Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/I3dfatLraV6b7VTWWT4F3V98vO8.roa
File: I3dfatLraV6b7VTWWT4F3V98vO8.roa (raw, json)
Hash identifier: hsA8O64QgTSZL/6DHfUKS65K3gDBeA1iI3wN73GAl9g=
Subject key identifier: 23:77:5F:6A:D2:EB:69:5E:9B:ED:54:D6:59:3E:05:DD:5F:7C:BC:EF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929CF87A7FC48BDB48394CF6F6291B
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/I3dfatLraV6b7VTWWT4F3V98vO8.roa
Signing time: Thu 09 Apr 2026 14:08:24 +0000
ROA not before: Thu 09 Apr 2026 14:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36630
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9c:f8:7a:7f:c4:8b:db:48:39:4c:f6:f6:29:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23775f6ad2eb695e9bed54d6593e05dd5f7cbcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:f0:06:a1:f4:4b:ac:ad:4e:23:0d:f4:02:
f5:16:13:d6:77:47:28:30:bd:50:86:91:49:0a:f3:
0e:64:ee:25:96:63:de:b1:9d:3f:9f:70:65:a5:0f:
3a:63:aa:a4:9f:9e:f9:28:97:3b:71:e2:68:a2:b8:
ab:f9:b5:c6:e1:98:51:9e:81:1f:b7:1b:61:75:76:
64:40:e5:6d:23:80:b3:e5:f1:ff:07:3b:3e:2f:ca:
e6:18:21:2a:e3:84:7b:b4:2d:0e:5c:7e:5e:25:f0:
55:79:c6:a4:6c:26:13:5e:29:bf:d4:63:c9:1f:8a:
aa:65:77:37:a8:1c:cd:8f:a2:a1:0c:2a:0b:96:8f:
17:a7:cd:2f:4a:b3:c1:ae:30:4b:03:78:fd:6a:8e:
c6:df:38:6e:0d:77:fb:fe:6d:6d:cf:ec:0d:1d:95:
40:3f:7b:c4:7c:63:12:20:58:5e:cc:20:99:36:56:
10:36:0c:46:14:b3:6f:26:a2:e8:0f:d8:28:58:95:
90:94:3f:d5:de:6c:29:72:7f:37:4a:c4:30:d6:9b:
2d:17:6c:65:d7:10:e5:8b:e2:cf:bf:9b:90:ff:4d:
01:5e:8d:c4:d1:e0:c4:ba:82:6e:7d:bb:ab:0c:32:
4a:e3:b8:be:c2:21:e0:e1:82:11:ab:3b:26:cb:1f:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:5F:6A:D2:EB:69:5E:9B:ED:54:D6:59:3E:05:DD:5F:7C:BC:EF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/I3dfatLraV6b7VTWWT4F3V98vO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
bc:fe:d5:91:89:20:6a:75:ca:64:bb:62:cc:15:56:29:49:9b:
f7:99:9c:de:cd:e3:7c:1a:73:ee:9f:d9:a7:55:94:e0:24:6a:
e9:53:b1:84:89:33:7e:f5:1f:c6:bf:d7:0f:2f:e3:78:57:5d:
6d:a7:4a:31:9a:30:90:9f:50:23:8a:f4:b3:01:03:e1:de:1f:
68:d8:d1:bc:c0:d9:f1:91:be:c3:28:16:a0:61:25:dc:8c:8f:
ea:c2:49:10:7e:c1:59:07:63:9a:5b:37:a3:65:8e:d0:2a:74:
20:3e:bd:14:32:7c:16:8a:05:26:b3:b7:49:59:32:fc:31:09:
65:fc:00:bb:92:33:12:7e:03:95:d6:da:15:ad:43:76:4d:00:
be:a6:f6:86:4e:02:67:19:38:22:73:22:db:fc:c5:36:2b:e5:
8c:1c:33:63:06:a4:b7:ef:fa:1d:71:ff:f7:81:8c:02:9e:b7:
bf:a9:52:4a:e9:a2:ea:d2:37:a4:de:9d:bd:3f:43:d0:22:9c:
1f:cd:f1:42:b1:41:fc:21:a8:21:b5:eb:b6:80:51:eb:2a:73:
b6:76:73:fb:e5:2f:0d:3c:c9:c3:41:5e:a3:65:11:03:a8:5e:
e2:3f:c0:59:99:b9:cc:4b:44:30:8d:b4:4e:0a:c9:39:72:94:
11:7f:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:40 2026 by rpki-client