Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Bv5hOm3MN9mYxFYN1PiUANs1-Og.roa
File: Bv5hOm3MN9mYxFYN1PiUANs1-Og.roa (raw, json)
Hash identifier: paJkuRhagri54kH2wni85kxCkGq9mwnFfWmCvgtRrMI=
Subject key identifier: 06:FE:61:3A:6D:CC:37:D9:98:C4:56:0D:D4:F8:94:00:DB:35:F8:E8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A45C4E8053FE664819D1AEA48785
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Bv5hOm3MN9mYxFYN1PiUANs1-Og.roa
Signing time: Thu 09 Apr 2026 14:08:26 +0000
ROA not before: Thu 09 Apr 2026 14:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396552
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a4:5c:4e:80:53:fe:66:48:19:d1:ae:a4:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06fe613a6dcc37d998c4560dd4f89400db35f8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:8f:ae:db:04:f4:72:b3:dc:bb:0a:56:d5:
8a:c1:7f:fb:e8:c5:60:c2:df:fd:d0:8f:cd:14:19:
41:e1:4b:d6:2e:70:29:79:bb:38:78:6a:ca:0a:6a:
7f:d8:5c:c3:56:a8:27:43:1e:c1:ae:85:78:1e:28:
73:08:ea:04:7f:15:d1:df:d3:74:db:e7:d0:2c:8b:
51:59:f6:fd:67:04:81:dc:13:2b:a2:c5:77:34:a0:
72:5a:bc:d4:0a:43:00:2b:12:35:3c:20:af:aa:21:
35:00:68:27:a0:ae:1a:14:50:14:6e:cc:34:6c:b4:
ac:c5:ac:9a:d4:1b:d4:eb:9c:58:f3:0d:0e:85:3f:
d2:a8:03:02:71:d2:d9:71:0c:6f:1d:a2:36:a8:1e:
f2:25:99:be:1a:e2:dd:83:80:02:6a:01:88:c4:50:
13:31:1a:9c:05:b1:bd:db:ad:5c:2b:5d:ff:a2:85:
18:d3:37:df:59:9a:25:fd:99:40:72:3c:5a:3e:0a:
58:04:44:30:a0:61:ab:bd:f8:31:16:20:57:36:95:
e2:a2:cd:7b:58:f3:e5:db:88:70:d1:70:0d:dc:c6:
eb:4c:2d:3d:be:53:17:2e:28:fa:0c:cc:e9:19:26:
c4:76:c1:e0:27:cf:2e:32:1c:f4:a6:58:53:1a:ff:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:61:3A:6D:CC:37:D9:98:C4:56:0D:D4:F8:94:00:DB:35:F8:E8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Bv5hOm3MN9mYxFYN1PiUANs1-Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
35:0b:4d:01:5b:1d:3d:a2:6b:6a:82:91:d7:f8:c1:98:12:be:
4d:92:1a:4b:4b:02:09:ba:7f:53:1f:1a:f3:e4:b1:6c:b5:8c:
92:94:79:b9:15:34:71:d6:c4:9f:72:ea:74:f2:91:52:2f:9b:
db:52:b6:db:7e:a5:13:59:0b:8d:cb:0a:fd:81:ad:3c:82:43:
18:68:64:b6:56:bc:51:4e:22:72:2e:20:36:c8:0c:d3:42:83:
3a:fe:7e:38:d4:5d:64:ef:6a:dc:36:10:76:ec:6f:bc:79:3d:
71:32:6b:9a:37:08:6f:36:52:78:46:84:c5:8f:a4:32:65:4c:
eb:f3:34:3a:51:e1:35:07:2f:33:0e:39:ed:35:b5:31:f9:16:
2e:f1:e9:6d:e8:f0:d4:d0:36:fa:9f:70:c5:19:ed:53:1c:11:
9b:bb:c1:30:ca:6f:2e:23:3d:05:06:1b:80:c0:b2:34:43:70:
e2:44:fb:69:d4:3f:8f:b4:9e:51:03:1d:5b:d2:7a:db:0f:0c:
80:90:a6:b5:30:b3:40:36:c4:d3:b6:3f:02:56:ef:54:84:67:
38:6d:4a:e2:41:ca:14:49:6e:1a:d4:8a:7f:b1:da:cf:c7:f5:
43:ee:c3:a5:95:61:58:70:cc:48:98:68:2f:22:d1:b9:f0:4b:
57:bb:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:55 2026 by rpki-client