Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OsGbI_JZxEsu7KelYwPRvI3o76s.roa
File: OsGbI_JZxEsu7KelYwPRvI3o76s.roa (raw, json)
Hash identifier: FS4zLJPYt5ExtucIr7mJYEBQowuDtGoRFKLNF0OURNc=
Subject key identifier: 3A:C1:9B:23:F2:59:C4:4B:2E:EC:A7:A5:63:03:D1:BC:8D:E8:EF:AB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C09125E7CC7ED9EE98AE1CA26EC2
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OsGbI_JZxEsu7KelYwPRvI3o76s.roa
Signing time: Thu 09 Apr 2026 14:08:33 +0000
ROA not before: Thu 09 Apr 2026 14:08:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396614
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c0:91:25:e7:cc:7e:d9:ee:98:ae:1c:a2:6e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ac19b23f259c44b2eeca7a56303d1bc8de8efab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:b3:b6:43:fe:f1:83:67:d5:fc:59:55:55:
65:9d:20:63:e0:22:57:45:d5:68:dd:92:5b:42:ca:
68:36:82:79:cd:43:c7:a8:ba:40:63:fb:d0:9d:21:
d7:4f:4d:1a:40:7c:6d:15:89:00:58:f4:3b:b2:fb:
0f:2c:d5:12:26:a8:3f:69:a7:52:e1:cf:d2:73:1e:
3d:6b:db:7c:90:19:ed:63:c9:78:76:c7:9d:1f:d2:
ae:e7:3f:0a:b4:c8:f8:95:f7:40:52:eb:55:94:06:
3f:8c:69:5d:20:0a:5a:a6:f3:bf:56:62:50:fd:51:
ef:28:c9:42:f9:47:32:db:56:63:2a:03:d5:ec:ce:
46:bd:ca:46:9e:30:c4:b2:32:dc:6c:2e:04:8b:35:
fb:93:2e:07:9e:70:72:1f:f2:5c:a0:0c:6a:b9:7d:
38:3b:14:e4:b5:61:e5:5d:a9:80:13:83:ff:65:2e:
ee:43:de:b8:3e:0a:c3:ce:34:1a:51:f9:fa:ff:53:
84:d4:4c:88:c4:bf:2f:cd:34:ec:5a:c8:ac:8b:f7:
87:ff:04:99:42:97:0d:ed:07:82:1a:de:7d:65:92:
9e:66:4a:64:34:9f:92:b2:fb:c8:74:9e:35:6a:97:
2d:d4:16:fe:7d:c7:8a:ce:5c:4b:c8:f1:0c:7b:2e:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:9B:23:F2:59:C4:4B:2E:EC:A7:A5:63:03:D1:BC:8D:E8:EF:AB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OsGbI_JZxEsu7KelYwPRvI3o76s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
39:49:92:32:f7:42:b8:cc:52:83:7b:02:7e:f3:db:0b:e5:d1:
53:ca:0a:f7:7b:6e:a6:9a:31:68:f2:b0:36:1d:a9:14:c8:c9:
a3:58:6b:74:3e:3f:ae:e7:35:3e:a3:22:55:39:87:75:80:c8:
ac:9d:af:03:95:34:6f:9b:d3:ea:56:85:57:5e:63:87:d4:a3:
42:eb:46:a6:06:bb:9c:9c:63:c8:d8:07:7d:84:ac:95:95:12:
c9:82:c5:d0:64:bc:ce:63:ef:d6:71:a0:38:7d:4d:3c:c9:06:
2f:fb:47:95:1d:3d:d6:e1:34:76:bb:72:84:80:db:16:3e:49:
a5:4b:f5:2f:51:c6:c6:7f:42:8f:59:a4:f4:75:ec:0f:99:df:
74:46:57:0c:c7:8a:22:b7:e4:97:79:d6:b5:23:14:53:d7:95:
e6:86:ff:0c:af:30:d9:5d:81:52:71:57:d6:b0:58:37:49:68:
60:44:bf:0e:cb:7d:e1:b9:5f:73:dd:44:6e:2e:e8:7f:1b:59:
15:16:5e:f1:fe:32:ef:c7:72:8c:f6:1a:fe:8f:dd:64:c8:7e:
88:e3:c8:45:cf:15:3f:64:aa:39:28:61:d4:d9:d3:88:96:51:
5f:0e:0b:d4:e5:4a:d9:5d:a2:14:c4:f8:e4:06:30:e1:36:45:
e3:be:d6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:43 2026 by rpki-client