Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9G7dcxPogPl6EAWi4cgiiVAWSkc.roa
File: 9G7dcxPogPl6EAWi4cgiiVAWSkc.roa (raw, json)
Hash identifier: 6J4oXJPCM3CZ7PqdapkViEcJvZW9RNl9Vrw4wh5fetA=
Subject key identifier: F4:6E:DD:73:13:E8:80:F9:7A:10:05:A2:E1:C8:22:89:50:16:4A:47
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D729298CDC9D770366BD4DDB5F91B74FF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9G7dcxPogPl6EAWi4cgiiVAWSkc.roa
Signing time: Thu 09 Apr 2026 14:08:23 +0000
ROA not before: Thu 09 Apr 2026 14:08:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36622
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:98:cd:c9:d7:70:36:6b:d4:dd:b5:f9:1b:74:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f46edd7313e880f97a1005a2e1c8228950164a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:5d:18:f1:ee:82:f3:90:59:76:26:40:bf:
d5:68:bf:4d:99:af:02:f9:21:5d:ac:9c:4a:e6:16:
29:47:46:4f:b1:8a:1e:a0:82:6c:15:2c:38:9d:55:
6b:4d:00:74:78:b2:09:9b:bc:51:21:eb:52:fd:20:
37:92:f3:88:9c:5d:16:dc:e2:89:c9:af:b0:9d:c6:
93:fe:ac:46:45:46:20:13:73:25:c6:01:dc:89:33:
85:de:16:a5:0c:8a:81:a7:ff:8a:ef:a2:ce:ec:c2:
a3:91:28:82:8b:0d:74:50:ff:a1:95:7a:81:8a:84:
06:0a:52:9a:e4:74:e1:9c:c6:1f:65:12:0e:56:20:
83:0a:08:52:14:a5:99:f2:c0:0d:dd:cc:91:32:c7:
cd:20:94:6a:76:b9:89:bd:98:cf:c6:4c:f6:e6:5e:
5c:8f:42:dd:84:f8:4d:f3:5c:8f:15:a3:b0:76:35:
0f:22:c1:8d:8b:8c:78:e4:43:38:50:fc:2d:d1:65:
c0:25:6c:96:26:52:f8:ae:17:21:5f:32:9e:b8:e7:
f7:e8:de:0f:d2:e7:c7:e3:e4:5d:92:a2:21:bc:1c:
b6:0c:66:da:7e:cb:07:30:78:92:5d:b6:c6:36:0b:
a3:d6:e7:cc:25:3f:13:b2:46:9a:14:44:16:02:f0:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:DD:73:13:E8:80:F9:7A:10:05:A2:E1:C8:22:89:50:16:4A:47
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9G7dcxPogPl6EAWi4cgiiVAWSkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f6:a9:da:71:a3:66:c8:bd:2f:d9:95:e6:04:1d:b0:51:09:
33:4e:fa:ac:35:cc:9b:ac:f6:a3:57:d9:86:28:4c:6c:c0:f3:
cb:fb:a6:d1:a1:7d:91:31:4a:d6:74:ba:87:24:6a:f9:94:fb:
af:98:a0:a0:14:20:d7:60:97:24:4e:d0:65:c8:39:07:52:ec:
aa:48:b7:34:2a:83:93:eb:cf:f6:30:94:5c:9c:58:0d:9d:db:
e7:a8:81:4c:9a:b0:b1:39:a9:96:89:20:fe:c5:9c:93:63:d3:
c1:c2:c9:b8:12:74:74:fe:b4:9c:9d:9a:26:cc:82:42:a5:eb:
cc:94:40:c5:ef:88:99:20:19:51:e5:74:72:4d:76:1e:de:bc:
73:81:c1:7f:d5:c2:2e:b3:0f:21:6a:b7:17:65:3e:e7:3b:65:
ac:69:0f:f0:c0:9c:ab:9f:78:cb:8c:d9:cb:12:e5:3f:57:17:
60:c2:92:ed:a4:3a:0c:e7:58:84:82:af:61:2a:f1:b7:5c:8e:
b8:94:13:7a:17:02:a6:db:14:04:90:9a:78:6b:ee:b5:3d:56:
dc:2c:47:d7:89:9a:e0:55:9c:48:ba:3b:fe:01:e9:94:d6:2d:
a4:bb:40:f8:95:ed:d8:72:2c:a0:65:8b:f1:40:c5:db:4a:57:
4a:95:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:11 2026 by rpki-client