Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BiFeL2tSv3QOpGh4gCzpRWY0Rsw.roa
File: BiFeL2tSv3QOpGh4gCzpRWY0Rsw.roa (raw, json)
Hash identifier: l0FZgPKMzWmz6pmTfKh2Thg2g7gj2TPD8Zat2x7aV6I=
Subject key identifier: 06:21:5E:2F:6B:52:BF:74:0E:A4:68:78:80:2C:E9:45:66:34:46:CC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A93FB73CC5225D80C208698B0366
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BiFeL2tSv3QOpGh4gCzpRWY0Rsw.roa
Signing time: Thu 09 Apr 2026 14:08:27 +0000
ROA not before: Thu 09 Apr 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396566
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a9:3f:b7:3c:c5:22:5d:80:c2:08:69:8b:03:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06215e2f6b52bf740ea46878802ce945663446cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:e8:b0:da:d8:73:2b:f8:0f:bf:a4:09:d1:
41:5e:9b:d1:c5:b8:44:19:60:20:49:c8:07:24:90:
4d:18:ed:60:88:db:1c:05:8c:f9:0b:a5:37:f3:5e:
3a:c4:95:68:32:a4:18:3d:b8:7d:43:60:f6:00:1b:
48:f9:13:52:a0:19:c3:fb:d2:32:bc:38:1d:ea:2a:
0d:bd:d0:9c:29:e1:b1:11:20:6c:56:2a:9b:34:86:
47:8e:39:ee:09:a8:ce:81:0f:b8:ab:55:27:94:23:
69:1b:b4:d4:9d:b4:3f:1f:30:44:87:4e:60:34:7c:
1e:e1:a7:b5:b3:06:03:e4:71:ef:54:6e:4e:a9:c9:
63:b0:4b:1a:23:26:c3:f7:a4:97:93:2c:62:fa:09:
a8:76:ca:19:9c:b1:85:74:e2:c7:29:eb:fd:b4:df:
b2:3b:9c:8e:e6:0a:95:73:f9:f7:10:ac:ee:bc:1c:
7d:2b:80:7e:44:90:25:23:25:d8:0a:b6:e4:de:15:
8d:5d:d9:85:49:3a:4c:d7:49:b5:28:6b:81:60:56:
2f:be:a4:36:1f:c5:fa:a3:fa:60:97:aa:b9:54:77:
1c:fd:18:86:78:60:19:4d:7b:03:eb:65:05:57:6a:
8a:b6:1b:83:ce:5c:a5:8a:20:4e:36:c7:92:36:31:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:5E:2F:6B:52:BF:74:0E:A4:68:78:80:2C:E9:45:66:34:46:CC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BiFeL2tSv3QOpGh4gCzpRWY0Rsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
1d:79:28:dc:d1:b5:b2:64:d9:db:b1:96:76:51:89:ff:4a:f6:
c7:3a:30:d3:a4:ec:41:23:e4:b5:05:10:a2:b5:ce:6b:1c:fa:
56:98:92:40:5d:78:7f:2b:2c:7b:f5:c2:3d:e5:58:9e:bd:49:
9d:2d:6c:39:8b:91:fd:9f:fa:62:b8:90:cb:ff:49:28:3f:c6:
7c:33:be:e2:d5:97:ff:49:bd:68:f0:0d:ff:c7:e8:b7:3b:6d:
31:21:47:f0:d6:dc:f0:8e:fb:8e:b2:91:cc:41:ab:24:13:e1:
86:90:80:c1:b2:b9:fa:df:28:53:a2:9f:41:9f:5f:50:ff:1b:
79:aa:b5:5f:46:a4:58:b8:3d:dd:d2:28:b9:6a:07:8a:29:5d:
db:e1:62:3a:c4:c8:46:25:7f:09:fa:19:b2:23:a8:2f:d7:92:
01:57:1f:2c:bd:3a:ca:3c:ca:b2:d4:ff:7f:ee:38:1c:e1:ad:
8b:97:e3:c6:66:9e:44:8e:89:1c:a9:07:da:e6:d1:1b:ec:7f:
c0:93:69:5a:4b:85:a7:0b:7b:65:0b:ec:70:50:03:18:5b:42:
6b:19:f3:80:94:5a:d3:18:52:a6:bb:45:b5:76:40:b9:81:0f:
04:a5:d1:97:33:aa:f7:24:b0:43:4d:20:9b:c9:73:8a:d1:45:
8e:7e:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:35 2026 by rpki-client