Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/anOKBRP4NEeszg0wuIiwbIi9qjA.roa
File: anOKBRP4NEeszg0wuIiwbIi9qjA.roa (raw, json)
Hash identifier: rA6kOGHnE5LhGXIPzwR6aPJ7nyw2yXLfc9Be3vNC68Q=
Subject key identifier: 6A:73:8A:05:13:F8:34:47:AC:CE:0D:30:B8:88:B0:6C:88:BD:AA:30
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C0D575A915CA32E89240ECC7141A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/anOKBRP4NEeszg0wuIiwbIi9qjA.roa
Signing time: Thu 09 Apr 2026 14:08:33 +0000
ROA not before: Thu 09 Apr 2026 14:08:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396615
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c0:d5:75:a9:15:ca:32:e8:92:40:ec:c7:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a738a0513f83447acce0d30b888b06c88bdaa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:7f:02:ac:9e:a0:15:95:5a:9e:71:d2:c4:
80:39:67:d1:c1:71:74:f8:fb:c0:13:75:3b:e8:62:
1c:5d:9e:d7:82:1d:d8:24:00:33:3f:07:97:a0:6d:
9d:38:72:c5:b4:92:99:79:0e:31:45:cd:2b:44:a2:
4e:e4:86:59:0f:5f:5e:b4:74:05:11:98:c4:b3:3c:
e2:e6:23:96:5e:29:60:d3:5f:56:75:07:5d:f8:f6:
83:64:a7:0a:23:9d:f4:ab:c3:ea:d6:e9:0d:a3:dc:
dd:99:c8:ee:c2:80:0e:fc:32:de:5b:a2:e7:f5:45:
26:ac:ec:0f:85:52:11:4d:4c:15:e8:95:f5:37:75:
2a:d0:7d:0a:07:42:f5:a4:61:98:c0:37:63:e9:8d:
f4:86:0f:87:85:a5:92:18:4f:9a:ac:df:b8:db:e0:
27:c0:71:4c:a8:64:7a:4b:d6:d3:14:01:fd:9a:47:
b8:f6:c1:7c:82:b0:6b:d0:34:3e:78:4c:07:c0:a6:
46:f6:24:fd:47:55:44:8e:b8:81:53:80:a9:b8:2b:
2b:4d:9e:b1:a5:6f:15:8f:73:d4:d9:8b:ff:f9:64:
62:90:b6:a6:25:e7:f0:9d:80:de:88:5e:19:84:cf:
11:93:ca:a2:21:09:ae:62:40:75:20:7a:cc:4a:20:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:8A:05:13:F8:34:47:AC:CE:0D:30:B8:88:B0:6C:88:BD:AA:30
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/anOKBRP4NEeszg0wuIiwbIi9qjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
30:90:e5:f7:1a:70:b0:89:61:cd:2f:b1:8a:41:35:4f:19:62:
f0:b1:98:b8:35:bb:1c:1f:b6:30:2d:5d:95:5d:a4:16:7c:26:
d8:97:47:08:7c:f9:bb:1f:31:a3:f2:59:33:5f:31:0d:35:f8:
9f:16:59:72:3c:5b:03:62:33:ad:87:ed:ad:45:bb:9f:6f:92:
99:07:26:05:a1:0a:52:59:4c:7e:a9:d1:b1:e3:66:93:fd:c3:
ed:62:aa:a8:f9:c6:65:4e:b4:d9:d3:39:87:a7:61:6e:f8:10:
52:c5:54:7d:c3:02:69:aa:f1:d4:4a:f4:49:3a:14:7c:df:63:
76:7f:9a:6c:13:f1:ff:02:9b:0b:f2:6b:eb:21:0e:17:f9:95:
1c:8c:51:5f:19:53:53:ad:33:04:89:b3:68:29:6f:9c:e5:96:
aa:53:fd:0c:ad:06:00:2f:76:51:5c:3a:c0:63:17:0b:a9:cc:
5e:61:ee:83:74:7a:b0:ca:9f:77:1a:29:cf:89:a7:13:20:72:
ff:0b:7f:75:d8:2d:6d:bf:89:42:7c:79:0a:fe:71:55:25:5c:
14:6a:15:2a:50:84:d7:8b:b9:84:41:c0:88:c9:9f:a5:a3:ed:
73:3d:59:30:d6:18:2e:6c:3f:09:8a:94:d9:f1:61:1a:ae:32:
5a:02:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:51:09 2026 by rpki-client