Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OvjEX6s0-L_3bO8X9XZRbJ1ymNw.roa
File: OvjEX6s0-L_3bO8X9XZRbJ1ymNw.roa (raw, json)
Hash identifier: PHMJnUXycUlUapWjL3a/KIAjNowsqcMe+S6PmaUBdNo=
Subject key identifier: 3A:F8:C4:5F:AB:34:F8:BF:F7:6C:EF:17:F5:76:51:6C:9D:72:98:DC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A7B7220DB02DCED0EBCAE888D860
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OvjEX6s0-L_3bO8X9XZRbJ1ymNw.roa
Signing time: Thu 09 Apr 2026 14:08:27 +0000
ROA not before: Thu 09 Apr 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396562
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a7:b7:22:0d:b0:2d:ce:d0:eb:ca:e8:88:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af8c45fab34f8bff76cef17f576516c9d7298dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:e6:59:a0:db:df:ef:ff:b2:dd:7a:43:9f:
29:16:4c:50:e3:fb:1d:f2:e7:28:11:c1:fd:bc:57:
90:75:f3:9b:c7:de:f4:3f:e2:d3:ab:98:9b:51:5a:
be:e4:ec:8a:e4:c3:0d:61:ac:f2:aa:48:a5:a5:67:
73:d1:63:a5:53:dd:c5:83:9b:32:82:d5:23:09:bf:
5f:ea:c9:b3:05:11:c3:34:38:c2:d7:1c:0f:dd:0a:
7a:ec:7e:e7:16:17:fd:37:97:24:41:12:6c:cb:cb:
64:25:77:6d:ea:a1:40:c9:92:d4:13:72:29:ea:12:
d4:6c:ea:e6:f5:43:8a:26:d0:fb:9e:ba:46:aa:9e:
e3:e5:96:ab:f0:3f:86:f8:8f:9a:69:34:d7:74:2a:
b9:35:4e:dd:9d:fe:91:36:9b:38:97:27:68:56:c4:
99:d1:e4:5d:fc:47:0a:d5:b3:cd:4a:03:ac:9a:71:
7d:94:33:21:1d:84:01:80:b5:56:85:cf:82:06:e3:
fd:33:7c:38:a6:51:7a:6f:94:50:95:ca:2d:a4:b5:
64:a2:ca:ec:f4:11:7f:83:72:df:02:c2:25:23:f1:
22:ff:9b:2b:b2:61:89:8d:0c:67:73:bb:cc:c0:20:
0c:64:66:0a:f3:9c:fb:7d:12:94:6f:4d:52:ba:5c:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:C4:5F:AB:34:F8:BF:F7:6C:EF:17:F5:76:51:6C:9D:72:98:DC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OvjEX6s0-L_3bO8X9XZRbJ1ymNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
97:ff:4c:3d:20:c9:d5:a5:12:16:d6:37:eb:03:bf:e2:00:b8:
0c:cd:ac:47:c2:0e:c0:34:64:81:d2:f1:99:9c:28:cd:e4:fd:
72:60:8f:8d:6e:92:b9:06:76:10:fe:22:57:42:62:47:c5:f3:
16:22:11:0c:b1:be:06:37:ca:15:86:1f:2b:ed:9e:c5:d7:cc:
00:f9:5a:2d:8e:68:40:4c:99:8d:9d:5b:63:0b:77:06:e0:c3:
23:c4:c3:c8:e0:13:c3:5e:40:26:d7:c6:35:ac:c0:55:04:2e:
cb:71:95:4e:b4:46:84:97:f5:06:4b:97:9d:cb:99:ff:a6:4e:
24:e1:52:63:9f:5e:c2:61:66:50:32:57:95:3d:dd:37:20:ba:
21:97:09:04:74:80:f9:06:30:d6:03:91:5a:b0:1b:bf:b5:7e:
f1:01:98:08:7f:5d:99:ab:16:cd:e7:a8:ae:a4:92:a3:9f:7f:
2b:09:8f:8a:8a:02:f5:18:bc:0e:73:e2:14:ac:cd:59:b1:21:
72:a6:55:bc:19:88:64:3a:c9:d2:5d:bf:90:5d:8f:cb:54:1b:
5f:50:33:01:0b:ff:1a:c3:d1:30:c3:df:21:40:1d:be:e3:30:
2b:41:34:e3:fb:ef:2a:15:50:5b:99:59:02:ec:75:3f:d9:60:
76:3c:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:05 2026 by rpki-client