Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S-c-kzbVLX2PDurBz6dOOht0Sv8.roa
File: S-c-kzbVLX2PDurBz6dOOht0Sv8.roa (raw, json)
Hash identifier: r+8aEXuxfySWG/EIt1Uc8DxfxLRz8hCqrjXiapGQk+E=
Subject key identifier: 4B:E7:3E:93:36:D5:2D:7D:8F:0E:EA:C1:CF:A7:4E:3A:1B:74:4A:FF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C584B1500B63BC06F3BA506F56EA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S-c-kzbVLX2PDurBz6dOOht0Sv8.roa
Signing time: Thu 09 Apr 2026 14:08:34 +0000
ROA not before: Thu 09 Apr 2026 14:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397196
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c5:84:b1:50:0b:63:bc:06:f3:ba:50:6f:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4be73e9336d52d7d8f0eeac1cfa74e3a1b744aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:19:b2:e7:94:e8:34:a1:13:95:73:ed:a6:
fb:bb:3c:d8:ca:17:1a:1a:38:99:36:24:0e:02:35:
47:86:c6:cb:81:98:9a:ef:90:9d:53:8c:2a:9a:d6:
0e:9b:59:8e:c4:f4:2f:9a:32:3c:0a:31:f6:da:2b:
82:c0:06:06:72:2e:8b:88:6f:30:de:39:91:c6:25:
9e:e7:fa:a6:bf:b4:49:8e:ce:c0:04:df:ad:55:03:
dd:e8:68:7c:4e:e9:79:7d:a9:d4:a2:6f:2d:6f:5d:
13:00:27:05:09:07:38:a5:8f:6f:6f:d0:99:31:b9:
ae:f6:c4:f3:e2:3b:59:bb:48:69:04:8e:2f:09:dc:
97:73:8a:5a:12:a6:cb:dc:2b:a4:31:6f:32:a2:b2:
19:cb:bb:28:6d:3b:2e:36:34:39:d8:53:da:5b:ad:
65:ea:d3:20:31:61:ec:d7:61:e4:1f:96:3b:30:42:
41:6b:49:83:bd:7a:32:ac:26:fc:b8:b5:6c:44:b5:
75:43:ea:38:78:78:6a:32:07:65:05:8f:60:a3:45:
cf:0a:cf:b1:fe:dd:b0:59:4e:1f:1c:3d:3e:df:50:
96:97:46:cf:e3:52:c4:49:f4:56:45:4a:5c:79:20:
cf:37:26:99:25:b4:5a:8b:11:85:94:dc:fe:0a:05:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:3E:93:36:D5:2D:7D:8F:0E:EA:C1:CF:A7:4E:3A:1B:74:4A:FF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S-c-kzbVLX2PDurBz6dOOht0Sv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
7f:fb:99:86:f0:cb:91:54:61:d4:24:fc:a3:a4:29:5f:81:92:
97:af:f5:ae:8a:67:68:e5:fc:34:dd:da:99:a1:d3:57:21:c5:
b9:0e:f2:87:6f:a5:a3:d3:9f:66:44:0f:5f:bc:5c:28:46:f3:
33:6f:cf:18:59:a0:a9:95:67:af:a0:de:da:68:ab:fa:91:14:
66:89:7c:31:8b:cb:1c:84:a8:a6:5d:7d:97:3c:71:37:d8:3a:
26:86:5e:24:91:12:fa:f7:fd:53:ee:e4:8e:64:94:21:98:d9:
1a:e6:be:9b:b6:5b:33:b8:11:68:38:42:0c:35:6d:05:7b:da:
4b:70:97:43:53:28:f3:43:69:09:3e:b1:e8:4c:63:06:69:f0:
5e:f1:c4:f7:e4:61:84:c1:13:04:98:9a:c5:c0:42:a7:0e:97:
e6:70:69:77:e5:19:4e:90:2a:e2:ae:40:ff:50:18:89:9f:1d:
30:0c:7c:21:e6:0d:43:e9:d5:20:09:62:36:86:d7:ab:32:c7:
53:ee:f8:66:86:53:50:79:d4:a6:17:10:01:98:15:f4:55:01:
52:2a:84:58:46:c2:d0:45:cf:6c:25:c1:a9:1b:4a:94:67:06:
16:0a:b8:8d:cf:51:ac:81:b5:9b:7f:6f:70:d0:3f:5f:39:3c:
06:a6:cf:b1
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1yksWEsVALY7wG87pQb1bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmU3M2U5MzM2ZDUyZDdkOGYwZWVhYzFjZmE3NGUzYTFiNzQ0YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgcZsueU6DShE5Vz7ab7uzzYyhca
GjiZNiQOAjVHhsbLgZia75CdU4wqmtYOm1mOxPQvmjI8CjH22iuCwAYGci6LiG8w
3jmRxiWe5/qmv7RJjs7ABN+tVQPd6Gh8Tul5fanUom8tb10TACcFCQc4pY9vb9CZ
Mbmu9sTz4jtZu0hpBI4vCdyXc4paEqbL3CukMW8yorIZy7sobTsuNjQ52FPaW61l
6tMgMWHs12HkH5Y7MEJBa0mDvXoyrCb8uLVsRLV1Q+o4eHhqMgdlBY9go0XPCs+x
/t2wWU4fHD0+31CWl0bP41LESfRWRUpceSDPNyaZJbRaixGFlNz+CgUV6QIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEvnPpM21S19jw7qwc+nTjobdEr/MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvUy1jLWt6YlZMWDJQRHVyQno2ZE9PaHQwU3Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAH/7mYbwy5FU
YdQk/KOkKV+Bkpev9a6KZ2jl/DTd2pmh01chxbkO8odvpaPTn2ZED1+8XChG8zNv
zxhZoKmVZ6+g3tpoq/qRFGaJfDGLyxyEqKZdfZc8cTfYOiaGXiSREvr3/VPu5I5k
lCGY2Rrmvpu2WzO4EWg4Qgw1bQV72ktwl0NTKPNDaQk+sehMYwZp8F7xxPfkYYTB
EwSYmsXAQqcOl+ZwaXflGU6QKuKuQP9QGImfHTAMfCHmDUPp1SAJYjaG16syx1Pu
+GaGU1B51KYXEAGYFfRVAVIqhFhGwtBFz2wlwakbSpRnBhYKuI3PUayBtZt/b3DQ
P185PAamz7E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:27 2026 by rpki-client