Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/634AfpVeyf67-lZQmBCVlg6IP1Q.roa
File: 634AfpVeyf67-lZQmBCVlg6IP1Q.roa (raw, json)
Hash identifier: Av2D02os8FXUT8p+DE2C6The5yBjQIm2lbr7z6DUkr4=
Subject key identifier: EB:7E:00:7E:95:5E:C9:FE:BB:FA:56:50:98:10:95:96:0E:88:3F:54
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929B6272B7603DB73F021F60CC53EF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/634AfpVeyf67-lZQmBCVlg6IP1Q.roa
Signing time: Thu 09 Apr 2026 14:08:23 +0000
ROA not before: Thu 09 Apr 2026 14:08:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36627
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9b:62:72:b7:60:3d:b7:3f:02:1f:60:cc:53:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb7e007e955ec9febbfa5650981095960e883f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:56:66:d9:ce:92:29:eb:8d:d6:e3:c9:b8:
da:c2:cb:94:10:aa:70:88:4f:fa:d5:32:3a:08:f8:
47:74:ba:56:d1:10:21:c9:b7:1b:ee:8c:77:c7:e0:
97:3d:59:92:0d:95:1e:2d:14:c8:94:c3:e1:11:60:
28:5c:82:7d:b7:27:e7:19:34:83:f5:01:b6:08:2f:
cf:80:40:49:a7:9d:5e:c7:ff:16:c5:b3:6a:63:ec:
b2:db:db:74:1c:8e:79:b3:dc:29:c1:85:44:5e:86:
94:a7:fb:5a:b3:07:27:db:5a:cd:e6:5c:3d:ab:3b:
03:2e:a8:94:7b:ae:43:a8:30:e4:20:5a:05:0d:75:
79:c6:b1:f5:ec:e8:12:8f:d8:43:03:73:14:62:7f:
3c:b2:6d:62:3d:5e:75:bf:93:22:03:d6:dc:35:06:
6d:6f:f6:9f:ab:8b:0e:ed:a3:82:5e:18:1d:67:c2:
9d:b0:5e:fc:63:07:b9:ba:2a:c8:87:26:c6:84:bf:
87:3a:97:c4:a2:52:68:7c:2b:c8:74:d7:c9:39:49:
37:17:87:19:5c:e9:82:32:c4:9b:46:b5:4b:be:23:
d3:6c:b5:74:c2:b4:ce:44:7a:a6:78:7d:cf:95:3f:
ea:e0:b0:f5:be:9d:a3:a3:0d:3d:a5:fc:7c:c9:14:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:00:7E:95:5E:C9:FE:BB:FA:56:50:98:10:95:96:0E:88:3F:54
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/634AfpVeyf67-lZQmBCVlg6IP1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
c2:a7:4a:ac:4d:88:88:f9:61:74:c7:28:7b:d1:0d:3b:fb:32:
f7:00:3e:3a:fe:87:d5:08:8c:ee:2c:2d:7d:e6:25:8c:f3:66:
7f:7f:17:c9:ea:28:93:61:05:84:0e:16:98:de:25:98:66:70:
a5:0e:da:d2:85:15:e0:3a:9c:8c:c8:67:59:d8:6b:cd:a5:45:
0c:cd:3f:95:be:94:93:c7:56:46:66:c6:da:51:50:76:fa:d5:
31:39:1e:9a:ca:ea:a3:c6:70:65:af:a6:27:f2:a8:2a:dc:72:
1f:bf:56:38:49:c4:d0:18:19:05:33:99:0d:4f:7a:41:78:72:
53:e5:0b:df:3f:76:49:37:15:c3:b6:12:c9:a1:60:92:9e:d7:
ce:21:af:ef:b0:43:f1:28:5f:1d:cf:e8:08:3a:64:a6:6d:9e:
8b:09:47:2d:c4:87:89:44:0a:cf:05:67:db:ca:60:e8:f7:f9:
d8:e3:ff:f5:73:a2:ff:1a:01:cf:ac:17:48:11:86:df:c4:12:
8b:ee:d7:3c:3e:a3:01:49:ab:2e:1a:08:f1:75:1b:3a:0d:e9:
50:8f:12:33:a9:f6:e3:65:f8:f5:e5:09:92:7a:70:8d:48:6e:
39:d2:43:c8:af:0e:50:7c:62:f5:d9:aa:89:dc:24:94:d1:87:
bb:8e:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:46 2026 by rpki-client