Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G8pWSSnTis-tNte2i81rFY1QTRU.roa
File: G8pWSSnTis-tNte2i81rFY1QTRU.roa (raw, json)
Hash identifier: PgFQTEePc74Q5KQrWdmxnz/5qPtVLeMLXKz4imI1TbI=
Subject key identifier: 1B:CA:56:49:29:D3:8A:CF:AD:36:D7:B6:8B:CD:6B:15:8D:50:4D:15
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C86581BB7CF1807BA9FA8ABB7461
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G8pWSSnTis-tNte2i81rFY1QTRU.roa
Signing time: Thu 09 Apr 2026 14:08:35 +0000
ROA not before: Thu 09 Apr 2026 14:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397204
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c8:65:81:bb:7c:f1:80:7b:a9:fa:8a:bb:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bca564929d38acfad36d7b68bcd6b158d504d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:8c:8a:4a:cc:ed:54:8a:a5:f3:f7:3b:a6:
cc:3a:42:16:20:ff:b2:12:fe:ce:1c:18:1f:d8:8d:
37:47:c0:8e:03:8a:75:a3:8e:a5:37:d2:31:66:e7:
32:c0:7d:7c:d0:0d:c4:4b:bc:3c:23:d3:e1:ea:fc:
98:4f:6a:e9:2e:8c:38:c2:29:f3:3c:53:7e:ae:cd:
01:2f:c8:6e:b4:3b:96:cf:7e:39:52:5a:30:b5:b3:
ba:cf:b5:50:49:50:37:a0:a1:2f:36:ec:6d:d0:e8:
d8:d9:c0:56:85:a8:ee:9c:00:35:03:ce:25:31:c6:
f6:60:c2:11:a0:a2:a8:5b:ff:c1:97:47:8c:3c:d5:
38:cc:37:92:89:25:39:1d:e7:dc:20:71:c4:d0:cf:
f3:04:04:50:7c:9a:a7:0c:c4:a1:a3:72:f5:e8:a6:
61:fd:f5:1b:f1:89:0c:f7:5a:df:07:2b:84:3c:0d:
14:2a:64:31:aa:a9:22:56:1f:1d:d3:8b:b2:f2:47:
bb:69:36:58:aa:be:02:8e:3a:88:b7:7a:aa:1d:8b:
de:8e:fe:1b:8d:f1:ef:23:bd:89:4c:3f:65:1d:f6:
85:b0:df:72:da:01:65:2b:39:09:61:ec:a7:aa:6c:
f3:a9:08:b4:cc:b6:cd:64:a5:97:6c:a0:24:01:e6:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:56:49:29:D3:8A:CF:AD:36:D7:B6:8B:CD:6B:15:8D:50:4D:15
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G8pWSSnTis-tNte2i81rFY1QTRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
97:a1:3f:f3:6d:5a:4b:76:ac:09:dd:45:2f:04:53:48:6f:9d:
16:68:c1:a2:a2:fd:3c:b5:e4:60:36:a3:fb:01:4b:91:18:6e:
a4:31:38:02:1e:72:84:e8:bc:58:12:db:0b:18:e8:82:58:2d:
6a:9a:5e:e3:f8:0e:f4:61:54:6a:83:0a:2e:c1:9f:49:f5:c0:
ac:2d:cf:ca:83:01:1e:4d:b3:24:e7:8c:f7:73:70:3d:19:83:
69:39:5f:87:46:fb:7d:60:9b:2b:41:e6:16:b3:d0:da:14:fd:
6c:8c:f0:11:e9:b7:2a:fc:b4:a2:4b:ef:0d:92:4c:16:d0:c1:
97:91:13:c4:9f:9e:56:da:7f:46:20:73:94:8f:c8:c8:78:40:
eb:1c:aa:90:a3:0c:d0:2c:de:3c:02:39:e0:54:75:fc:86:01:
b6:fa:b2:e3:19:4b:73:19:86:52:fd:20:0a:e2:89:dc:68:49:
54:a0:1c:c8:88:0b:e1:e4:a9:76:8f:74:0e:e1:f7:76:d9:bc:
3a:65:a7:7c:27:ba:84:77:f9:2e:71:1b:87:be:5d:a8:29:55:
9d:49:92:cf:ed:83:e1:76:5f:97:40:40:ed:f2:28:2a:fb:f8:
9c:8a:14:40:1e:90:87:ee:96:28:b9:5e:b1:28:c4:0e:24:15:
13:a2:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:50 2026 by rpki-client