Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0OxUbGV5b-GQnm6HRcvMRSavcx4.roa
File: 0OxUbGV5b-GQnm6HRcvMRSavcx4.roa (raw, json)
Hash identifier: U6p3B0yncs/9aFd891XRc8vBHfkO1uRpQC3cZLkNOm8=
Subject key identifier: D0:EC:54:6C:65:79:6F:E1:90:9E:6E:87:45:CB:CC:45:26:AF:73:1E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01A067C68E82047C100CB96C7C654E172D3E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0OxUbGV5b-GQnm6HRcvMRSavcx4.roa
Signing time: Thu 03 Sep 2026 14:57:40 +0000
ROA not before: Thu 03 Sep 2026 14:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7342
IP address blocks: 81.19.192.0/24 maxlen: 24
81.19.193.0/24 maxlen: 24
81.19.196.0/24 maxlen: 24
81.19.197.0/24 maxlen: 24
81.19.198.0/24 maxlen: 24
81.19.199.0/24 maxlen: 24
81.19.200.0/24 maxlen: 24
81.19.201.0/24 maxlen: 24
81.19.202.0/24 maxlen: 24
81.19.203.0/24 maxlen: 24
81.19.204.0/24 maxlen: 24
81.19.205.0/24 maxlen: 24
81.19.206.0/24 maxlen: 24
81.19.207.0/24 maxlen: 24
185.100.1.0/24 maxlen: 24
185.100.2.0/24 maxlen: 24
185.100.3.0/24 maxlen: 24
193.109.220.0/24 maxlen: 24
194.110.75.0/24 maxlen: 24
217.30.80.0/24 maxlen: 24
217.30.80.7/32 maxlen: 32
217.30.81.0/24 maxlen: 24
217.30.82.0/24 maxlen: 24
217.30.83.0/24 maxlen: 24
217.30.84.0/24 maxlen: 24
217.30.85.0/24 maxlen: 24
217.30.86.0/24 maxlen: 24
217.30.87.0/24 maxlen: 24
217.30.89.0/24 maxlen: 24
217.30.90.0/24 maxlen: 24
217.30.91.0/24 maxlen: 24
217.30.92.0/24 maxlen: 24
217.30.93.0/24 maxlen: 24
217.30.94.0/24 maxlen: 24
217.30.95.0/24 maxlen: 24
2a10:eec0::/48 maxlen: 48
2a10:eec0:1::/48 maxlen: 48
2a10:eec0:2::/48 maxlen: 48
2a10:eec0:2:101::7/128 maxlen: 128
2a10:eec0:3::/48 maxlen: 48
2a10:eec0:4::/48 maxlen: 48
2a10:eec0:5::/48 maxlen: 48
2a10:eec0:6::/48 maxlen: 48
2a10:eec0:7::/48 maxlen: 48
2a10:eec0:8::/48 maxlen: 48
2a10:eec0:9::/48 maxlen: 48
2a10:eec0:a::/48 maxlen: 48
2a10:eec0:c::/48 maxlen: 48
2a10:eec0:d::/48 maxlen: 48
2a10:eec0:e::/48 maxlen: 48
2a10:eec0:f::/48 maxlen: 48
2a10:eec0:10::/48 maxlen: 48
2a10:eec0:11::/48 maxlen: 48
2a10:eec0:12::/48 maxlen: 48
2a10:eec0:13::/48 maxlen: 48
2a10:eec0:14::/48 maxlen: 48
2a10:eec0:15::/48 maxlen: 48
2a10:eec0:16::/48 maxlen: 48
2a10:eec0:17::/48 maxlen: 48
2a10:eec0:18::/48 maxlen: 48
2a10:eec0:19::/48 maxlen: 48
2a10:eec0:1a::/48 maxlen: 48
2a10:eec0:1b::/48 maxlen: 48
2a10:eec0:1c::/48 maxlen: 48
2a10:eec0:1d::/48 maxlen: 48
2a10:eec0:1e::/48 maxlen: 48
