Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RLFu1V8qqywmi1IFbPHWoUCIwKI.roa
File: RLFu1V8qqywmi1IFbPHWoUCIwKI.roa (raw, json)
Hash identifier: DhZ+kT3iRumFvZEInN6Bk0OvVdBi0tftgzhFK03U7TQ=
Subject key identifier: 44:B1:6E:D5:5F:2A:AB:2C:26:8B:52:05:6C:F1:D6:A1:40:88:C0:A2
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A6B12CF24CCA9463F06E9DABCF57
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RLFu1V8qqywmi1IFbPHWoUCIwKI.roa
Signing time: Thu 09 Apr 2026 14:08:26 +0000
ROA not before: Thu 09 Apr 2026 14:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396560
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a6:b1:2c:f2:4c:ca:94:63:f0:6e:9d:ab:cf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44b16ed55f2aab2c268b52056cf1d6a14088c0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:90:1c:54:17:59:8c:d7:34:3c:1a:ca:83:
36:3a:63:e3:b8:fc:02:ed:97:18:57:97:c1:ff:ec:
b7:c4:ef:fe:af:dc:a8:2e:c9:a7:18:a4:09:00:26:
1d:b4:10:dd:b5:72:d1:91:71:e9:5a:76:4a:b8:7d:
ab:81:70:01:fb:27:07:d5:84:53:7f:89:d4:f9:03:
a7:31:b0:a7:01:00:3d:dd:41:22:a6:e5:54:d8:34:
b6:a4:0b:62:c5:b5:1d:85:01:f5:f7:8d:5c:46:04:
43:bd:3b:08:ab:f3:0e:2f:31:e2:35:20:21:f4:42:
ac:92:df:82:dd:fc:6a:79:d3:e6:b4:ae:08:3a:d3:
53:b7:1b:38:c6:db:1d:68:d5:e2:ae:a1:7d:24:68:
d0:93:2b:71:f3:c4:57:82:ec:2c:d3:c0:9c:12:5a:
a6:b9:f1:53:5b:09:f7:4c:ee:f8:bb:b9:ba:08:90:
71:26:79:c0:0a:bd:09:da:02:4d:05:c8:f6:7a:ad:
24:8c:00:7d:a8:ac:17:eb:b8:6c:3f:6a:ae:67:d7:
47:5c:71:51:40:3d:71:b4:8e:ca:76:f9:de:1f:12:
3f:92:d2:66:8e:9e:f7:b2:6f:ec:59:49:56:58:0d:
0a:19:08:12:2c:07:41:6f:4b:50:af:73:09:b4:2a:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:6E:D5:5F:2A:AB:2C:26:8B:52:05:6C:F1:D6:A1:40:88:C0:A2
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RLFu1V8qqywmi1IFbPHWoUCIwKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
a3:bc:ca:d0:a1:89:03:84:a1:46:38:f9:28:4d:9d:6f:a0:42:
b2:70:ee:78:8d:6c:8f:4d:c4:29:f3:0f:26:91:e1:a3:bb:ad:
d2:a4:71:30:bd:16:9c:32:96:9e:28:9b:1b:dd:52:70:20:6f:
d6:b1:96:fc:7c:b7:82:5a:94:bf:23:90:a9:c2:96:8e:c3:4d:
9a:27:49:35:f4:7d:ed:72:68:bb:6f:0c:5a:cc:f0:89:f8:ae:
fb:c3:89:f2:aa:90:82:57:80:b4:08:b5:10:e0:05:66:11:6c:
c6:f9:0a:4f:96:e1:87:fb:0f:5a:c0:b7:5d:a4:b0:33:9c:ef:
c6:23:00:1d:de:e1:3e:b2:73:1d:d2:54:a4:5b:ea:bf:75:b3:
3b:35:06:9c:57:ee:8e:74:5d:78:a0:00:20:f8:19:3d:9f:ac:
23:1a:15:39:7b:86:a6:fb:6b:b3:e7:10:d1:1a:d8:65:7a:ed:
f6:77:d9:16:94:40:e0:de:ac:ac:46:8c:b7:3c:a4:67:89:21:
de:5b:1a:66:90:09:3f:18:32:5f:a9:9b:78:d6:cc:40:73:6c:
e5:9e:42:0a:a6:49:6a:e7:04:98:f1:c8:95:ca:35:15:ca:19:
a3:90:ee:3c:d4:8c:1c:c3:b7:b3:fe:51:bd:ff:8a:01:cc:90:
a7:26:9d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:32 2026 by rpki-client