Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OzLG4SiTJainnNb3baLo5sHD9u0.roa
File: OzLG4SiTJainnNb3baLo5sHD9u0.roa (raw, json)
Hash identifier: PKrExJaduXo4D7X7l5HgUSRyEunY+JHzSsr0enrE4X8=
Subject key identifier: 3B:32:C6:E1:28:93:25:A8:A7:9C:D6:F7:6D:A2:E8:E6:C1:C3:F6:ED
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D729292B9DB596EC99B418DE2B19AC652
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OzLG4SiTJainnNb3baLo5sHD9u0.roa
Signing time: Thu 09 Apr 2026 14:08:21 +0000
ROA not before: Thu 09 Apr 2026 14:08:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20431
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:92:b9:db:59:6e:c9:9b:41:8d:e2:b1:9a:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b32c6e1289325a8a79cd6f76da2e8e6c1c3f6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:e6:b6:6a:8a:98:f3:52:89:14:db:8f:c1:
59:ee:16:2b:b6:9f:2f:e9:96:28:05:77:e8:86:81:
e2:64:c8:7d:19:61:f7:83:ca:f8:0b:3e:78:2a:36:
c9:07:36:8c:53:17:7a:9c:79:7f:ee:ba:e4:78:11:
ba:03:fd:43:df:c1:81:4b:f8:5b:73:d6:5b:ab:20:
3d:0a:c4:47:30:ae:43:db:be:87:b9:57:50:9d:33:
69:25:1b:62:d7:f0:1b:a8:7e:97:fa:85:58:5e:81:
1f:7e:45:7e:c3:b7:c3:70:e5:9b:ca:bb:92:9c:12:
3e:53:2e:b1:fb:90:92:10:c2:79:5e:5b:1b:2c:2a:
8a:1c:42:97:f2:26:4e:22:12:95:9f:14:13:0f:15:
94:52:a1:44:fc:0e:40:f1:fe:94:d9:52:86:d3:46:
79:d4:78:86:89:a8:63:26:c6:44:38:97:33:5b:f0:
10:48:18:ee:50:e7:39:5d:04:34:c7:a6:0f:be:ba:
9c:57:50:09:7f:9b:20:15:a5:cb:1e:2f:7f:29:c4:
4b:b2:50:6c:df:3c:04:7d:d9:b2:fc:98:71:9e:d8:
8b:e5:ef:80:45:d8:7e:c7:46:f2:f6:9b:49:28:89:
c9:13:29:cb:5a:ff:b8:28:f8:0f:6d:56:39:98:85:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:C6:E1:28:93:25:A8:A7:9C:D6:F7:6D:A2:E8:E6:C1:C3:F6:ED
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OzLG4SiTJainnNb3baLo5sHD9u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
bc:62:4a:27:1d:0e:88:a8:f4:fc:35:95:2c:77:af:ba:4f:ad:
5b:02:38:44:b1:d8:1d:4f:16:98:64:48:36:a8:11:56:88:fb:
45:80:da:0c:83:fa:4b:ea:fa:15:8e:89:1a:e5:9c:af:6b:49:
cc:da:fd:24:96:36:a5:76:7f:f8:1c:9b:92:ff:9a:93:ff:18:
00:36:81:7b:91:c0:da:9c:19:a5:6d:d6:21:1c:e0:3b:ce:20:
13:5a:51:bc:45:2f:9d:4b:7e:e1:45:ca:80:b9:92:59:ec:69:
0c:0b:80:77:24:13:3a:dd:93:cc:58:d3:b7:46:3f:23:16:63:
fc:2a:c8:61:31:8c:86:a2:18:8e:d6:2b:5e:ee:4b:88:7b:e1:
01:9d:f0:5b:b5:77:96:0b:56:48:40:50:03:44:66:a3:72:7b:
e9:8f:ec:d0:59:ca:96:63:40:bf:93:27:db:0f:aa:5b:8e:81:
c0:27:e1:2c:05:9f:6e:e6:5c:46:31:ec:45:d1:64:ca:5d:b4:
c0:61:bc:3a:08:8b:2d:be:44:1b:5d:18:37:a8:12:66:0e:d5:
10:33:39:05:4a:5b:02:35:a6:d0:55:7e:c0:e1:33:87:84:6b:
52:85:de:29:d0:a2:a5:1e:db:12:57:01:c8:67:69:1d:80:f6:
72:b7:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:24 2026 by rpki-client