2a10:eec0:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:c6:8e:82:04:7c:10:0c:b9:6c:7c:65:4e:17:2d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Sep 3 14:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0ec546c65796fe1909e6e8745cbcc4526af731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:6e:89:00:3d:05:0d:33:e0:14:7a:5d:8e:
10:5b:b5:ac:ac:c3:8f:3c:cc:1c:6b:e5:31:5b:df:
09:27:92:ab:d2:9a:51:dc:5c:79:cf:17:a0:39:62:
b4:ea:a8:64:98:13:8b:00:8d:8e:03:05:26:cb:6d:
2e:a4:90:57:5c:ff:aa:8c:8b:d8:41:81:19:9f:f3:
22:23:dd:13:e3:3b:9b:9a:d2:01:33:b8:ca:10:db:
6e:0a:91:07:a4:f9:1a:27:12:12:00:13:5c:e7:33:
e7:02:bb:b6:48:4c:c8:be:d0:5e:4f:81:77:6f:5b:
bc:7f:07:fb:f5:f5:6c:ca:0d:ef:12:07:f7:5a:e9:
39:5d:e9:1e:ec:b4:d2:fa:9c:bc:16:07:7f:58:db:
68:f6:97:ef:1d:72:a0:b2:8d:76:48:5f:0b:a5:84:
be:06:a7:fb:86:34:65:8e:36:ce:e8:e9:96:cd:74:
24:c5:9a:4f:30:22:9d:a1:8d:0e:15:1d:9c:2b:40:
ec:e5:1f:01:9e:ca:d4:fa:f4:80:2e:3f:d4:c8:60:
6d:24:2a:2f:4f:dd:eb:08:e8:ac:fe:0e:2f:b8:42:
f9:36:42:f8:c4:1d:a9:d2:ac:12:85:a6:4e:6f:af:
5e:5c:a5:76:55:42:58:9e:43:44:9d:0e:bf:be:db:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:54:6C:65:79:6F:E1:90:9E:6E:87:45:CB:CC:45:26:AF:73:1E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0OxUbGV5b-GQnm6HRcvMRSavcx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.192.0/23
81.19.196.0-81.19.207.255
185.100.1.0-185.100.3.255
193.109.220.0/24
194.110.75.0/24
217.30.80.0/21
217.30.89.0-217.30.95.255
IPv6:
2a10:eec0::-2a10:eec0:a:ffff:ffff:ffff:ffff:ffff
2a10:eec0:c::-2a10:eec0:1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bf:cc:53:b5:9e:a6:77:fd:bc:61:c0:8c:91:23:8b:ea:37:48:
93:f8:f7:26:72:56:15:1d:a4:de:54:5a:fd:d7:f7:4d:9b:da:
d0:60:38:69:ed:fb:cb:47:f2:7e:4e:74:c5:29:b5:ee:3c:41:
ef:14:17:c0:d8:bc:7b:0d:a0:e9:0a:74:80:d8:b4:fb:39:14:
5c:83:f6:76:80:e9:d5:7a:b8:bc:01:9c:ab:cd:eb:d0:fb:40:
ae:8c:72:a5:eb:91:46:4a:d6:91:d8:99:31:bc:3c:8d:e0:4b:
d8:b6:17:6a:a2:0c:77:a4:3d:95:9c:88:84:5b:8d:ac:66:5f:
94:78:ae:3d:08:3c:de:98:d7:ce:2b:2f:42:38:93:eb:e7:e1:
b5:d4:7a:62:e7:b0:24:72:fd:3e:a2:0d:95:3d:61:f2:80:5b:
67:78:89:4e:90:59:fd:d2:18:45:3a:5c:68:84:8a:2d:11:ba:
30:60:7e:09:3d:04:53:f9:be:db:a4:b8:0f:3d:14:74:f1:40:
f5:28:3f:59:d7:48:d3:ec:76:1e:69:91:65:13:81:ef:bf:5b:
a3:f7:72:a6:b7:68:6e:84:ca:a2:f9:1d:d9:73:c3:fd:66:15:
ef:71:24:99:82:b3:32:56:eb:91:8f:51:22:7b:03:3b:ee:cf:
5c:96:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:07:54 2026 by rpki-client