Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/70vMV2oMFum1G4dS3P-dwigPwKA.roa
File: 70vMV2oMFum1G4dS3P-dwigPwKA.roa (raw, json)
Hash identifier: 9n+v9edRJMjb+0eU05kLwlpm6ibnFPfs7dkj4RXP17s=
Subject key identifier: EF:4B:CC:57:6A:0C:16:E9:B5:1B:87:52:DC:FF:9D:C2:28:0F:C0:A0
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292BD03B66B988DB70AB988131A0262
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/70vMV2oMFum1G4dS3P-dwigPwKA.roa
Signing time: Thu 09 Apr 2026 14:08:32 +0000
ROA not before: Thu 09 Apr 2026 14:08:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396609
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:bd:03:b6:6b:98:8d:b7:0a:b9:88:13:1a:02:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef4bcc576a0c16e9b51b8752dcff9dc2280fc0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:4b:34:0c:84:8c:9e:84:7c:74:90:5e:8a:
71:8b:32:73:d6:7d:a9:e6:d1:d7:6f:4c:f6:63:5f:
05:49:16:08:69:da:45:f8:0c:ba:0d:f2:41:31:90:
66:c5:56:77:b1:31:f9:af:18:a2:43:c7:3e:ca:08:
3d:d0:2c:e6:bd:f3:b4:9a:59:4b:a5:93:80:d3:70:
42:38:ee:37:b9:15:16:e9:2e:fd:4d:4e:11:4f:0f:
e0:21:c1:13:b0:1e:53:19:c8:55:14:b0:f6:ee:2e:
54:e0:fc:54:21:ef:d5:00:d4:14:af:42:33:51:c1:
76:d3:8d:e3:19:9c:8e:7c:ce:a5:34:44:11:96:17:
de:50:64:59:8e:58:89:97:28:0f:b7:b9:47:4d:dd:
96:a7:7d:2a:64:d9:9a:d7:e5:86:bc:32:40:b0:6d:
4b:9f:cc:b6:40:e2:07:f4:44:33:03:b3:3f:5a:91:
e7:2b:b2:be:94:7a:4e:fb:9a:d8:4a:50:75:f5:80:
2e:cf:98:d8:76:ea:c3:89:ee:3f:56:84:fc:9d:b8:
d1:cc:13:47:0e:2f:b9:d0:35:fe:52:97:c7:7a:e8:
d9:56:fb:33:fc:89:c5:f4:88:3e:34:6e:41:f9:1a:
e8:31:9d:fb:0b:04:d8:13:c1:de:18:2d:e3:ab:fb:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:CC:57:6A:0C:16:E9:B5:1B:87:52:DC:FF:9D:C2:28:0F:C0:A0
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/70vMV2oMFum1G4dS3P-dwigPwKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
04:fa:d0:13:43:80:ff:23:4c:1f:10:97:04:d6:3f:b0:f4:88:
cc:5a:8c:cf:0e:39:94:fe:83:87:b9:1c:18:91:76:45:2b:6e:
5a:7a:81:0e:a5:10:c5:d6:26:6b:fe:91:03:f7:43:92:46:b3:
a7:84:77:da:a3:38:3f:ac:f6:81:cd:ea:6e:3d:25:6a:69:be:
fe:c4:76:e8:c5:98:50:25:bf:ba:3b:68:4c:9f:e4:1d:a3:69:
19:08:61:14:88:69:41:58:55:f3:ae:cd:4d:a6:87:bb:42:61:
16:7b:e1:b0:be:10:9c:34:a9:50:e6:2f:1f:66:6d:66:d4:a5:
f8:83:17:68:c3:6b:12:ca:33:8f:51:d7:36:bc:94:ff:b1:5d:
cc:15:a6:16:19:bf:78:dc:b5:9b:af:d4:d0:13:6c:5c:66:24:
4f:12:2e:40:cf:c1:75:f5:f2:0e:6b:2a:63:22:f9:c2:99:6d:
09:d5:59:1f:98:08:ed:20:65:bb:a3:b3:47:c1:60:37:7e:c2:
91:d2:f2:1d:81:53:06:a2:fd:8f:50:f8:04:ab:5a:1c:32:5b:
04:2e:8b:57:27:14:b6:fa:6e:29:b7:6e:bd:d2:10:c8:ec:75:
c3:f0:27:b9:a9:16:98:94:cb:68:0b:bc:fd:93:9a:15:8d:2d:
15:7c:08:6a
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykr0DtmuYjbcKuYgTGgJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjRiY2M1NzZhMGMxNmU5YjUxYjg3NTJkY2ZmOWRjMjI4MGZjMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwtLNAyEjJ6EfHSQXopxizJz1n2p
5tHXb0z2Y18FSRYIadpF+Ay6DfJBMZBmxVZ3sTH5rxiiQ8c+ygg90CzmvfO0mllL
pZOA03BCOO43uRUW6S79TU4RTw/gIcETsB5TGchVFLD27i5U4PxUIe/VANQUr0Iz
UcF2043jGZyOfM6lNEQRlhfeUGRZjliJlygPt7lHTd2Wp30qZNma1+WGvDJAsG1L
n8y2QOIH9EQzA7M/WpHnK7K+lHpO+5rYSlB19YAuz5jYdurDie4/VoT8nbjRzBNH
Di+50DX+UpfHeujZVvsz/InF9Ig+NG5B+RroMZ37CwTYE8HeGC3jq/tqoQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFO9LzFdqDBbptRuHUtz/ncIoD8CgMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvNzB2TVYyb01GdW0xRzRkUzNQLWR3aWdQd0tBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAAT60BNDgP8j
TB8QlwTWP7D0iMxajM8OOZT+g4e5HBiRdkUrblp6gQ6lEMXWJmv+kQP3Q5JGs6eE
d9qjOD+s9oHN6m49JWppvv7EdujFmFAlv7o7aEyf5B2jaRkIYRSIaUFYVfOuzU2m
h7tCYRZ74bC+EJw0qVDmLx9mbWbUpfiDF2jDaxLKM49R1za8lP+xXcwVphYZv3jc
tZuv1NATbFxmJE8SLkDPwXX18g5rKmMi+cKZbQnVWR+YCO0gZbujs0fBYDd+wpHS
8h2BUwai/Y9Q+ASrWhwyWwQui1cnFLb6bim3br3SEMjsdcPwJ7mpFpiUy2gLvP2T
mhWNLRV8CGo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:50:00 2026 by rpki-client