Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_qvKeZ0yyCPQcuXr5qeuTFuMl2E.roa
File: _qvKeZ0yyCPQcuXr5qeuTFuMl2E.roa (raw, json)
Hash identifier: LGs2oQr3Mo9LdbwcoSoNdy9XWwV8kjuyu09gztCMb6E=
Subject key identifier: FE:AB:CA:79:9D:32:C8:23:D0:72:E5:EB:E6:A7:AE:4C:5B:8C:97:61
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D729295E751E51719B80A54DD6C389D4F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_qvKeZ0yyCPQcuXr5qeuTFuMl2E.roa
Signing time: Thu 09 Apr 2026 14:08:22 +0000
ROA not before: Thu 09 Apr 2026 14:08:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36617
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:95:e7:51:e5:17:19:b8:0a:54:dd:6c:38:9d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feabca799d32c823d072e5ebe6a7ae4c5b8c9761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:07:37:70:d9:9d:2f:2b:57:ce:84:82:85:
d3:4f:11:a5:d7:75:73:03:77:bb:9d:26:4f:c2:d9:
d4:b0:d9:80:21:83:18:7b:d2:d7:33:ac:eb:77:2e:
ce:5e:e4:3f:e5:37:a8:db:49:c5:11:02:cf:35:1f:
97:9c:df:07:67:62:5c:7f:14:c8:2f:c8:a0:8e:0a:
80:a1:36:2e:fd:1a:5e:67:d5:be:11:d8:7e:21:30:
10:d4:a0:ef:09:0d:de:72:c3:86:26:6c:67:07:37:
e4:96:08:a2:61:18:fd:90:6c:4e:64:70:60:aa:0c:
e0:f9:a1:a8:8d:5c:40:42:29:32:38:d6:9a:d6:99:
99:80:2e:5c:73:ac:58:3e:ec:d1:83:42:d0:17:30:
f7:23:5d:77:31:81:fd:1f:1d:01:a5:97:05:b8:46:
13:3b:87:6a:cf:75:1b:a9:24:07:20:12:6c:08:9e:
57:21:40:39:ee:2c:4c:23:4e:4f:d1:35:a8:d0:df:
f0:d1:38:d9:2b:85:47:2b:3f:e5:9b:14:b2:e9:d4:
1a:9b:f5:5e:ba:09:1f:3d:06:ef:2f:d5:47:da:4f:
3d:3b:a4:12:35:e0:78:b8:6e:72:cd:f0:91:bc:cd:
86:b1:b5:5e:c3:8f:80:3f:cc:ff:ad:2a:d4:7d:94:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AB:CA:79:9D:32:C8:23:D0:72:E5:EB:E6:A7:AE:4C:5B:8C:97:61
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_qvKeZ0yyCPQcuXr5qeuTFuMl2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
64:20:82:e2:11:e1:c2:06:ca:d0:de:c1:ec:c4:24:53:c0:c8:
ea:1d:8d:60:a1:79:ff:46:76:1c:df:be:36:7a:b2:c2:29:17:
80:ee:99:14:27:fc:6b:5c:28:7c:80:ef:3c:0c:8d:d5:03:d2:
4e:6a:34:2d:84:5c:2f:0b:19:0d:a0:15:6c:35:74:53:df:0c:
81:9f:60:bf:4b:18:44:e2:29:59:34:b5:2c:bf:8d:d0:36:9c:
d3:95:81:35:07:42:dc:a8:be:ea:76:00:3c:64:c5:9f:ce:78:
99:58:3a:6f:a6:c2:45:50:51:20:7e:00:13:8b:8b:c2:14:37:
0b:e4:04:41:8f:93:24:30:77:92:64:4e:02:cf:57:e7:b4:ab:
d4:59:2f:db:34:c4:de:52:e1:76:cf:cc:41:28:a9:74:ac:55:
fe:fb:2b:99:83:9f:77:59:97:dc:4c:a0:eb:a6:69:e7:84:c4:
9d:d9:3f:b1:ae:62:72:41:af:1e:01:62:50:80:1e:c7:e4:19:
99:7b:64:d3:7c:fd:21:8f:71:d4:ff:32:df:c2:4d:1e:be:87:
3a:90:bc:9f:7f:f0:cd:f8:10:3a:5e:ec:0d:f6:45:3c:50:e9:
f8:96:1c:00:b2:e5:2d:ec:bf:8f:40:37:58:54:f4:be:78:48:
e6:4f:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:26 2026 by rpki-client