a7:82:25:33:84:55:64:5b:43:50:fc:a1:1c:8f:13:c8:4e:38:
71:07:f1:37:ca:01:d2:65:31:f6:b8:7f:b6:53:ad:35:06:5e:
f2:5c:4e:25:0d:0c:3e:96:c8:5a:46:02:3d:c4:0d:2a:58:d0:
a5:7c:9e:08:3b:cf:c9:2a:39:62:8f:18:ae:7b:2d:a4:a6:05:
8d:95:b2:d7:70:f1:ed:16:02:57:39:aa:5a:27:a9:c6:c8:99:
01:57:05:28:8b:5d:fd:bf:1b:2f:84:76:8d:03:a4:b3:07:91:
82:b9:a3:75:ae:d1:93:f7:38:04:be:25:ab:e3:9c:1b:5a:23:
43:53:8d:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaUN3eTxqr+5khw6hM7v0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDc4ZDIyNjk4Y2RkMWU2YTIzZDcwYzE3ZmZmZTMyMWRl
ZjNiMzAwHhcNMjYwNzAyMTUxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDNkOGJlODlmYjc0ODFlYzVmZjYxMzAyNGJiNWM1MGIwNzE2ZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79MIFlkBKvRaVQXd3GTV0e69nT2j
Dyr25N0JU2WqLNBu1+r3YKc+5pCrkSqeYkLsvnyfl4EUZEU5N2z7VsDxwN/MRXEv
LChW7Avjchqo/4tzdmcR5pq/aSYynVFu908oZmUezF5/OpF4gh19Bcmkcfe2phDd
P7GfMzPCSH+lXxhKBCVLkXkapzdouuCl50GfmUpG0XwxKNwxi+SuOeVwId6wt8hY
k6G+2d/CtEuyY9F+iL4CQELZYU8cwIS92cBaJj0H30m24NhckUJgYzzejRmbeRNi
NHJDQP9n5em5P/bt9uOEKAX6iqWM6jTW+ducD9hIDVn1Lbg/plz6JdgoBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQ9i+ift0gexf9hMCS7XFCwcW1MMB8GA1UdIwQY
MBaAFCkHjSJpjN0eaiPXDBf//jId7zswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvRkQyTDZKLTNTQjdGXzJFd0pMdGNVTEJ4YlV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+qcMA0G
CSqGSIb3DQEBCwUAA4IBAQAzUfU2OqWyJt4r0CammDegEIjwrohL0j5/zORXwwZN
O3OipiQv5QzwicopoyHei3jOUYEfHLY0uvsY/rPdkwDMDcrgm3CHJoYCuOMVI4hw
I0EdItrYntl2hlTkMPhBG881epat8u1VHd9oi9JsZpa4kMhmH5uZ7VcjlBHDD/mn
giUzhFVkW0NQ/KEcjxPITjhxB/E3ygHSZTH2uH+2U601Bl7yXE4lDQw+lshaRgI9
xA0qWNClfJ4IO8/JKjlijxiuey2kpgWNlbLXcPHtFgJXOapaJ6nGyJkBVwUoi139
vxsvhHaNA6SzB5GCuaN1rtGT9zgEviWr45wbWiNDU42/
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:25 2026 by rpki-client