Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DM_V2dJ4Hk-2ywQFA3VcY3Db6sU.roa
File: DM_V2dJ4Hk-2ywQFA3VcY3Db6sU.roa (raw, json)
Hash identifier: mKp8nfxgsg0t0qZQy12F66ZX03B4ldoXBWKvKAwdPFc=
Subject key identifier: 0C:CF:D5:D9:D2:78:1E:4F:B6:CB:04:05:03:75:5C:63:70:DB:EA:C5
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292AE8E226C84FA9540B79ACE494E45
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DM_V2dJ4Hk-2ywQFA3VcY3Db6sU.roa
Signing time: Thu 09 Apr 2026 14:08:28 +0000
ROA not before: Thu 09 Apr 2026 14:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396580
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ae:8e:22:6c:84:fa:95:40:b7:9a:ce:49:4e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ccfd5d9d2781e4fb6cb040503755c6370dbeac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:92:1d:d9:c2:db:0d:65:fb:8e:1f:04:1c:
56:4d:92:f0:cd:a5:54:46:2b:66:f0:05:45:b3:e3:
12:fb:a4:e7:3c:1f:8b:cf:50:93:68:d3:fe:87:17:
c4:6a:54:9c:49:2a:17:e0:7c:b6:5e:1f:1c:5c:8c:
81:9b:10:41:29:bf:d2:a7:30:40:fe:94:d4:c3:bc:
c0:1c:fb:88:e8:ff:4d:81:aa:f4:1c:4b:da:0f:4b:
7a:11:b7:a7:22:57:b5:f2:23:2b:77:a6:11:18:61:
07:4e:da:4a:5d:62:10:7f:0f:a2:f0:8f:a1:01:59:
ad:0e:b8:f0:79:20:43:de:cb:6a:8d:d0:6d:f6:be:
79:49:79:02:39:60:ea:29:23:1c:d8:16:65:0e:99:
8f:27:06:94:39:f7:19:a5:a1:dd:8c:64:83:d2:d5:
a8:5a:fd:9e:0f:7e:ed:d4:ec:b4:35:b5:e1:67:72:
83:a9:dd:8f:2a:0a:04:ac:39:50:67:df:b8:df:e8:
5b:72:f9:75:21:6f:4e:04:d8:e1:25:00:65:ca:3c:
35:1d:f8:79:0b:1e:7f:2a:bb:a0:27:63:5a:df:b8:
13:0c:bc:69:aa:35:41:d1:61:4d:8e:7e:4d:0d:ef:
30:62:2e:ac:bb:72:7d:6f:50:87:3d:74:03:a2:ef:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:D5:D9:D2:78:1E:4F:B6:CB:04:05:03:75:5C:63:70:DB:EA:C5
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DM_V2dJ4Hk-2ywQFA3VcY3Db6sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
b3:35:27:f6:d7:2a:ee:01:74:ac:05:81:a9:a7:83:cd:46:a6:
63:ec:a3:48:3d:86:28:8a:55:6c:0b:95:ef:03:70:ac:76:25:
f5:fe:23:39:2d:5f:6e:12:21:67:98:5a:33:e5:7b:79:63:07:
7b:94:fa:5c:22:74:8f:27:28:88:e2:c3:e2:4f:e0:e2:bb:31:
91:47:6d:0f:b3:74:2b:26:e2:a7:4e:43:7a:e4:f8:9d:ef:1d:
c1:a7:dd:6a:4f:c7:ea:ae:94:d7:ea:ce:ca:b7:1d:38:c3:7d:
0b:68:ed:af:b9:08:17:05:b0:8f:75:30:81:a5:36:f6:94:a6:
18:bd:ef:30:0e:83:dc:a5:73:7b:5d:7a:49:42:a1:e3:98:a6:
27:c4:1f:e8:93:a3:ab:01:65:46:80:22:45:26:74:ef:5e:3f:
81:a3:d0:7c:26:2a:27:76:9c:e4:98:69:c1:c0:71:a9:c3:7b:
af:88:51:6f:99:8c:24:72:8f:e9:15:ad:c2:76:80:db:19:43:
bd:e0:97:9f:9f:2f:fd:70:94:7e:85:53:a0:04:ae:69:53:92:
0f:76:82:bc:89:f2:16:2a:02:c1:0c:45:59:e4:1c:83:e4:50:
17:9a:92:89:1f:c1:f1:f9:1d:c7:fa:48:17:23:6b:d0:fd:92:
f6:c6:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:31 2026 by rpki-client