Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IIfzkPTjwPNYrm0jY1_AV2tb-2o.roa
File: IIfzkPTjwPNYrm0jY1_AV2tb-2o.roa (raw, json)
Hash identifier: WFfqWB1Tfq5CJ3+64aVRG90nfFsF+MXJeUUgiIsXBhI=
Subject key identifier: 20:87:F3:90:F4:E3:C0:F3:58:AE:6D:23:63:5F:C0:57:6B:5B:FB:6A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A80BC88F4BC71B7A148C59E76FA9
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IIfzkPTjwPNYrm0jY1_AV2tb-2o.roa
Signing time: Thu 09 Apr 2026 14:08:27 +0000
ROA not before: Thu 09 Apr 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396563
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a8:0b:c8:8f:4b:c7:1b:7a:14:8c:59:e7:6f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2087f390f4e3c0f358ae6d23635fc0576b5bfb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:b3:e4:8f:26:e7:b5:f4:e0:c0:df:79:d2:
b3:63:27:3b:01:46:76:cd:c1:e4:29:81:e3:13:e5:
d2:52:0f:d6:20:e0:c8:63:91:c9:ec:60:6a:8a:fd:
5a:0d:d4:e5:3f:55:c6:8b:54:43:b5:97:35:69:62:
5f:bc:a4:9b:07:e5:9b:b2:70:62:89:01:0e:74:85:
be:30:54:3d:ee:20:9d:75:f8:59:0d:ce:e3:cd:53:
8e:21:be:93:31:06:43:fc:2b:d5:1f:de:74:72:7c:
a5:20:d4:7e:0d:72:16:c9:c7:b7:de:20:fd:09:a5:
ec:34:6f:10:e2:2e:bc:5f:f1:4d:08:fb:4d:a8:5d:
e3:a8:28:d1:f6:36:57:ae:50:96:71:4a:e6:df:42:
b2:34:18:5e:5e:f3:cf:e8:73:c2:f2:d3:fe:1b:03:
2b:7e:0c:99:92:e7:c9:04:15:b4:ba:47:b4:c1:41:
5b:c6:39:36:40:be:7a:36:e8:70:69:3f:5b:71:78:
df:ef:b9:1d:00:56:16:aa:50:95:d3:79:6a:91:2e:
30:5b:fb:79:64:6d:a3:b3:6c:a7:f2:b6:d5:f2:f5:
d6:63:05:67:b2:b2:ad:bd:ee:66:bd:e8:2f:4a:45:
23:89:a4:a0:3c:19:cb:a4:7b:43:b7:1a:df:e3:26:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:F3:90:F4:E3:C0:F3:58:AE:6D:23:63:5F:C0:57:6B:5B:FB:6A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IIfzkPTjwPNYrm0jY1_AV2tb-2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
c3:eb:ec:ad:95:63:db:58:5c:28:e8:c2:09:9a:ec:a6:8f:08:
27:27:15:8e:10:d8:b8:5d:df:4e:11:6f:17:26:2d:10:42:7c:
50:1b:3b:9d:fb:d5:e9:50:4e:fd:ca:19:09:d4:57:9d:28:ee:
e5:dd:cd:b3:bd:96:85:7c:bd:36:61:6e:cc:da:24:7d:89:bd:
8c:63:b2:37:10:dc:63:e8:2e:14:83:06:db:b4:60:28:c9:7e:
9f:8e:4f:69:86:2e:3d:c6:d1:8d:1e:03:c1:a5:2c:71:df:b7:
a0:ae:f2:4b:67:d6:40:d6:1f:69:70:f7:bf:23:5f:da:74:68:
de:6d:60:87:ff:17:42:c3:b5:f9:f6:9e:7c:4a:ed:ef:5e:87:
5e:d2:5d:6c:34:12:0e:ca:b3:dd:13:2e:e9:72:e2:73:80:f3:
c8:cd:fe:8f:b1:0e:d4:f9:6e:75:cd:06:c8:ad:a0:5d:0e:e3:
f6:81:b4:c2:dc:2a:20:49:59:0d:fa:d1:38:db:5b:ea:2d:cd:
a3:6d:63:77:4f:84:1c:0a:55:fd:d5:74:62:4e:48:b6:30:d4:
f8:b8:79:23:20:50:fd:11:f7:c5:ad:44:4a:1c:be:9b:c5:76:
1e:c0:2f:72:2a:b7:ee:56:86:e8:06:aa:df:cd:14:52:69:11:
93:4b:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:12 2026 by rpki-client