Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DNDsqlY_s9ELeAtIWntSJ2aaKVc.roa
File: DNDsqlY_s9ELeAtIWntSJ2aaKVc.roa (raw, json)
Hash identifier: FVDFd1hnd/7uaBRdilXH36rf2kWItyXjwzUBKRIa6Qg=
Subject key identifier: 0C:D0:EC:AA:56:3F:B3:D1:0B:78:0B:48:5A:7B:52:27:66:9A:29:57
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929BE4F0DB44C4B0E5D42ED8E3DA6D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DNDsqlY_s9ELeAtIWntSJ2aaKVc.roa
Signing time: Thu 09 Apr 2026 14:08:23 +0000
ROA not before: Thu 09 Apr 2026 14:08:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36628
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9b:e4:f0:db:44:c4:b0:e5:d4:2e:d8:e3:da:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd0ecaa563fb3d10b780b485a7b5227669a2957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:61:90:54:67:65:d0:84:91:c9:d4:67:7e:
00:03:df:14:63:a0:7e:31:1b:56:8d:da:79:27:ba:
c7:37:d3:ff:94:5b:ff:95:53:ef:80:79:9e:60:18:
4b:6b:1b:37:ca:1a:d9:9d:28:fa:5f:08:76:f1:1f:
81:76:ba:8a:ff:8b:fc:34:5e:ad:4e:d3:79:ea:b8:
a6:31:dc:11:5b:1a:56:80:8c:69:25:31:3d:a7:d5:
2c:45:d3:97:76:be:d1:ac:a6:68:fe:69:2b:6e:9d:
c2:66:83:91:1f:55:3e:0a:61:5a:4f:e5:01:de:0e:
9f:67:ff:01:11:80:5f:7b:af:38:af:85:5a:78:ed:
69:63:dc:93:ba:36:9b:1f:b3:13:14:cf:d6:35:a4:
d4:b9:f4:b8:3c:cb:0d:8c:0e:dc:df:54:92:2e:76:
21:04:a0:7b:2e:a8:02:d3:2e:f3:85:81:75:ef:2e:
09:c1:5b:8b:b1:d0:0b:f5:ee:a0:55:5f:99:39:c8:
a3:db:bc:25:fa:72:70:89:be:32:a0:4f:1d:f6:6d:
12:cc:82:0e:e3:2f:90:ff:f6:56:a0:2d:c8:fb:0d:
3a:e9:f3:ad:44:87:30:8d:7b:65:49:5b:bb:98:c6:
af:86:0c:51:1b:22:66:ea:6f:c6:03:97:4a:5a:06:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:EC:AA:56:3F:B3:D1:0B:78:0B:48:5A:7B:52:27:66:9A:29:57
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DNDsqlY_s9ELeAtIWntSJ2aaKVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
57:4c:6c:b0:c1:4d:26:57:2f:bb:c6:ba:69:e7:e1:49:4a:af:
5f:75:28:a2:46:2e:03:15:0c:54:5f:ea:d9:53:c3:94:d7:6a:
50:de:99:88:06:a4:e7:24:e3:a0:ee:77:16:f1:8b:4e:ef:3b:
d0:45:dd:c6:e2:48:57:28:a7:23:37:80:7a:7a:60:95:32:19:
fd:e9:1a:87:9c:b2:14:d9:55:a8:67:83:f1:bd:48:82:cf:de:
62:e5:1c:10:70:0a:69:0c:12:44:a5:16:8a:02:71:b5:ea:12:
cf:47:2c:4b:54:8c:fa:e8:cf:13:9d:7c:c6:bd:b5:c5:06:28:
1f:0b:15:02:02:fa:b6:21:5f:a7:14:07:0b:9b:64:10:72:20:
8e:c2:8f:e0:7c:f2:fd:84:92:bc:e6:ad:78:0e:5f:e9:86:f9:
ab:e9:f2:e4:ab:e1:68:e4:d3:f3:80:c1:eb:42:5a:d1:27:a6:
31:49:68:f3:a1:4a:72:5a:70:7d:92:5e:e5:7b:ac:34:bf:e2:
46:fa:52:ec:e5:6c:36:70:fa:a6:8f:f3:d2:69:a9:c9:41:fe:
b7:c2:23:9d:e1:60:46:c7:f1:14:5d:b2:c3:13:4b:45:a8:c3:
00:f3:65:c8:86:6f:fd:6f:6d:19:61:9f:66:21:e9:12:a2:88:
03:4d:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:09 2026 by rpki-client