Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CXaaebnwHcajSTHytW5R9lCzu20.roa
File: CXaaebnwHcajSTHytW5R9lCzu20.roa (raw, json)
Hash identifier: CiYFRfRV93rOxUgH5v0UDT80zdxDhyQRwWkosjjxaWc=
Subject key identifier: 09:76:9A:79:B9:F0:1D:C6:A3:49:31:F2:B5:6E:51:F6:50:B3:BB:6D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292AD0E2ECD21C964C5B97757599C86
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CXaaebnwHcajSTHytW5R9lCzu20.roa
Signing time: Thu 09 Apr 2026 14:08:28 +0000
ROA not before: Thu 09 Apr 2026 14:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396574
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ad:0e:2e:cd:21:c9:64:c5:b9:77:57:59:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09769a79b9f01dc6a34931f2b56e51f650b3bb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:55:b4:d7:50:0a:0b:6a:b0:78:43:c9:98:
e1:0f:67:4c:ef:48:ad:b5:31:25:69:74:d2:98:58:
bd:18:e3:ce:28:77:9a:d7:e5:93:92:f1:b8:08:03:
39:81:34:e4:a5:f8:df:ba:c1:bd:6b:0c:89:e5:98:
b5:44:54:ce:eb:b1:32:ba:af:66:bb:32:e7:1a:3a:
e8:32:3a:36:06:02:30:d5:bb:b5:68:59:c2:a5:32:
86:98:83:4c:db:81:06:1a:84:53:8f:20:87:5b:88:
15:27:fd:39:aa:c3:0a:17:fa:4b:35:84:4f:73:09:
65:e1:b5:5f:fe:d4:64:70:f4:d2:a4:90:7f:10:ee:
47:74:dd:69:cc:99:bd:9a:e0:e5:4c:4f:60:1c:f8:
47:b4:8f:92:34:52:ce:bc:5a:c4:f7:1f:20:28:22:
a9:f1:34:c3:74:43:e9:96:a2:6a:cb:34:01:b4:d8:
19:2b:36:2b:eb:13:f8:bc:09:84:e1:8b:0b:51:7d:
bd:0d:d8:56:5a:cc:14:58:d7:43:44:9b:b7:17:b0:
99:10:71:7c:e4:b1:15:74:e5:ae:2b:90:2e:0f:de:
34:f9:5a:aa:08:34:66:f9:8c:f5:ca:17:ba:ad:70:
df:af:10:9c:3f:0f:c3:ab:ec:30:86:b1:1d:13:63:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:76:9A:79:B9:F0:1D:C6:A3:49:31:F2:B5:6E:51:F6:50:B3:BB:6D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CXaaebnwHcajSTHytW5R9lCzu20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
33:55:d8:0c:3f:9c:2a:80:31:56:8d:77:01:a3:66:02:b8:c9:
4a:b5:d7:ee:3c:d1:c1:e9:10:f8:be:02:1e:ef:9a:49:80:38:
c3:4b:8c:a3:cb:0f:43:f0:79:9a:d9:f7:bd:be:ce:5a:8a:9c:
2f:14:2a:d1:e9:84:27:de:c6:b8:73:03:25:63:a0:1e:9a:c5:
eb:b1:09:c4:36:12:3a:b6:4c:74:44:64:c9:1b:74:9b:f1:3d:
08:a4:01:97:92:c1:7e:31:f5:dd:b7:73:bd:2c:8f:61:c3:2d:
fe:68:70:b4:9c:04:13:fa:e0:21:b1:f7:4b:86:fa:7a:72:e1:
6f:7c:b2:af:55:ca:87:31:72:f1:f0:3f:7c:65:5b:ca:1a:0a:
f5:0d:92:49:1e:90:bb:84:be:8a:fa:c3:2a:b8:6b:a2:b6:e7:
8f:9e:7c:ce:88:49:8a:ad:e8:e6:6b:66:6b:e4:7d:11:33:ae:
47:65:a0:db:29:72:92:30:92:50:f4:1f:f5:96:ea:8a:0a:12:
ed:05:a7:b6:1a:25:4b:d3:34:72:92:20:53:9e:eb:cb:b9:d2:
cc:c9:49:a2:a2:a2:67:c9:b6:ec:44:83:ac:67:c2:1f:f4:51:
69:ba:59:d8:db:eb:df:fe:05:52:52:41:1d:8e:09:86:d0:29:
0a:4c:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:12 2026 by rpki-client