Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/b6LGNxzD6MP9_nzjwB4-tcSMl2o.roa
File: b6LGNxzD6MP9_nzjwB4-tcSMl2o.roa (raw, json)
Hash identifier: xpUZBGBT47GbKMklSIfBqIFvR7zHUPFJ7ylCXrrlvhg=
Subject key identifier: 6F:A2:C6:37:1C:C3:E8:C3:FD:FE:7C:E3:C0:1E:3E:B5:C4:8C:97:6A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B2ED65A3EE8171515FDA5604082D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/b6LGNxzD6MP9_nzjwB4-tcSMl2o.roa
Signing time: Thu 09 Apr 2026 14:08:29 +0000
ROA not before: Thu 09 Apr 2026 14:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396589
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b2:ed:65:a3:ee:81:71:51:5f:da:56:04:08:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fa2c6371cc3e8c3fdfe7ce3c01e3eb5c48c976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:d8:46:d5:b2:9c:fc:e9:b1:53:13:b0:13:
d3:47:8d:05:51:7d:47:45:ea:a4:4d:40:f8:db:e8:
07:05:ac:e4:da:11:35:03:b3:da:68:9e:59:99:07:
c8:2e:78:f7:ac:cd:b2:67:0a:33:e6:d8:13:21:b7:
ec:15:b4:4b:1a:d4:3a:9d:9b:6b:34:c1:ec:67:71:
99:23:d1:60:2c:25:32:cd:6f:dc:51:58:c3:65:9b:
e9:bd:50:73:b1:80:c9:ba:30:0d:02:01:7e:54:82:
f0:ec:26:bc:c7:83:9b:48:99:29:cd:26:e5:3c:9e:
bb:06:19:8a:93:fd:d0:d4:75:56:03:8c:0e:cd:1e:
97:ab:76:03:93:7a:9a:cb:70:d1:01:16:d4:b9:fe:
43:36:86:bc:99:e0:d8:32:a5:27:5e:48:65:ed:f8:
b5:6b:a8:ad:54:ab:84:dd:01:9f:13:9b:0a:05:a4:
04:d9:68:ed:ea:d5:73:aa:2f:b3:2c:35:06:4f:41:
16:57:b2:8e:3a:0d:a1:83:b5:3c:6a:46:38:14:af:
51:4b:a2:90:cc:2a:7b:af:0a:4a:3b:e0:5a:55:fa:
67:99:02:7b:f2:f8:0d:2d:14:2c:42:bc:cd:e4:62:
83:eb:e1:59:51:2b:e9:84:e4:94:a2:3c:61:27:d2:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A2:C6:37:1C:C3:E8:C3:FD:FE:7C:E3:C0:1E:3E:B5:C4:8C:97:6A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/b6LGNxzD6MP9_nzjwB4-tcSMl2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
18:2b:0d:09:43:c3:80:d3:60:cd:ac:e6:e4:57:05:b8:dd:78:
89:b0:6c:5d:83:ca:7b:af:3b:34:36:e5:c6:28:bc:9a:c6:63:
2e:62:6a:c3:d8:ef:aa:c3:e5:ef:9c:ca:20:ee:17:df:a9:2b:
8c:fe:85:a9:6f:57:27:23:41:71:5b:bc:e3:b4:82:b0:18:96:
7a:91:4e:99:a8:79:7a:45:33:f5:fa:e5:fd:1f:7a:a9:85:48:
2c:ec:b0:97:ec:fe:eb:14:94:a3:d5:1f:48:4d:78:2e:dd:1f:
9e:18:50:8b:e4:6f:ac:5e:70:17:d3:a7:25:ab:da:f2:fe:64:
9e:c2:a8:0d:98:3e:17:23:4e:52:ea:5d:af:82:b2:1f:fe:1e:
7b:da:7c:4c:6b:1a:8e:c4:3f:b1:d4:02:a2:fd:47:be:56:ff:
ee:0a:b2:f7:c7:b6:d0:c1:13:18:21:ae:1c:58:76:89:b2:44:
11:95:7f:60:6a:41:0f:d4:3a:e9:9c:f4:9b:de:79:5a:27:4c:
8c:2b:ce:a3:68:a5:89:05:a3:99:4d:e3:18:83:56:5d:37:ac:
b9:b3:d8:bd:a9:2b:29:de:18:39:85:3e:12:b6:34:5a:4d:5c:
dc:0a:65:35:8e:c3:35:2b:86:50:24:19:9b:f2:6c:a7:bd:30:
de:1a:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:53 2026 by rpki-client