Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9JWTAL_YNZnNEcr5oz7pyA77Juk.roa
File: 9JWTAL_YNZnNEcr5oz7pyA77Juk.roa (raw, json)
Hash identifier: YT8c1uAsBqG7UO4OuItzOsKvaokpCsF6DVj4YI21uuE=
Subject key identifier: F4:95:93:00:BF:D8:35:99:CD:11:CA:F9:A3:3E:E9:C8:0E:FB:26:E9
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B2A042096C200E17504E1778B1F1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9JWTAL_YNZnNEcr5oz7pyA77Juk.roa
Signing time: Thu 09 Apr 2026 14:08:29 +0000
ROA not before: Thu 09 Apr 2026 14:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396588
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b2:a0:42:09:6c:20:0e:17:50:4e:17:78:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4959300bfd83599cd11caf9a33ee9c80efb26e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:20:74:03:34:55:b9:fa:bc:c2:b7:fe:e9:
5f:b4:83:06:15:7f:93:ce:92:f4:b7:7f:31:64:fc:
6b:13:2c:44:2a:62:d0:ad:2a:4c:0e:9f:f4:02:6e:
c7:e5:1a:10:8f:0c:af:04:72:3c:3f:0e:fc:f3:72:
37:9f:2f:5c:9d:8e:12:fa:a7:fb:f4:8e:7a:b8:3d:
de:0f:47:49:bb:61:00:19:5e:ff:e2:ca:e6:0c:c6:
96:7c:9f:28:b1:bf:ee:35:e5:e2:e8:f1:f1:41:92:
38:80:b1:52:cf:24:59:d6:22:1c:ad:1f:b0:ed:0f:
76:14:16:f4:4a:8b:36:ee:98:d7:f7:a5:fe:61:09:
23:5c:41:bd:41:ce:08:41:85:a1:ca:be:af:e0:28:
52:c7:e2:7a:dd:ee:e0:4e:75:b3:bb:51:e5:33:94:
44:b6:c5:31:d3:e6:c3:f5:c7:e8:f7:38:d0:a9:c8:
3c:f5:7a:5b:26:a6:c0:bb:bb:3a:f8:36:c3:db:0c:
6d:ca:d0:86:99:3f:32:d6:25:72:9f:1a:92:a4:86:
2f:17:2c:a1:67:05:86:ce:2c:22:16:55:d1:1c:bd:
70:dd:53:c7:0d:dc:23:e8:b1:65:2f:e2:83:93:df:
0e:ed:73:bb:74:e8:eb:c9:44:53:5a:82:bc:34:81:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:93:00:BF:D8:35:99:CD:11:CA:F9:A3:3E:E9:C8:0E:FB:26:E9
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9JWTAL_YNZnNEcr5oz7pyA77Juk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
44:0f:80:0f:7a:c9:c6:08:05:65:e7:60:48:83:23:85:9e:9f:
ba:a3:5d:13:4a:c2:66:da:21:d7:3d:cf:90:67:10:f9:2e:4e:
da:ba:55:60:3f:d1:86:d5:4d:99:0b:92:c0:26:0f:cc:02:74:
a9:ea:fd:ae:7e:b4:94:a7:cb:56:01:f7:6d:0f:6f:c6:69:d8:
28:c4:bd:19:a3:30:27:2f:1a:fb:02:a6:af:0c:9d:e3:ad:e6:
52:fa:91:19:f7:2b:91:b4:2c:1e:3c:3c:97:60:f5:64:89:ad:
c4:e2:e3:58:28:56:8b:cc:7b:37:8c:6a:13:32:41:09:95:8b:
42:ab:ab:71:52:f2:eb:48:61:87:e3:85:a1:ce:f6:76:44:54:
3b:5e:b6:80:14:46:45:ef:f5:cf:02:aa:fb:af:5d:4c:2a:d4:
34:58:32:21:a2:c4:88:ac:b7:4a:69:a6:d7:6d:2c:e7:26:50:
1b:67:2e:8a:7f:fa:8d:93:9e:97:a2:2a:29:92:43:17:31:51:
97:28:98:f4:64:c4:87:de:f4:4d:ce:d4:12:61:15:1c:e7:da:
22:a7:c9:13:04:53:b2:44:6e:cf:51:60:60:f4:ca:27:4f:41:
a1:37:04:63:fe:54:0c:35:30:87:70:5d:c2:61:cf:db:30:9b:
6a:42:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:30 2026 by rpki-client