Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FgphRhf2K013vh2LiU-mEa0Ein0.roa
File: FgphRhf2K013vh2LiU-mEa0Ein0.roa (raw, json)
Hash identifier: DzUo4Rs7w9da/LCiM5D3mrd9LcQZ93Q0X7i9pkOP0qA=
Subject key identifier: 16:0A:61:46:17:F6:2B:4D:77:BE:1D:8B:89:4F:A6:11:AD:04:8A:7D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292BA9B0158DCE989F16304704B81C0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FgphRhf2K013vh2LiU-mEa0Ein0.roa
Signing time: Thu 09 Apr 2026 14:08:31 +0000
ROA not before: Thu 09 Apr 2026 14:08:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396604
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ba:9b:01:58:dc:e9:89:f1:63:04:70:4b:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=160a614617f62b4d77be1d8b894fa611ad048a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:1f:70:79:09:4f:81:1a:9e:12:58:fe:04:
fb:a6:10:b6:c5:cf:18:fe:01:5e:db:09:86:e1:d7:
4c:34:6a:91:ff:df:e3:08:f0:86:be:a6:a7:ee:eb:
ed:99:8e:db:50:d9:24:87:53:6f:bf:a0:74:53:79:
f1:39:a8:6b:d1:de:26:0c:72:e8:9e:31:91:4b:65:
29:db:a6:d0:2e:f1:d4:db:61:cd:ca:0b:a0:ff:84:
5c:93:5d:17:b6:55:1f:14:9e:d4:d8:2b:00:48:b1:
3e:7c:a2:e9:03:6f:e7:3a:a4:09:43:0d:b5:72:37:
88:bd:00:30:af:73:b1:22:e3:bd:82:21:10:74:16:
d4:14:25:c2:a9:1e:3e:c0:7a:6e:54:84:61:55:42:
58:54:3a:c8:ea:f0:16:2a:79:05:93:1a:ac:e2:cf:
fd:ee:c9:97:24:f6:7c:34:4f:12:92:74:b1:fa:0f:
23:4c:d4:f0:83:f4:de:03:41:8f:af:6d:11:0e:49:
96:39:62:f6:da:2c:00:b8:c4:88:0a:94:f5:08:db:
0a:2c:94:fc:fe:86:1a:77:b4:fc:0e:9a:57:18:57:
bf:93:dd:ce:45:8d:fe:32:88:18:5f:65:dc:8f:72:
73:b0:fd:22:9c:19:9e:6b:1a:e5:94:8d:91:f8:40:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:61:46:17:F6:2B:4D:77:BE:1D:8B:89:4F:A6:11:AD:04:8A:7D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FgphRhf2K013vh2LiU-mEa0Ein0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
33:4f:86:ec:21:c6:70:27:19:1b:fc:4f:61:13:19:d1:b5:ea:
c5:65:d8:e3:30:9b:8d:91:ca:46:49:e6:0b:df:e8:cc:87:91:
04:70:7a:7a:d4:ec:d4:24:71:51:5b:89:e7:80:7e:3b:d7:4b:
45:e9:a6:39:f3:3f:37:96:72:3c:3c:80:bf:66:5a:c1:26:58:
e5:90:b3:b8:aa:09:2c:65:0a:8e:fb:cd:13:30:69:79:0f:38:
df:ef:d7:33:f1:8a:2b:2f:f1:4c:09:89:ec:d8:63:bb:a6:70:
1b:91:54:61:37:b5:b4:8b:03:d6:ae:94:ae:29:1a:9d:8b:e3:
43:a8:d4:22:cb:38:bc:f1:52:f8:2e:15:a1:e6:b3:a7:4c:68:
df:c5:7e:42:e7:2a:a1:49:08:74:20:ff:85:8a:3a:9a:f1:d7:
c9:27:a0:3a:7e:82:3d:47:b1:b8:8a:61:9c:6b:57:d9:c0:68:
61:72:3a:53:33:34:49:f6:17:e1:dd:27:06:66:c3:b8:d9:cb:
ea:bf:7f:b3:c0:5c:43:ca:0b:fb:26:7e:87:a5:4d:68:3a:c6:
6b:9f:9e:32:c5:a7:5b:52:b8:20:a3:60:dd:90:71:17:6e:b7:
8f:5f:59:57:43:a5:0d:11:dc:56:d1:6c:2a:33:e3:72:1e:7d:
2e:8d:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:37 2026 by rpki-client