Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5RR0tlrSaeFDgtKld6DW0c3Y2WY.roa
File: 5RR0tlrSaeFDgtKld6DW0c3Y2WY.roa (raw, json)
Hash identifier: HUjndDJ2ncdiZaExueNqMv3oAwTBmweKurekygEU1Fs=
Subject key identifier: E5:14:74:B6:5A:D2:69:E1:43:82:D2:A5:77:A0:D6:D1:CD:D8:D9:66
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B0785CADDA05BCE6024CEE6C2B35
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5RR0tlrSaeFDgtKld6DW0c3Y2WY.roa
Signing time: Thu 09 Apr 2026 14:08:29 +0000
ROA not before: Thu 09 Apr 2026 14:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396584
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b0:78:5c:ad:da:05:bc:e6:02:4c:ee:6c:2b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51474b65ad269e14382d2a577a0d6d1cdd8d966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:41:fd:18:4f:5d:54:64:b9:c4:44:45:4b:
1d:ec:c3:96:cc:67:86:f8:f1:94:56:c8:8e:6e:36:
f4:c4:50:ad:02:1a:74:c9:f6:a9:c4:c0:9a:ab:b9:
9f:20:3d:7b:e5:9d:fe:c6:11:58:b7:c1:77:40:8c:
88:b0:6e:bb:10:17:b3:89:7a:f3:6f:11:00:1c:b9:
93:ad:68:66:19:e3:4f:43:25:36:5c:43:2d:ad:d8:
ca:7f:00:21:1d:46:c3:e8:63:03:41:9f:da:4b:a7:
6a:83:05:ec:be:24:63:25:ec:bb:05:bd:74:3f:5c:
62:ae:0f:5b:20:53:39:b5:e3:61:8e:66:45:c6:4e:
d0:79:c9:57:3f:4d:45:d4:45:93:5d:62:ad:dd:b8:
c4:42:83:42:6d:a8:3a:63:6f:2c:86:e6:55:77:b3:
c4:1e:4f:73:84:93:db:bb:b6:2f:c6:09:b9:ec:19:
82:86:2e:40:46:e6:4c:8b:a3:5b:68:aa:cb:10:3c:
53:ef:cb:69:6a:e0:cd:0b:22:22:4a:42:ce:5c:9f:
77:fa:e4:6c:f0:36:ee:ac:e7:14:4d:2a:0b:f8:1e:
2b:b7:96:65:79:9a:b2:c1:2a:3d:41:a0:9d:f8:9e:
56:10:66:52:77:d2:43:5e:4f:f6:2b:57:0f:30:55:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:74:B6:5A:D2:69:E1:43:82:D2:A5:77:A0:D6:D1:CD:D8:D9:66
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5RR0tlrSaeFDgtKld6DW0c3Y2WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
66:a1:17:95:dc:8d:f5:84:b8:cf:b4:ed:61:8e:ab:eb:1a:b3:
d7:c0:92:45:5e:f6:b9:9c:69:32:af:ad:8d:ce:99:97:2b:7a:
b4:30:be:a2:fd:52:25:26:63:7a:7a:f0:6f:fa:8a:de:60:05:
64:58:c6:48:8e:53:d2:a6:c9:ce:64:e7:6a:c8:33:91:73:8f:
b3:19:25:35:58:4c:3d:e7:af:0d:38:de:d8:c2:71:75:5f:89:
c5:ad:50:1d:8a:a5:f0:2d:2b:b4:e1:ba:54:08:eb:be:87:76:
5c:8d:de:dd:4c:56:21:ec:db:e7:30:a6:f9:06:ba:bc:76:08:
47:b1:c9:b3:a4:cb:10:16:5a:17:e6:8f:00:58:7e:ee:b9:3a:
f6:cc:8a:93:dd:78:a8:21:e0:30:7d:b2:24:08:b7:e8:ad:bf:
72:6b:de:29:77:a7:fe:cb:74:d3:9a:7d:33:29:1d:b8:0d:cc:
dd:bb:a4:31:26:18:b6:ce:8e:85:74:8d:6f:12:89:db:ac:df:
1c:c3:bb:19:e5:c2:77:12:c1:27:f6:66:0b:61:db:71:4a:61:
a4:dc:d4:71:53:03:d9:04:be:59:de:70:6f:71:b4:94:90:3e:
bb:ca:94:4c:09:24:54:1c:01:7d:29:99:84:b5:1f:02:62:a3:
a7:b1:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:26 2026 by rpki-client