Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3RUDMC3vrJjx_Lwhlbzor6sDx0Y.roa
File: 3RUDMC3vrJjx_Lwhlbzor6sDx0Y.roa (raw, json)
Hash identifier: qDgjZN1lmoPt+KmYX/j3LIDOSRoYcNdaSWu5FSPIIdM=
Subject key identifier: DD:15:03:30:2D:EF:AC:98:F1:FC:BC:21:95:BC:E8:AF:AB:03:C7:46
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292BBB58EBC86CF3722401029789373
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3RUDMC3vrJjx_Lwhlbzor6sDx0Y.roa
Signing time: Thu 09 Apr 2026 14:08:32 +0000
ROA not before: Thu 09 Apr 2026 14:08:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396606
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:bb:b5:8e:bc:86:cf:37:22:40:10:29:78:93:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd1503302defac98f1fcbc2195bce8afab03c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:52:a4:66:3b:c6:39:d2:e7:f6:ec:1d:dd:
a2:0f:76:cf:a9:04:73:16:1d:b3:ec:80:7d:07:38:
c3:1e:d9:fe:7f:dd:6f:ce:9b:1e:1c:25:59:f7:3c:
f7:7d:ff:76:0c:2c:c8:af:54:31:98:e9:d9:7e:8c:
b7:93:fd:ab:eb:28:a9:65:c0:0b:f2:98:80:04:f7:
c8:ac:ec:b4:e4:cb:64:c8:f1:f3:6a:d6:9d:75:07:
c0:b0:f1:11:97:f5:6f:18:1b:c4:e3:62:32:6a:5a:
38:de:c8:6f:f8:fa:fd:9b:74:fa:bd:f3:92:9f:82:
37:4b:6b:fa:b1:58:b4:6a:62:14:72:56:49:6a:e8:
46:d4:0a:cb:2c:1a:6c:a3:39:05:09:b6:3d:9a:fc:
f9:31:7e:5d:29:c4:c1:75:57:bd:10:e0:98:28:a6:
74:f5:9a:ae:91:4f:8e:4c:2b:83:f4:3c:ec:ae:59:
5e:7a:b5:6e:59:3c:e1:32:93:68:3d:7b:53:fb:2b:
ca:51:8a:98:d2:e3:08:ee:83:b8:84:ee:4b:af:6b:
0c:9f:34:e8:74:7c:36:5f:ed:3b:ca:a9:09:11:43:
65:f4:58:f6:16:7d:f5:d4:07:57:8c:e6:f2:b5:3b:
15:84:b0:51:b7:3f:71:59:e7:a6:4e:c1:19:48:f8:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:15:03:30:2D:EF:AC:98:F1:FC:BC:21:95:BC:E8:AF:AB:03:C7:46
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3RUDMC3vrJjx_Lwhlbzor6sDx0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
be:46:83:26:1d:ef:9b:13:d1:50:48:62:b9:78:b9:36:00:7b:
70:8c:1a:b7:5e:52:2c:19:5b:6a:da:cb:59:f3:38:c1:79:50:
d4:dc:90:29:22:34:45:d2:48:3a:11:47:f8:94:ec:28:e2:d6:
98:6f:db:95:53:c4:07:cd:17:17:87:fa:29:ba:6e:0b:fe:aa:
a1:d7:7a:d8:c7:2c:ae:27:09:da:ad:e5:e2:fc:fa:88:6f:3d:
50:d6:47:1c:1c:ca:7f:e9:46:1c:01:8d:3d:fe:2c:91:af:51:
62:31:67:a1:ab:19:77:84:ea:05:3a:e3:cb:02:d6:ef:0e:6e:
e8:9a:bf:b1:1f:4d:dc:ee:26:f4:cf:32:60:e9:84:c7:e0:ab:
4b:df:93:f4:81:54:d2:00:30:36:c5:0b:97:ba:52:30:40:a1:
1f:ed:64:3e:23:2d:fb:fa:05:fa:ca:5b:37:a7:fc:91:45:e4:
2d:e5:b0:21:34:7a:50:a0:10:38:bd:64:49:15:3a:f6:07:9d:
19:2e:53:7e:49:dc:8b:ba:01:96:31:16:12:03:08:7d:cf:02:
b8:3e:77:e1:7a:40:7a:9c:61:a9:91:88:86:9d:86:a4:99:80:
b3:7f:f8:97:09:65:03:52:f2:aa:58:e1:67:e6:60:4e:22:bc:
3d:3b:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:23 2026 by rpki-client