Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HSQmkcuBA_UysN_YFRsOgrVP3Eo.roa
File: HSQmkcuBA_UysN_YFRsOgrVP3Eo.roa (raw, json)
Hash identifier: LAleHJvw1gW2G0ZDbqt7VAjx/GTvbDxqsI/4tydwX9I=
Subject key identifier: 1D:24:26:91:CB:81:03:F5:32:B0:DF:D8:15:1B:0E:82:B5:4F:DC:4A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929DC72FFDB1E54661EF171B6628E9
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HSQmkcuBA_UysN_YFRsOgrVP3Eo.roa
Signing time: Thu 09 Apr 2026 14:08:24 +0000
ROA not before: Thu 09 Apr 2026 14:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36632
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9d:c7:2f:fd:b1:e5:46:61:ef:17:1b:66:28:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d242691cb8103f532b0dfd8151b0e82b54fdc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:39:a6:85:a3:70:dd:7d:b4:5f:e9:37:c0:
2a:14:2e:85:1e:3b:74:96:c8:da:72:33:0f:7c:6a:
b3:24:b1:de:c8:21:36:c9:3b:8d:a3:3f:72:79:3a:
4d:91:c3:98:4a:0a:86:24:cb:20:f7:4c:52:55:94:
e3:85:0c:48:33:44:04:4a:66:f9:fb:35:28:c1:d7:
64:b2:97:47:b2:ff:42:aa:f6:29:6a:c4:64:2b:72:
57:62:15:8b:3a:ee:c9:6c:f5:85:55:8d:1e:be:6b:
c1:80:0c:32:52:09:68:a2:3e:bb:79:20:6b:dc:06:
5e:77:1f:01:59:53:04:24:1d:39:19:23:3b:bf:fd:
43:60:ec:ff:1e:16:34:86:fa:1a:54:be:4d:7d:7b:
7d:ff:c1:05:b9:10:de:96:36:06:75:80:8e:b5:3f:
db:63:00:b5:a9:ea:71:2c:b7:c7:53:c5:d3:1e:21:
ce:71:8a:c7:08:fc:e9:54:60:bc:fa:31:e7:81:33:
74:5c:48:2f:cc:07:a1:7c:9e:6b:f7:92:75:a9:bd:
19:86:3a:8f:3c:30:af:17:4d:e2:2b:3d:5b:d7:f4:
f0:26:26:96:28:38:d0:ee:62:ad:6c:30:ff:7d:2a:
2c:58:f8:c2:b0:f2:1a:6d:a2:9d:f2:ca:8b:34:0a:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:26:91:CB:81:03:F5:32:B0:DF:D8:15:1B:0E:82:B5:4F:DC:4A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HSQmkcuBA_UysN_YFRsOgrVP3Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
87:20:57:82:5e:42:90:b3:38:ca:dc:07:07:0f:95:5f:fd:ff:
83:55:38:87:9f:ba:1d:ce:c5:8b:cf:e7:32:92:d5:a2:02:1a:
0e:ff:e6:20:b0:ee:b4:36:78:37:68:65:47:4e:96:69:94:7b:
a5:23:17:f9:7b:1c:f6:34:b5:3d:99:b7:6b:0e:01:1d:72:8a:
ad:96:6b:92:c1:a2:8f:e9:8f:ad:94:b2:e5:44:dd:f5:4b:a7:
fb:f6:f1:fa:2c:3e:d0:10:bb:1f:6f:e5:70:d7:6d:3e:a5:e0:
c8:2e:bc:34:64:76:0c:20:de:81:a1:ed:9b:d6:65:8a:2e:b6:
08:26:85:39:e3:22:66:23:35:51:e3:d5:0e:b7:6b:66:ff:14:
37:8a:6c:f7:a3:7b:db:43:88:42:1c:f9:a7:64:53:f8:21:b3:
9b:9d:70:2e:f6:84:d6:c9:44:e6:1d:3e:e2:8e:c4:16:93:44:
51:a4:46:db:b1:b8:c0:62:51:fd:9e:9f:a2:93:69:bb:6f:44:
e7:5e:24:61:70:bf:c1:fb:bf:7f:d3:e2:60:82:af:7d:85:06:
12:d7:7e:1f:9a:d5:1f:6c:93:ca:49:4e:48:1f:1f:8d:5a:50:
66:8b:82:c9:31:06:a4:b0:f8:dc:8d:62:16:7b:7c:43:3b:6c:
d3:d3:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:27 2026 by rpki-client