Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1T7o7mEK5RemPvGjZPMU7IQz7Yw.roa
File: 1T7o7mEK5RemPvGjZPMU7IQz7Yw.roa (raw, json)
Hash identifier: BhspxFGd2uIF5y9Gao0jDxxd82A/c5xoTq0/KN6bON8=
Subject key identifier: D5:3E:E8:EE:61:0A:E5:17:A6:3E:F1:A3:64:F3:14:EC:84:33:ED:8C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929E4E0B0F2131D1DEF59AEA966ED3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1T7o7mEK5RemPvGjZPMU7IQz7Yw.roa
Signing time: Thu 09 Apr 2026 14:08:24 +0000
ROA not before: Thu 09 Apr 2026 14:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40717
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9e:4e:0b:0f:21:31:d1:de:f5:9a:ea:96:6e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d53ee8ee610ae517a63ef1a364f314ec8433ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:3c:00:46:48:5f:93:5e:8e:0d:e7:5a:50:
03:5a:99:61:ed:ba:8f:7e:78:15:79:01:79:e4:54:
45:22:8c:46:9d:95:c6:f4:d6:bb:29:93:85:db:3a:
96:d4:9e:8f:e7:8d:64:8c:5d:7b:d8:28:af:c8:18:
d8:53:8b:c8:73:30:37:81:1f:d8:ae:89:7c:df:ff:
ff:c5:02:d8:3a:e3:cd:00:20:8a:ef:a4:37:49:90:
f5:00:02:35:f7:51:da:df:8c:a3:40:e8:21:7f:70:
fa:3b:8f:83:3d:31:09:ad:3a:78:6a:d7:7c:bc:97:
f0:66:66:bf:9f:b2:b4:84:64:ad:67:fa:b0:67:6d:
b2:1d:91:3b:fb:ee:13:17:a1:0d:30:15:d0:01:20:
24:2c:11:e4:98:db:19:c5:8f:31:58:ae:3b:0d:c2:
5c:25:fa:31:55:c1:f2:4f:40:b6:ac:51:ea:5b:cc:
29:9e:6e:86:06:2f:17:9a:97:ef:37:79:93:a7:f7:
f8:f0:42:9b:0f:23:96:04:67:26:44:41:14:f6:13:
16:cf:d7:8b:00:3a:39:23:98:26:36:9c:f7:be:46:
4c:11:d1:fb:19:f1:47:48:ac:f0:c9:73:ef:c4:fc:
ca:1d:dc:88:ef:61:eb:7b:6b:74:70:4c:3e:e7:d7:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3E:E8:EE:61:0A:E5:17:A6:3E:F1:A3:64:F3:14:EC:84:33:ED:8C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1T7o7mEK5RemPvGjZPMU7IQz7Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
c3:31:67:df:44:d2:00:2e:15:ec:78:ee:8c:48:7e:54:66:ff:
98:cd:57:11:b7:9b:fa:b2:62:32:da:6e:95:f6:c5:7f:0b:e1:
85:4a:f6:61:4a:43:5d:70:93:49:82:fb:ad:1f:ca:59:38:7d:
df:b3:ce:51:05:be:35:82:ca:ae:42:ba:a9:00:91:b2:26:ce:
86:51:b5:de:e3:4c:12:ea:3b:38:53:ea:37:57:8c:1e:f6:fb:
df:0f:10:c0:25:5d:27:c2:34:4d:61:f4:68:59:d1:1f:af:05:
5a:9a:95:b3:c6:f9:7d:06:bb:8a:ff:4b:bf:f3:b2:1b:47:00:
5c:0b:c2:e8:03:c0:30:88:42:06:04:42:cb:4b:94:44:61:9b:
b2:5e:ca:cf:ab:7e:5a:62:72:d0:bf:4d:26:af:42:41:fa:5a:
c6:c6:bd:14:09:0f:9b:5c:77:ff:25:3f:59:5c:97:aa:fb:79:
93:3e:c1:90:b2:b5:f6:aa:aa:8d:e2:6c:69:8d:f1:e4:cb:a3:
6f:ff:c7:62:37:1d:16:48:fc:54:5b:49:3f:76:71:2b:b4:75:
9c:11:ef:fe:06:cc:78:f3:ea:ac:9d:d4:9d:90:a1:e9:51:17:
d2:67:4f:30:2f:05:72:1d:43:e0:5f:e7:1d:5c:60:51:e9:4e:
b9:2e:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:01 2026 by rpki-client