Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S4GdZnaW4GoZRyTFrkmd-a5hSYg.roa
File: S4GdZnaW4GoZRyTFrkmd-a5hSYg.roa (raw, json)
Hash identifier: YiA9xs0rcyjf+mHJkpmYLbrvSdE59IyHOuS5ooWN5iU=
Subject key identifier: 4B:81:9D:66:76:96:E0:6A:19:47:24:C5:AE:49:9D:F9:AE:61:49:88
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B212D30AA7C519749C38B158C451
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S4GdZnaW4GoZRyTFrkmd-a5hSYg.roa
Signing time: Thu 09 Apr 2026 14:08:29 +0000
ROA not before: Thu 09 Apr 2026 14:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396587
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b2:12:d3:0a:a7:c5:19:74:9c:38:b1:58:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b819d667696e06a194724c5ae499df9ae614988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:1b:d5:bc:18:bc:9f:8a:99:ea:cd:2c:58:
dd:42:e1:79:e7:ad:8f:7f:6f:a2:f1:55:13:68:f4:
a9:91:d8:22:4d:03:11:79:26:d0:93:af:10:b5:7b:
f2:17:34:72:16:89:64:91:25:b9:ee:44:40:d6:17:
93:db:99:89:ee:54:42:84:21:98:a8:c2:9c:38:b8:
79:e0:9b:1f:63:ab:81:7b:9c:6b:c9:c7:38:07:15:
5b:60:30:2e:54:59:80:4f:79:a9:bd:c5:65:55:a7:
f1:09:a0:d7:a7:4e:50:b2:ca:71:fb:9f:43:e1:6e:
81:77:68:13:87:24:0d:9e:d3:66:3f:59:20:82:e3:
51:c6:f1:16:b4:19:c4:c8:b8:bd:50:5b:a4:db:50:
c1:9a:d5:a8:88:eb:30:10:5c:11:54:50:dd:b4:5f:
d8:7b:67:14:35:b7:f2:5f:40:fa:97:fe:3c:ca:86:
da:55:5a:bf:75:ed:98:4c:b3:3a:59:cb:2f:b3:60:
6e:52:e2:55:a2:d3:f3:39:25:34:08:07:5e:08:17:
b1:17:79:a4:d1:7c:12:87:5a:e9:01:74:a0:13:f0:
7c:79:e8:62:c6:52:3a:b2:a6:f7:b3:80:06:25:da:
84:c3:1f:29:8d:6f:0e:ad:0b:e0:12:f4:22:49:1a:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:81:9D:66:76:96:E0:6A:19:47:24:C5:AE:49:9D:F9:AE:61:49:88
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S4GdZnaW4GoZRyTFrkmd-a5hSYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
9a:1a:71:73:5c:61:b5:9d:3a:5b:07:8f:ea:b4:55:98:09:43:
ec:e0:1e:4a:3b:56:61:7a:6a:58:4e:6a:b2:d4:69:21:98:a7:
6b:fd:2f:aa:ed:4b:b7:ca:2e:7c:f7:45:d6:72:00:76:2f:40:
e0:52:56:13:b0:35:78:7a:e3:b6:e0:33:3d:85:34:da:e4:6c:
02:37:e6:02:9a:25:3f:5c:68:35:60:03:89:8b:58:89:6c:ad:
96:c5:98:14:53:99:6a:29:b2:de:65:0e:89:f4:7a:ef:a2:52:
9d:da:ee:ea:de:9d:ee:b3:cb:d8:20:93:25:61:07:54:e6:94:
bb:77:d7:c1:41:ec:38:43:37:04:37:ee:73:9a:f9:f4:8b:73:
88:20:36:34:4c:65:98:72:70:4d:eb:c4:88:23:99:95:fd:85:
75:51:df:8c:7c:f8:1c:30:35:7e:d9:e4:3c:7f:52:ab:6d:8e:
4c:2b:2c:d8:26:27:22:11:9f:c5:08:12:19:bb:86:e4:f3:97:
ad:d6:4c:93:5c:d5:23:b9:71:1a:1f:45:fa:ff:78:b0:c6:49:
24:2c:95:de:b8:fe:69:27:a9:7a:62:65:6c:97:51:ca:20:75:
18:07:1d:38:a8:ef:d9:12:c3:00:57:68:31:ae:1c:ac:a2:a1:
fa:56:6e:34
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykrIS0wqnxRl0nDixWMRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjgxOWQ2Njc2OTZlMDZhMTk0NzI0YzVhZTQ5OWRmOWFlNjE0OTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspEb1bwYvJ+KmerNLFjdQuF5562P
f2+i8VUTaPSpkdgiTQMReSbQk68QtXvyFzRyFolkkSW57kRA1heT25mJ7lRChCGY
qMKcOLh54JsfY6uBe5xrycc4BxVbYDAuVFmAT3mpvcVlVafxCaDXp05Qsspx+59D
4W6Bd2gThyQNntNmP1kgguNRxvEWtBnEyLi9UFuk21DBmtWoiOswEFwRVFDdtF/Y
e2cUNbfyX0D6l/48yobaVVq/de2YTLM6Wcsvs2BuUuJVotPzOSU0CAdeCBexF3mk
0XwSh1rpAXSgE/B8eehixlI6sqb3s4AGJdqEwx8pjW8OrQvgEvQiSRqDlQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEuBnWZ2luBqGUckxa5JnfmuYUmIMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvUzRHZFpuYVc0R29aUnlURnJrbWQtYTVoU1lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAJoacXNcYbWd
OlsHj+q0VZgJQ+zgHko7VmF6alhOarLUaSGYp2v9L6rtS7fKLnz3RdZyAHYvQOBS
VhOwNXh647bgMz2FNNrkbAI35gKaJT9caDVgA4mLWIlsrZbFmBRTmWopst5lDon0
eu+iUp3a7urene6zy9ggkyVhB1TmlLt318FB7DhDNwQ37nOa+fSLc4ggNjRMZZhy
cE3rxIgjmZX9hXVR34x8+BwwNX7Z5Dx/UqttjkwrLNgmJyIRn8UIEhm7huTzl63W
TJNc1SO5cRofRfr/eLDGSSQsld64/mknqXpiZWyXUcogdRgHHTio79kSwwBXaDGu
HKyiofpWbjQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:38 2026 by rpki-client