Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XGX90seksw9bNcnUbEc6vckyarM.roa
File: XGX90seksw9bNcnUbEc6vckyarM.roa (raw, json)
Hash identifier: 5mu4LTX44q60I08pKmOM+mmLCVDlflAhT9XpnHv8kQM=
Subject key identifier: 5C:65:FD:D2:C7:A4:B3:0F:5B:35:C9:D4:6C:47:3A:BD:C9:32:6A:B3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C69C52FFFAA7FE7E4D746BE96246
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XGX90seksw9bNcnUbEc6vckyarM.roa
Signing time: Thu 09 Apr 2026 14:08:34 +0000
ROA not before: Thu 09 Apr 2026 14:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397199
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c6:9c:52:ff:fa:a7:fe:7e:4d:74:6b:e9:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c65fdd2c7a4b30f5b35c9d46c473abdc9326ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:e8:0c:77:39:3d:8f:8d:60:6b:bd:30:a1:
ef:41:e2:27:66:b7:ca:10:c0:fb:4f:fd:0f:fa:01:
8f:8e:0f:2f:15:50:4f:84:f7:f0:a4:87:80:03:16:
18:fb:da:f5:96:41:42:78:c4:9d:6f:eb:86:9f:80:
af:00:17:5c:2b:a0:87:b9:f0:a4:f1:62:c0:03:95:
ec:59:8a:99:5b:8c:24:36:eb:00:7b:f3:b4:18:4d:
fc:24:5c:ae:be:81:1e:65:16:0d:2e:65:db:86:ed:
3b:ef:16:09:38:5b:92:00:f5:df:d6:87:34:41:36:
8e:59:1a:a7:ff:e0:f7:89:ed:60:be:28:d5:25:14:
6a:60:65:8e:95:2a:3e:36:d7:74:06:72:c7:4f:3c:
61:99:ca:95:cf:fe:cd:58:47:f0:bb:4e:8e:70:5d:
45:15:ba:bf:50:c2:0d:5a:e3:7e:ca:dd:81:56:11:
a4:8f:77:86:eb:0f:a9:6c:a8:74:00:f9:00:d5:18:
94:0e:a2:43:cf:2b:60:a8:9a:07:24:a1:83:c6:81:
cd:a0:1d:d2:f3:74:fc:47:7d:8d:59:fa:94:f9:1f:
84:9b:fc:73:e2:05:d2:9f:2d:45:32:57:ed:97:a1:
60:e5:2b:3e:2e:3a:30:dc:34:53:bd:bd:c1:03:42:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:FD:D2:C7:A4:B3:0F:5B:35:C9:D4:6C:47:3A:BD:C9:32:6A:B3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XGX90seksw9bNcnUbEc6vckyarM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
73:42:ff:c0:70:db:d4:56:6f:2d:71:1f:99:b0:02:93:eb:6d:
14:65:1b:f3:f0:97:f4:66:e0:d2:bb:07:ac:3f:b3:7e:fb:dc:
eb:66:f2:de:fb:2a:12:7a:a4:e9:39:bc:b0:42:9f:b8:7a:bd:
6f:58:6b:b5:83:0c:f9:fa:ef:68:e3:5e:8f:61:80:1c:fe:f9:
9a:31:09:af:eb:75:98:6c:74:30:ca:d4:69:b1:57:80:8f:32:
9a:dd:1b:18:ca:c3:b5:88:65:58:29:22:ab:5d:5c:57:22:4e:
ea:21:de:1a:8d:51:4f:e6:d3:b5:3d:78:c2:73:cf:cf:36:2c:
68:70:53:84:7e:fa:ff:fa:e2:88:c8:ec:33:ae:fd:74:bf:ee:
47:13:1d:07:5c:5f:92:16:db:ac:53:0c:01:50:18:dc:c7:b0:
6d:45:f8:0b:61:22:81:23:cd:56:a7:ba:c8:33:f5:0f:e2:29:
75:1c:f3:f6:91:f1:ab:da:a2:5a:81:3b:e0:5c:44:d7:15:dc:
a2:2a:fc:78:2e:06:24:8b:1e:5f:5b:d9:9d:33:e9:cf:73:b7:
41:c8:c3:d6:01:1f:e4:c7:1d:62:c4:dd:1b:63:95:7f:f4:77:
f4:34:23:4a:f5:1a:0c:99:95:40:c7:90:ce:6a:41:f2:94:6e:
a6:90:ac:fa
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1yksacUv/6p/5+TXRr6WJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzY1ZmRkMmM3YTRiMzBmNWIzNWM5ZDQ2YzQ3M2FiZGM5MzI2YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pvoDHc5PY+NYGu9MKHvQeInZrfK
EMD7T/0P+gGPjg8vFVBPhPfwpIeAAxYY+9r1lkFCeMSdb+uGn4CvABdcK6CHufCk
8WLAA5XsWYqZW4wkNusAe/O0GE38JFyuvoEeZRYNLmXbhu077xYJOFuSAPXf1oc0
QTaOWRqn/+D3ie1gvijVJRRqYGWOlSo+Ntd0BnLHTzxhmcqVz/7NWEfwu06OcF1F
Fbq/UMINWuN+yt2BVhGkj3eG6w+pbKh0APkA1RiUDqJDzytgqJoHJKGDxoHNoB3S
83T8R32NWfqU+R+Em/xz4gXSny1FMlftl6Fg5Ss+Ljow3DRTvb3BA0LuQQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFxl/dLHpLMPWzXJ1GxHOr3JMmqzMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWEdYOTBzZWtzdzliTmNuVWJFYzZ2Y2t5YXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAHNC/8Bw29RW
by1xH5mwApPrbRRlG/Pwl/Rm4NK7B6w/s3773Otm8t77KhJ6pOk5vLBCn7h6vW9Y
a7WDDPn672jjXo9hgBz++ZoxCa/rdZhsdDDK1GmxV4CPMprdGxjKw7WIZVgpIqtd
XFciTuoh3hqNUU/m07U9eMJzz882LGhwU4R++v/64ojI7DOu/XS/7kcTHQdcX5IW
26xTDAFQGNzHsG1F+AthIoEjzVanusgz9Q/iKXUc8/aR8avaolqBO+BcRNcV3KIq
/HguBiSLHl9b2Z0z6c9zt0HIw9YBH+THHWLE3RtjlX/0d/Q0I0r1GgyZlUDHkM5q
QfKUbqaQrPo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:38 2026 by rpki-client