Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/usdtxp56d-H9jkwksTZGQH0gfR4.roa
File: usdtxp56d-H9jkwksTZGQH0gfR4.roa (raw, json)
Hash identifier: 6i2VJQPUU7UbH7idZGq7+7s2CxmCIeaq/Aw5vstNan8=
Subject key identifier: BA:C7:6D:C6:9E:7A:77:E1:FD:8E:4C:24:B1:36:46:40:7D:20:7D:1E
Certificate issuer: /CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Certificate serial: 01A06D4B34DB53861AFAFC9D8A51CEBD070A
Authority key identifier: FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/usdtxp56d-H9jkwksTZGQH0gfR4.roa
Signing time: Fri 04 Sep 2026 16:40:40 +0000
ROA not before: Fri 04 Sep 2026 16:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 80.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:4b:34:db:53:86:1a:fa:fc:9d:8a:51:ce:bd:07:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8c97d1177428f61deaab91ca7cfbb552629ec0
Validity
Not Before: Sep 4 16:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bac76dc69e7a77e1fd8e4c24b13646407d207d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:41:fc:d3:a4:f8:91:a0:cd:65:1d:bf:f2:
53:a2:93:2c:b0:9f:77:a2:1d:6f:55:4e:1b:b7:83:
15:26:e2:ea:6d:ee:7a:6e:ef:5d:1a:2b:3a:66:53:
56:df:f2:70:09:14:8b:a8:f2:4c:22:0d:06:94:01:
9f:b3:46:58:f0:cf:7b:46:53:74:84:8b:73:fc:2f:
c4:57:50:20:72:0f:b9:2e:e6:a7:80:99:d9:06:c7:
41:09:38:db:59:d6:f2:d8:e4:60:e4:49:ca:29:17:
71:7d:b5:38:eb:41:f3:c7:7e:e9:63:79:1f:b4:71:
8e:8c:bc:48:9d:f5:36:d8:b5:84:f7:88:bb:ac:5b:
a0:9d:30:75:73:83:63:8d:97:f7:05:ea:14:f7:68:
ad:5c:c7:e2:54:d1:40:07:f1:3c:d1:21:0a:0c:88:
d8:b6:5a:3b:4e:01:f2:6a:1e:c5:3a:d8:8b:75:0f:
e3:2b:26:11:93:c6:6d:37:88:c0:2b:64:80:62:8e:
e5:33:dd:3e:19:41:30:cc:72:94:62:2c:55:2a:bc:
f7:36:f5:8b:4d:9a:03:39:67:ca:98:4d:bb:ad:6c:
9b:f1:12:5b:60:5f:dd:51:00:2a:d1:0c:7a:98:b4:
88:8a:42:56:d9:08:3c:f6:f3:0a:cf:f0:fa:04:cf:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C7:6D:C6:9E:7A:77:E1:FD:8E:4C:24:B1:36:46:40:7D:20:7D:1E
X509v3 Authority Key Identifier:
keyid:FC:8C:97:D1:17:74:28:F6:1D:EA:AB:91:CA:7C:FB:B5:52:62:9E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IyX0Rd0KPYd6quRynz7tVJinsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/usdtxp56d-H9jkwksTZGQH0gfR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d542f4-7c8a-48d9-9a1e-686003b7889d/1/_IyX0Rd0KPYd6quRynz7tVJinsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a6:76:e7:e1:83:03:42:14:42:fa:34:e3:80:b7:8c:d1:0a:
01:f4:cb:a4:7d:cf:bb:8f:1e:4b:60:7c:6e:97:39:69:2a:e6:
84:0a:63:2d:1e:7f:c4:17:17:57:86:60:fc:10:62:84:f0:4e:
02:39:19:2c:0c:70:45:d1:f4:6c:c9:72:4f:2d:91:b4:9b:6c:
f9:a9:3d:72:20:00:a5:ff:9e:8b:bb:a7:5f:31:2d:61:98:2d:
c8:41:25:9c:17:04:56:67:84:fc:5e:d2:35:6a:9a:91:b5:49:
c1:dc:ec:33:9a:83:f3:c9:41:c2:6a:0c:23:ef:a4:fb:27:8f:
80:9c:41:5b:87:5b:49:db:d3:6c:e6:c9:16:17:29:be:1e:ae:
5b:22:82:0e:52:d2:c9:6a:80:91:00:29:c9:aa:84:d2:8b:74:
26:d5:31:8b:cf:5e:e6:d7:9a:ba:04:d6:ab:d9:1d:ae:4c:d1:
f6:32:e1:57:64:eb:fd:68:19:1f:78:98:7c:2b:24:fb:7d:38:
34:e5:8a:63:de:46:84:fd:c9:86:a1:cc:03:b8:1e:93:36:f7:
8c:6f:1d:fa:2d:e2:10:6c:87:7a:04:c2:a0:e2:86:7d:d7:0e:
69:29:27:70:71:32:91:0d:e4:52:91:4e:ff:9c:6d:f9:22:f9:
e6:5f:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:35 2026 by rpki-client