Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RsXXCOMTqxqpJ_roQ2Te9KgbcTQ.roa
File: RsXXCOMTqxqpJ_roQ2Te9KgbcTQ.roa (raw, json)
Hash identifier: 4e/kv/iILAi5GyVchCSCUoxbBksBreBLnvnN4mc3jZ4=
Subject key identifier: 46:C5:D7:08:E3:13:AB:1A:A9:27:FA:E8:43:64:DE:F4:A8:1B:71:34
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292BC09E65A211E5A16B0441BE9395D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RsXXCOMTqxqpJ_roQ2Te9KgbcTQ.roa
Signing time: Thu 09 Apr 2026 14:08:32 +0000
ROA not before: Thu 09 Apr 2026 14:08:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396608
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:bc:09:e6:5a:21:1e:5a:16:b0:44:1b:e9:39:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46c5d708e313ab1aa927fae84364def4a81b7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:7c:5a:26:2f:40:cc:3a:2f:a8:b5:77:12:
a1:87:af:87:be:16:66:38:aa:3b:03:95:17:d4:8e:
33:33:7d:ea:1f:44:0e:36:66:38:c3:80:c4:42:4b:
bf:3b:d2:a0:7e:11:bc:15:87:f8:07:c7:fa:c2:ab:
c0:0e:a6:98:13:5d:5a:e5:c7:db:87:49:7f:bb:ef:
7b:fb:d1:9d:43:2b:3a:d1:7f:98:53:00:c9:0b:0f:
db:e4:44:22:f3:2d:31:98:98:f3:85:8d:a1:b6:74:
d9:16:72:e4:44:f5:be:0a:84:df:9e:37:ee:8b:3c:
bb:d7:7d:00:af:07:e3:22:64:52:52:37:66:b3:a5:
30:1f:fd:5e:9b:7a:45:60:f1:9a:68:f6:e0:60:90:
81:87:96:de:be:8f:1e:7b:39:f0:0b:9c:a1:26:1d:
1f:d6:1c:de:8c:d9:8a:98:fd:44:ae:e1:7d:dd:78:
12:0e:b9:0e:29:d2:95:7e:0c:ee:b3:ff:85:38:19:
a5:bd:80:01:d9:6a:5d:d8:83:19:2a:0a:40:90:f1:
83:8c:77:55:0c:93:7d:60:59:b7:01:9a:2e:8f:1e:
0f:58:3c:97:cf:f8:84:47:44:8c:ee:47:c3:43:bf:
12:b9:4c:73:ee:ea:e3:ee:74:eb:3f:19:91:d6:9a:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C5:D7:08:E3:13:AB:1A:A9:27:FA:E8:43:64:DE:F4:A8:1B:71:34
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RsXXCOMTqxqpJ_roQ2Te9KgbcTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
25:54:17:eb:c0:16:74:e7:11:f8:73:75:82:c3:e0:04:d5:c2:
44:3d:98:87:29:d0:7f:b5:bf:ff:1b:ea:86:27:55:b8:19:92:
d8:3e:7b:02:fd:6d:70:1b:41:cd:76:67:fe:6a:79:58:88:ba:
b8:6b:c1:c8:84:93:e3:53:9a:52:b6:7e:be:67:fd:d9:56:7f:
8f:5e:2e:f6:e1:a5:55:16:39:49:82:a4:ca:8d:fc:87:dd:9c:
fa:d2:ac:af:88:6c:60:96:7e:ed:09:88:9c:47:a4:64:67:c6:
4a:11:8c:c4:0f:f5:26:36:37:34:4c:9e:80:39:c5:96:dd:0f:
c6:33:c2:7e:d5:08:96:81:cd:d4:e9:45:bd:eb:e9:a4:a0:41:
fb:98:03:fb:18:50:3a:83:ad:61:2b:74:c0:d4:32:9f:27:16:
61:e2:2f:8d:54:e8:3f:08:bc:71:bd:73:5c:01:e1:7d:3e:f6:
b1:6e:4a:5d:cd:7b:90:f9:6c:71:11:72:85:ef:18:74:ae:86:
c5:c4:bb:dd:11:c5:9e:77:d2:94:53:79:4a:ca:8e:21:3b:16:
f6:36:a6:39:d5:16:10:8c:5c:c4:7b:7a:f4:0a:d8:bd:80:a6:
19:ca:7b:e2:c9:03:35:f9:e8:e5:d5:e9:6c:e7:76:73:a4:d2:
22:e7:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:21 2026 by rpki-client