Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XpBBpv1Zsb5esTsvCmpDszeIxCA.roa
File: XpBBpv1Zsb5esTsvCmpDszeIxCA.roa (raw, json)
Hash identifier: eJnagy0gvJuDVJagff7nlScqlggoKdRJooFSYo5uxHE=
Subject key identifier: 5E:90:41:A6:FD:59:B1:BE:5E:B1:3B:2F:0A:6A:43:B3:37:88:C4:20
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B163D9AA69EE4A64D81AE7B99170
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XpBBpv1Zsb5esTsvCmpDszeIxCA.roa
Signing time: Thu 09 Apr 2026 14:08:29 +0000
ROA not before: Thu 09 Apr 2026 14:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396586
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b1:63:d9:aa:69:ee:4a:64:d8:1a:e7:b9:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e9041a6fd59b1be5eb13b2f0a6a43b33788c420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:0d:17:d7:ef:0b:f9:2c:a9:de:ce:30:b6:
8f:b3:f1:a6:38:30:57:6c:1d:69:d1:89:a5:c7:2e:
bc:78:7c:2d:60:fa:84:b1:22:86:05:5c:b1:89:fe:
f6:da:83:c7:14:14:8b:a7:bc:4f:99:9d:93:43:cb:
f7:57:a6:d2:f6:d1:3e:94:3c:0f:32:c2:48:17:00:
62:df:d5:82:2c:50:8f:34:21:26:2d:ca:22:c0:60:
80:da:a0:9f:62:b0:6e:f8:47:76:ee:c0:64:de:e5:
f4:c9:73:a3:1e:e0:22:d2:d8:66:eb:8f:1b:aa:ee:
0e:45:96:f0:e5:a3:b7:30:d8:49:73:03:8c:44:c7:
9d:2c:29:dd:07:fa:6f:b7:61:2a:e5:72:c8:dc:89:
f3:b4:8e:7a:2b:f5:8e:3e:f9:e6:e5:dc:5f:8d:df:
0b:18:76:ab:bb:d5:b2:71:37:60:55:2b:5e:02:92:
f1:6e:7d:92:6b:72:fa:ca:f2:6a:96:29:15:f3:d6:
d6:83:d5:f9:62:bd:48:83:87:b0:fb:f8:49:e5:b5:
fb:60:30:e5:7a:2b:68:99:f9:04:f7:bb:73:a8:ae:
91:dd:c7:1a:4a:73:b6:8e:d2:d5:91:7c:f4:d2:05:
10:65:77:29:c4:ae:ea:ae:cd:b3:3c:ad:83:58:77:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:90:41:A6:FD:59:B1:BE:5E:B1:3B:2F:0A:6A:43:B3:37:88:C4:20
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XpBBpv1Zsb5esTsvCmpDszeIxCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
44:cd:17:f7:90:1b:02:5f:37:a6:0b:ac:5a:12:23:8d:4c:8e:
c6:ff:c4:71:ab:3f:40:fe:cb:34:8e:d1:f7:47:f5:3b:7a:d1:
9d:6f:e7:84:da:d3:10:9b:c1:03:ce:b2:10:de:7e:cd:b2:05:
ac:d5:18:fa:82:ea:83:ef:84:c6:0b:1f:a8:65:ca:94:93:d0:
e0:55:b9:f0:e8:83:74:11:fd:32:31:d5:e8:b4:94:1e:02:5d:
25:1c:5e:1b:f9:ff:e6:3e:33:5e:cf:cf:16:78:c1:73:67:d6:
f1:42:f9:b4:25:d6:33:86:a9:2f:c9:8c:16:dc:7b:7d:3f:bd:
2a:bf:58:de:f6:62:f5:ec:32:40:9a:ce:49:57:70:c5:e6:30:
c9:a1:92:5d:91:cb:47:f8:6a:bc:e9:d2:54:25:fb:e9:da:81:
84:42:22:31:63:1b:f5:81:7a:c6:9e:e5:8d:82:44:f0:ce:ed:
e1:76:b4:ff:23:14:56:e9:da:4c:d7:65:dd:6e:5d:5b:d7:29:
95:dc:5d:33:fa:fd:3c:cd:ea:ec:82:e9:53:f8:be:88:ed:f1:
e4:62:5b:62:de:92:f8:50:8e:2b:d3:2f:df:94:14:34:33:c6:
80:c6:d5:f4:46:2c:82:1d:99:6f:65:d2:e6:dd:69:f0:c8:52:
4f:29:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:10 2026 by rpki-client