Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9keKG3tjoZBQKDKJmLu6-KnLRVM.roa
File: 9keKG3tjoZBQKDKJmLu6-KnLRVM.roa (raw, json)
Hash identifier: elCdMGSrUUhWHCBpVjlRS5hSmKzfcp0F4AHYYSt6rwU=
Subject key identifier: F6:47:8A:1B:7B:63:A1:90:50:28:32:89:98:BB:BA:F8:A9:CB:45:53
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292979410C7975206E64B8FCF96C685
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9keKG3tjoZBQKDKJmLu6-KnLRVM.roa
Signing time: Thu 09 Apr 2026 14:08:22 +0000
ROA not before: Thu 09 Apr 2026 14:08:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36620
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:97:94:10:c7:97:52:06:e6:4b:8f:cf:96:c6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6478a1b7b63a1905028328998bbbaf8a9cb4553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:6d:de:70:85:5f:1b:68:0f:67:f5:2d:eb:
cb:93:f9:e7:2e:08:58:34:8b:36:85:ee:46:8c:a4:
c7:74:ec:75:95:11:a1:ff:93:8b:52:9f:c6:91:4f:
a9:bd:3c:db:3a:b7:6f:eb:2c:86:30:64:d9:75:45:
eb:c1:b1:46:71:e2:b1:26:ec:bc:13:30:d4:6a:17:
92:e4:4d:5f:ba:ba:58:c8:88:ab:4f:6e:b0:34:d4:
a0:0e:e2:2a:6d:03:a8:33:e7:dd:9f:e5:a3:25:67:
f2:44:c6:f5:be:5f:bc:be:03:73:a2:32:4b:4d:29:
d6:eb:a4:df:d8:e2:30:4c:97:7a:fb:ce:9f:b4:09:
c8:35:84:02:13:a0:ac:e5:3b:d6:c1:5a:65:0f:c1:
21:50:4a:b3:73:1c:08:3a:66:cd:39:e8:db:0b:2e:
26:49:9b:ff:ef:92:15:57:83:1e:b6:c8:7c:11:1d:
9e:9b:55:61:a4:55:0d:2b:a4:f3:79:80:91:28:77:
64:2f:87:18:49:a5:15:d5:e0:ed:fa:7e:71:ee:0c:
6d:8b:0d:2d:eb:bd:79:e0:4a:2e:4c:1d:2c:ed:4e:
28:74:59:7f:04:49:e4:a8:7e:af:a5:ec:3f:d5:83:
a1:d4:27:2e:9c:96:88:38:dd:ca:cd:f5:43:7a:27:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:47:8A:1B:7B:63:A1:90:50:28:32:89:98:BB:BA:F8:A9:CB:45:53
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/9keKG3tjoZBQKDKJmLu6-KnLRVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
bd:75:eb:5e:1f:45:33:e9:7f:d3:90:0c:4b:44:0b:f1:34:2f:
ba:05:bc:8b:c7:dd:24:cc:e4:61:a1:51:d5:67:e5:28:55:f7:
32:58:d8:56:8b:98:c4:b6:65:09:c1:db:8b:87:56:f4:bf:bd:
8e:a9:90:ac:eb:93:26:e3:d8:9d:b3:95:45:f7:19:68:bd:ac:
c7:f7:74:34:39:5a:92:0e:a7:90:9e:f8:0f:af:43:71:ea:a8:
fa:b4:d3:ba:40:63:86:09:e4:a9:de:6f:a5:91:22:8d:ed:ca:
8c:a9:2f:17:af:7d:5c:54:de:c7:e3:cc:4b:bf:36:58:0e:8a:
bc:8a:b1:78:7e:37:54:43:d1:a0:86:03:85:96:e4:a1:9b:d8:
74:39:c2:18:7d:11:97:68:1c:b6:9e:91:85:99:1a:54:25:45:
c5:5d:19:72:6e:aa:75:be:d8:54:24:f7:a7:62:bf:e1:6d:7c:
ea:d9:4d:47:bd:ef:b8:5f:be:49:fd:e4:29:ce:13:55:c1:36:
17:ec:8a:99:79:f5:16:76:df:83:f3:d6:06:c4:96:db:98:0d:
09:c8:9e:ea:9d:76:79:1a:72:6f:61:81:e4:99:5e:5b:5e:d9:
7a:7f:43:c7:06:19:c5:28:4a:a7:0f:65:4f:e2:81:14:9e:81:
08:6d:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:31 2026 by rpki-client