Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/E9onGpT1UeTNwtKMkrMjZdeMOvM.roa
File: E9onGpT1UeTNwtKMkrMjZdeMOvM.roa (raw, json)
Hash identifier: NVkd93L1sUdWErCnxpNoLjD+GqLb2FvZz45OYsuD84w=
Subject key identifier: 13:DA:27:1A:94:F5:51:E4:CD:C2:D2:8C:92:B3:23:65:D7:8C:3A:F3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292AA3B8FDA334ED72C57A479924EE5
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/E9onGpT1UeTNwtKMkrMjZdeMOvM.roa
Signing time: Thu 09 Apr 2026 14:08:27 +0000
ROA not before: Thu 09 Apr 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396567
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:aa:3b:8f:da:33:4e:d7:2c:57:a4:79:92:4e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13da271a94f551e4cdc2d28c92b32365d78c3af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:09:44:7f:51:47:f9:c8:a9:32:64:82:9d:
dd:57:8b:35:19:07:99:79:97:ee:69:2c:af:64:fa:
60:a9:23:db:d7:0c:13:e5:00:3f:5f:4e:18:40:ba:
b4:07:01:03:ac:8f:97:cd:27:28:af:5e:a8:f2:1e:
de:f9:03:6e:7b:48:40:06:37:7f:1b:68:38:5c:60:
a2:9e:0a:c2:f1:27:e8:96:2a:32:48:e1:94:02:11:
60:7f:15:13:cb:62:7e:0d:1f:89:ae:79:ae:e7:a6:
4f:28:c3:79:cb:fa:dd:7c:5d:a1:49:db:26:9a:32:
6a:e3:4f:45:a6:2d:23:93:0e:2c:9c:75:e5:e8:3d:
cb:83:96:cf:6f:1c:2d:8e:f0:6c:39:3a:dd:f6:c6:
71:ba:5b:d1:0e:f3:c2:c3:ef:59:b4:62:b7:a7:66:
ab:39:ed:71:06:5e:b1:c0:58:bf:69:0d:21:4b:f3:
28:d1:5c:48:d4:b8:41:8d:96:56:d5:21:b0:43:fe:
31:d4:a7:ba:53:f7:f4:9b:ad:60:83:9a:ac:15:f8:
fd:74:fe:65:35:9a:44:86:1f:0a:91:59:6e:0c:99:
0b:60:c3:ea:c6:06:21:54:9f:3b:1d:70:4c:4f:14:
f5:46:49:da:77:86:11:c2:31:3a:4c:6a:30:c5:4e:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:27:1A:94:F5:51:E4:CD:C2:D2:8C:92:B3:23:65:D7:8C:3A:F3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/E9onGpT1UeTNwtKMkrMjZdeMOvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
8b:6e:10:cc:7f:ca:72:1e:b5:99:eb:89:25:84:16:25:b0:8b:
87:a1:b2:f2:9e:56:32:c4:65:b9:3b:9c:33:2c:7d:ec:dd:73:
ea:52:a9:a7:d7:c8:33:12:c5:3a:f9:e7:71:69:3b:f2:58:7d:
78:2c:7a:cd:6c:be:c3:be:79:09:53:ee:51:73:4e:ec:32:4a:
e1:8c:be:85:1d:fc:b9:68:bd:f8:0e:c7:0f:94:87:21:a9:52:
1e:8b:73:58:f2:1a:fe:c4:72:ba:eb:79:78:40:ae:f8:a1:2a:
e0:a2:e0:db:ae:69:fc:fc:2d:be:74:66:7d:61:44:56:60:94:
ba:ad:46:15:6f:8c:45:5d:30:a7:4b:63:9a:1f:57:0d:12:08:
0b:f1:cb:0b:37:5d:69:e1:37:06:20:32:87:4c:56:7e:d3:ed:
53:65:cd:82:56:7c:b2:5f:92:f6:6d:3e:ea:2a:9e:ce:bd:d7:
5e:6c:a5:e4:7e:3f:ab:c9:62:a0:62:77:19:39:a9:35:13:d4:
0b:ac:94:05:48:15:73:7d:a3:c0:c6:48:3b:a1:d9:3f:6f:e5:
65:d2:98:ea:be:0c:3d:2e:c1:7c:98:9d:bf:25:5c:73:c3:bb:
97:c5:53:2a:47:6b:10:9d:d8:2e:cb:05:b4:c1:e1:ee:59:6d:
e5:06:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:13 2026 by rpki-client