Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/FQXBjAd3Dnc1J9QyFOiM0wLQijQ.roa
File: FQXBjAd3Dnc1J9QyFOiM0wLQijQ.roa (raw, json)
Hash identifier: 64JwonKPGO05f6cKy1kGP317euMNwxh4v/Kd97Zrixk=
Subject key identifier: 15:05:C1:8C:07:77:0E:77:35:27:D4:32:14:E8:8C:D3:02:D0:8A:34
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 019CD8B782CEFDB4CADE287D09828CF6DB5D
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/FQXBjAd3Dnc1J9QyFOiM0wLQijQ.roa
Signing time: Tue 10 Mar 2026 17:07:11 +0000
ROA not before: Tue 10 Mar 2026 17:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47930
IP address blocks: 217.11.165.0/24 maxlen: 24
2a01:f900:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 15:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:b7:82:ce:fd:b4:ca:de:28:7d:09:82:8c:f6:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Mar 10 17:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1505c18c07770e773527d43214e88cd302d08a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:73:4c:29:c2:1a:19:3b:7f:9c:06:6a:d4:
0a:fe:ee:f9:f9:ba:18:50:82:1b:31:71:ff:1d:e0:
dd:55:6a:b3:ea:9b:e7:94:3f:3c:9f:56:e9:71:b6:
31:3a:c8:61:2a:43:37:bf:4f:cd:af:58:5b:d2:62:
93:fe:a9:11:c9:c0:d2:0e:66:9e:0e:3a:73:44:49:
25:23:54:15:2e:be:03:74:55:30:f8:5c:57:06:18:
c7:88:da:8a:98:65:78:95:48:46:64:5e:df:01:a1:
ee:81:e3:96:19:09:e1:03:98:a1:1f:c3:9f:a4:9b:
85:4a:fa:92:96:b5:09:59:a1:c7:db:a0:e4:c0:6b:
48:bb:28:ad:13:5d:58:1a:bd:4b:7a:50:7c:df:69:
0a:cc:7d:6a:3d:8e:1f:17:92:5a:42:f5:80:52:f3:
80:12:61:b1:e0:7e:63:cb:83:a6:6e:07:cc:a8:1b:
d2:a3:9a:71:1e:69:d6:06:52:b3:b1:83:ff:06:e8:
ca:6f:9a:06:9b:b3:26:52:5d:d0:7c:1d:d0:95:61:
83:14:e9:72:74:e9:99:a6:b0:f2:9d:68:77:61:4a:
2f:b8:cd:75:a5:a4:88:5e:e1:50:dc:66:0c:9a:56:
e9:09:73:6c:e8:f4:54:e8:cf:42:91:33:db:d8:86:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:C1:8C:07:77:0E:77:35:27:D4:32:14:E8:8C:D3:02:D0:8A:34
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/FQXBjAd3Dnc1J9QyFOiM0wLQijQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.11.165.0/24
IPv6:
2a01:f900:202::/48
Signature Algorithm: sha256WithRSAEncryption
b1:84:fe:a1:1e:a2:5a:d6:65:70:9b:8e:d1:77:18:38:7b:1a:
9e:24:03:6e:3b:fa:ba:ed:81:b6:70:02:19:3c:c0:5d:64:7b:
c0:ea:b3:a0:a1:24:ba:36:21:12:98:5e:ce:37:80:39:f7:04:
da:aa:bf:6e:40:d7:08:de:b5:e7:7e:58:10:59:e9:88:cd:65:
57:26:0c:4a:86:06:88:41:25:9e:ea:7d:c7:0e:50:b7:a8:0d:
86:ad:12:dd:93:f2:1c:92:a0:b1:58:de:c8:39:ac:50:6b:07:
9c:78:e4:44:f7:6f:d3:d2:c0:4e:7f:8d:78:7f:a1:48:be:bc:
3a:1c:ce:be:04:f8:59:07:a9:7f:eb:1b:6e:d4:fd:6f:7b:ae:
99:5c:74:44:ed:f1:69:d0:f4:55:e5:a3:7e:c2:40:da:0a:3d:
93:6f:e8:f2:4b:bc:68:55:1e:7f:80:89:fa:24:ae:77:cf:78:
eb:df:ac:e9:f0:58:83:6e:18:56:ce:2f:88:a0:92:a8:26:c7:
89:69:48:05:61:4d:70:bc:e9:2a:71:bd:bd:41:09:bc:8c:bb:
dd:40:38:c7:da:b1:e2:72:09:6b:de:71:8a:2f:1d:d3:64:c7:
e7:cf:19:ea:fd:c8:b9:e7:92:bc:6a:f1:19:90:6c:45:95:e5:
b5:45:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:33:06 2026 by rpki-client