Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Xx7B5-QvUMFX4jQWuIfYDGDwjkg.roa
File: Xx7B5-QvUMFX4jQWuIfYDGDwjkg.roa (raw, json)
Hash identifier: h9/hs5Pp3pEYCq10NEfFLir9BukekFV5FSbyivaJ7bw=
Subject key identifier: 5F:1E:C1:E7:E4:2F:50:C1:57:E2:34:16:B8:87:D8:0C:60:F0:8E:48
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C89E21B0149D3189D617CB1ACFC2
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Xx7B5-QvUMFX4jQWuIfYDGDwjkg.roa
Signing time: Thu 09 Apr 2026 14:08:35 +0000
ROA not before: Thu 09 Apr 2026 14:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397205
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c8:9e:21:b0:14:9d:31:89:d6:17:cb:1a:cf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f1ec1e7e42f50c157e23416b887d80c60f08e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:e4:94:1f:40:03:3d:e8:68:da:e4:95:84:
9d:0a:40:89:56:ac:ff:b4:60:fe:d7:cb:bc:7f:27:
2b:31:50:56:d5:09:77:aa:42:d1:d2:bf:5a:bb:50:
dd:62:04:78:b4:cf:dd:dc:4f:b3:ef:9a:81:6e:2e:
5b:6d:f0:3f:97:05:1a:a6:29:6a:d8:28:37:f2:80:
18:2f:08:75:a8:c5:74:af:2c:18:fc:57:09:7f:d8:
14:69:f7:57:a5:da:3a:7b:d2:41:77:35:b8:38:5f:
e5:02:43:30:17:69:63:de:b2:87:8e:46:e8:a4:6f:
3a:ee:9d:d0:e8:20:cb:bb:87:4b:94:69:c2:8e:ab:
69:ff:5d:7e:a8:7a:d4:3b:94:bb:a7:1a:97:29:82:
ba:45:79:43:e6:06:7f:79:33:b5:86:e9:2a:de:0e:
c5:6c:09:d8:d0:1c:a5:74:1c:b5:e7:40:51:84:35:
6e:83:21:c1:12:7e:f8:e3:c6:23:a4:64:c9:3c:04:
e9:da:a1:83:cb:05:cb:7e:e9:a0:ea:b5:33:fe:85:
4b:aa:8d:75:6c:68:dc:3b:d1:c8:bd:2d:ca:9c:6c:
20:8b:03:ab:97:51:f3:0c:46:ea:62:44:78:14:f7:
a9:4c:db:19:8d:72:cd:8c:7f:e8:16:81:de:75:e9:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:C1:E7:E4:2F:50:C1:57:E2:34:16:B8:87:D8:0C:60:F0:8E:48
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Xx7B5-QvUMFX4jQWuIfYDGDwjkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
c6:be:0b:8d:30:8d:9d:42:8e:a4:4d:f7:ee:18:b9:51:f8:d1:
2a:6b:3e:b8:a5:95:db:72:a7:4e:0f:75:9c:8d:69:b2:14:bd:
61:85:6b:f5:77:6f:8a:08:ee:a8:87:bf:65:2d:85:70:4d:a1:
92:e4:45:f5:34:e1:3a:fa:be:bb:99:fc:34:81:9e:4a:e8:ee:
7e:b1:fb:a6:69:aa:39:cd:52:7a:4c:8d:ed:69:25:ac:72:bc:
af:b5:71:ab:d0:3d:e5:f0:51:46:ab:3b:b7:24:54:9d:ad:a1:
8e:2d:70:93:25:79:3f:60:37:eb:67:d3:db:91:04:7d:cb:2c:
ef:b0:6b:1e:dd:e4:72:a7:dd:76:0a:09:10:e0:38:59:d5:20:
7f:87:a0:16:ca:30:da:4b:cc:06:26:fc:65:f6:1d:6c:ce:b2:
37:2e:ec:ea:ef:d5:55:d2:bb:cf:c7:cc:11:65:45:0c:62:05:
20:f4:35:11:d5:67:29:15:b0:7b:95:d9:64:b8:81:e7:12:5f:
1f:1f:2b:dc:84:bf:84:36:70:17:9d:c4:5c:63:e5:f3:a4:94:
e2:49:1d:67:fa:54:e6:46:e2:5a:74:34:99:48:d3:85:07:65:
cf:94:70:7d:32:48:19:51:b3:3a:f8:0f:2d:b4:3e:f9:df:15:
8e:9c:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:24 2026 by rpki-client