Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/plt-_53lVGCkQ-3UwAZSQByqUi8.roa
File: plt-_53lVGCkQ-3UwAZSQByqUi8.roa (raw, json)
Hash identifier: KAUdOBZtsLdfMv1ynaxmnkViV7Ne9vPeA9nSQsahgPU=
Subject key identifier: A6:5B:7E:FF:9D:E5:54:60:A4:43:ED:D4:C0:06:52:40:1C:AA:52:2F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019C896F6E0FD5EFB7EED1972D525EC79763
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/plt-_53lVGCkQ-3UwAZSQByqUi8.roa
Signing time: Mon 23 Feb 2026 07:38:27 +0000
ROA not before: Mon 23 Feb 2026 07:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60672
IP address blocks: 185.223.164.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:6f:6e:0f:d5:ef:b7:ee:d1:97:2d:52:5e:c7:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 23 07:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a65b7eff9de55460a443edd4c00652401caa522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:b6:4e:a5:dc:28:eb:20:68:82:db:d1:7d:
f1:27:eb:30:e0:e1:46:97:31:ac:af:6c:f9:3c:d6:
33:a6:d2:f7:43:f8:ba:43:c3:20:3b:91:95:5d:2e:
02:7e:2f:09:16:03:ed:c6:73:d5:a7:53:f5:92:49:
42:d7:29:83:a8:83:78:e7:57:e0:e0:fd:1e:63:15:
ce:47:90:11:50:69:fe:1b:db:e8:ed:5f:f3:6e:e4:
ae:df:95:26:24:74:4c:15:c0:62:30:01:09:bd:44:
cd:4a:d0:35:2d:84:f4:40:d3:05:8a:ff:7f:c2:0e:
33:a1:97:ef:dc:89:7d:4e:e5:ab:e1:a0:e9:5c:a1:
90:36:88:1c:05:ea:91:b1:d7:25:18:31:9c:b5:59:
81:c0:d4:ac:98:33:dd:0f:e8:61:a7:17:0e:b9:97:
6d:3b:1e:6b:44:f4:f0:b8:1f:88:2e:b7:16:84:73:
93:b3:71:7e:c6:94:55:01:1f:97:6b:f4:5f:de:bf:
6e:80:9e:ee:0d:84:4d:96:c9:ab:8f:fc:de:6c:eb:
8b:23:ea:29:93:45:f9:6b:08:8f:28:de:0a:60:b2:
38:77:f7:f1:93:e0:01:18:05:35:21:de:bb:b1:6f:
5d:5c:ed:de:6c:51:90:23:4d:8a:9a:af:ce:b5:96:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:7E:FF:9D:E5:54:60:A4:43:ED:D4:C0:06:52:40:1C:AA:52:2F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/plt-_53lVGCkQ-3UwAZSQByqUi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:09:80:eb:62:ca:7e:6e:73:33:ff:6b:a9:2b:41:5f:fb:9d:
98:cc:35:ee:9c:24:59:25:98:dd:55:14:78:6f:b2:b2:6a:5d:
90:74:e6:9d:95:c1:ed:9b:93:d1:12:2c:d8:ec:14:f3:be:d8:
de:47:a2:87:be:34:a0:dd:10:6c:8b:e6:ce:39:c3:43:05:38:
09:1e:8f:3b:fc:89:34:49:92:6e:14:45:7b:1f:9b:9c:2f:b6:
6b:9c:25:fb:f1:99:8d:ec:5f:6e:f1:3b:44:d0:9c:77:ae:2b:
be:f5:52:c0:01:49:d3:eb:10:8b:54:92:b4:8d:02:28:4b:5b:
59:42:81:fe:da:db:1f:0f:6d:db:9d:2b:94:bd:de:2f:0d:76:
39:34:87:cd:a6:f9:4b:e4:38:ba:8f:32:90:db:72:9f:81:8a:
ab:75:1c:16:5d:30:7d:1d:1f:d3:f8:49:19:82:6a:4c:46:c5:
40:28:86:18:13:6b:3c:e4:78:fc:cb:2f:35:c3:3b:c7:7c:d2:
e6:94:88:3e:5e:98:f7:37:a2:dd:e2:cc:b5:20:42:d4:1b:67:
72:b5:e6:1f:26:1b:27:ac:a6:2e:98:5a:6b:c2:1b:c8:de:81:
c4:66:9c:f1:69:a4:8b:eb:20:71:25:41:1b:24:c6:a6:3b:36:
9a:6d:8e:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyJb24P1e+37tGXLVJex5djMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjYwMjIzMDczODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjViN2VmZjlkZTU1NDYwYTQ0M2VkZDRjMDA2NTI0MDFjYWE1MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoi2TqXcKOsgaILb0X3xJ+sw4OFG
lzGsr2z5PNYzptL3Q/i6Q8MgO5GVXS4Cfi8JFgPtxnPVp1P1kklC1ymDqIN451fg
4P0eYxXOR5ARUGn+G9vo7V/zbuSu35UmJHRMFcBiMAEJvUTNStA1LYT0QNMFiv9/
wg4zoZfv3Il9TuWr4aDpXKGQNogcBeqRsdclGDGctVmBwNSsmDPdD+hhpxcOuZdt
Ox5rRPTwuB+ILrcWhHOTs3F+xpRVAR+Xa/Rf3r9ugJ7uDYRNlsmrj/zebOuLI+op
k0X5awiPKN4KYLI4d/fxk+ABGAU1Id67sW9dXO3ebFGQI02Kmq/OtZaUkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZbfv+d5VRgpEPt1MAGUkAcqlIvMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvcGx0LV81M2xWR0NrUS0zVXdBWlNRQnlxVWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud+kMA0G
CSqGSIb3DQEBCwUAA4IBAQCNCYDrYsp+bnMz/2upK0Ff+52YzDXunCRZJZjdVRR4
b7Kyal2QdOadlcHtm5PREizY7BTzvtjeR6KHvjSg3RBsi+bOOcNDBTgJHo87/Ik0
SZJuFEV7H5ucL7ZrnCX78ZmN7F9u8TtE0Jx3riu+9VLAAUnT6xCLVJK0jQIoS1tZ
QoH+2tsfD23bnSuUvd4vDXY5NIfNpvlL5Di6jzKQ23KfgYqrdRwWXTB9HR/T+EkZ
gmpMRsVAKIYYE2s85Hj8yy81wzvHfNLmlIg+Xpj3N6Ld4sy1IELUG2dyteYfJhsn
rKYumFprwhvI3oHEZpzxaaSL6yBxJUEbJMamOzaabY6f
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:57 2026 by rpki-client