Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/C6PY9XcPr1Ik-V9l5NXkdUjJr_Y.roa
File: C6PY9XcPr1Ik-V9l5NXkdUjJr_Y.roa (raw, json)
Hash identifier: OA5mSbxWJKFKm4tNJHHUfMzHG+vjAxMdXGHto44fv4k=
Subject key identifier: 0B:A3:D8:F5:77:0F:AF:52:24:F9:5F:65:E4:D5:E4:75:48:C9:AF:F6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929338606574AA9A6D3D1E062B189C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/C6PY9XcPr1Ik-V9l5NXkdUjJr_Y.roa
Signing time: Thu 09 Apr 2026 14:08:21 +0000
ROA not before: Thu 09 Apr 2026 14:08:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21313
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:93:38:60:65:74:aa:9a:6d:3d:1e:06:2b:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ba3d8f5770faf5224f95f65e4d5e47548c9aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:0d:08:02:2b:c2:77:52:17:53:4e:87:46:
9d:17:74:e6:37:19:d1:5d:26:a3:68:08:77:76:f6:
e1:4e:1b:20:61:64:5e:bb:a9:f4:a8:19:7a:85:08:
55:6e:4e:22:ef:9e:79:60:7b:5c:cb:15:35:c4:0b:
38:80:43:0e:68:01:33:68:d7:33:e0:84:47:dd:3e:
3b:57:7e:f6:b4:91:6d:fc:ef:fb:f4:4f:97:dd:76:
ac:a9:59:c8:59:49:97:74:1c:eb:56:6e:c5:b7:a2:
dd:96:20:f2:2c:40:fa:35:ef:b9:f1:b2:ef:2d:64:
2b:f2:5c:ce:b4:d8:d0:94:c5:f2:76:a9:dc:30:5d:
41:9e:ab:3f:3e:c3:59:70:c8:6f:bf:9d:8c:1d:c5:
08:75:f9:e6:25:e3:66:7a:31:33:86:57:65:c0:29:
a7:9b:53:4d:83:40:e6:90:23:e3:5b:22:d1:7e:8c:
a4:79:a8:b4:d7:79:e7:31:36:48:66:08:b0:4d:45:
0b:3d:db:2c:f5:4d:05:59:23:ad:2d:26:8b:12:8b:
cd:1b:f1:0f:51:b2:55:d7:82:67:30:55:c2:d2:7d:
ac:f5:d3:15:b3:af:74:65:db:e1:d3:72:ed:f3:6b:
01:7a:f1:4e:62:79:b2:1e:ce:ff:10:f0:27:96:6b:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:D8:F5:77:0F:AF:52:24:F9:5F:65:E4:D5:E4:75:48:C9:AF:F6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/C6PY9XcPr1Ik-V9l5NXkdUjJr_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
52:95:f0:db:80:e4:77:17:5f:87:95:cf:11:80:c2:6e:96:ae:
49:4f:4e:44:3e:27:b7:b3:29:0f:73:5e:1c:55:78:4b:6d:7e:
2b:5b:54:50:7a:0a:84:5c:87:44:27:57:fb:b8:e3:eb:59:cf:
f1:ed:71:be:07:51:54:98:f6:60:13:e2:37:64:47:b1:2c:cc:
82:c1:a5:03:f4:25:8b:39:d4:a6:f7:3d:06:17:ed:9e:09:6d:
94:9b:3b:86:02:fb:18:9c:88:45:b8:f6:81:74:1f:61:3a:bb:
d3:bb:86:84:da:1f:3c:8d:0b:37:fb:85:a8:01:8d:96:01:d0:
7b:e7:d4:5e:26:48:be:01:fb:e9:49:cb:7f:0c:ed:1a:fc:e5:
b7:f1:cd:80:00:37:54:1b:90:9e:f0:b6:f5:fd:a7:92:a7:04:
14:d2:78:6d:34:cb:d4:6a:ba:8f:6b:1a:1e:df:f9:31:d1:05:
4f:57:d6:35:f5:f5:55:81:1f:37:bf:58:80:b2:e0:2b:4b:ff:
38:fb:ee:9c:08:bc:64:5d:53:fd:bf:d4:c4:2a:e4:c9:30:41:
9c:78:63:01:17:96:b5:ef:d6:dc:7f:d0:54:86:8a:10:b0:73:
c6:ed:68:a1:18:82:4a:24:7f:77:00:32:03:d8:b2:0a:d2:68:
35:9c:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:58 2026 by rpki-client