Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dIkG8EEc-TB1241NZJIRqy8n5tA.roa
File: dIkG8EEc-TB1241NZJIRqy8n5tA.roa (raw, json)
Hash identifier: OdyyILlIFaTRXnmcEQxLUaEKv/IQTdPZzm1JtZZxYw4=
Subject key identifier: 74:89:06:F0:41:1C:F9:30:75:DB:8D:4D:64:92:11:AB:2F:27:E6:D0
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B4589B32DEC4F97F36A2CE96AF9E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dIkG8EEc-TB1241NZJIRqy8n5tA.roa
Signing time: Thu 09 Apr 2026 14:08:30 +0000
ROA not before: Thu 09 Apr 2026 14:08:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396593
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b4:58:9b:32:de:c4:f9:7f:36:a2:ce:96:af:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=748906f0411cf93075db8d4d649211ab2f27e6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:35:9b:99:20:ba:e7:80:3a:06:61:83:19:
5c:44:f0:67:00:97:5f:51:6b:59:db:ec:97:22:0b:
bd:d2:6c:14:4a:00:f0:5f:1e:bf:9a:c1:d5:ec:72:
c6:94:4f:4e:18:14:2c:0b:c7:23:84:b7:29:41:1e:
14:d4:4b:c8:3b:16:91:e8:41:87:0b:15:0f:bc:51:
5c:32:e9:eb:ab:c8:16:83:2d:ec:d0:73:16:6a:c2:
f8:9b:15:13:e8:00:23:35:ed:b4:ee:06:cd:b3:97:
d3:4f:21:04:99:11:7d:4b:8b:3c:21:15:c1:1d:c7:
8e:59:29:d8:a3:8d:5d:73:56:8f:55:1c:88:c1:31:
d1:1c:dc:64:47:86:c4:1a:d0:51:47:83:8c:b0:3a:
6a:9f:14:cc:e3:c6:ab:db:29:ef:15:fc:c0:49:26:
0f:b3:85:2f:49:6a:64:0e:57:4d:1a:e6:c3:43:7a:
cf:0f:8a:ce:ab:d7:e1:41:12:c6:73:d6:e8:16:8e:
0e:9e:80:75:6c:d0:fb:3b:61:8a:a1:3e:39:63:93:
1d:52:93:3e:e6:84:81:fe:fc:5d:8f:5c:88:05:9b:
3d:a5:1c:ef:75:7c:2d:04:63:50:e8:2f:6d:77:5a:
6a:50:b2:51:c4:df:0a:83:60:e0:4c:fd:34:3d:9a:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:06:F0:41:1C:F9:30:75:DB:8D:4D:64:92:11:AB:2F:27:E6:D0
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dIkG8EEc-TB1241NZJIRqy8n5tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
99:fb:44:32:18:70:5b:a7:32:0b:1e:b3:b3:31:a4:9e:5f:de:
7c:0c:54:6b:49:d2:c0:01:25:5e:d9:6e:a3:04:3c:2e:d2:77:
2c:ed:66:f0:79:8e:66:fc:0b:47:87:74:c3:ca:6e:d0:14:cb:
54:e1:66:3b:6a:fb:78:83:1d:7f:55:a6:24:83:c3:07:99:12:
ba:89:a8:4f:f7:4c:c1:4c:4b:f8:ab:63:ba:0f:a6:d5:3d:3b:
b0:ac:f7:94:09:7e:71:4b:2f:2e:4a:ce:55:34:23:f3:c5:d0:
94:72:34:1a:ef:73:2f:df:d7:bc:d5:bb:c9:fa:9a:19:b3:b8:
c9:83:75:e6:50:79:33:25:a3:b8:70:de:7c:16:67:67:44:b4:
8a:2f:e4:2e:51:51:54:e2:df:21:46:31:e0:d3:b8:0c:db:56:
56:8a:71:01:fb:38:7f:44:9c:b3:0b:65:ab:e1:b2:7e:5b:d0:
49:69:76:c3:99:98:9c:dd:fe:d5:7c:a2:2e:ff:83:e7:e3:0b:
25:7b:6e:c2:2d:d2:44:de:2a:0e:9f:02:78:cb:a0:81:44:0c:
23:8c:c4:7d:78:4d:ea:0b:73:49:29:d4:cc:4d:e1:1c:6a:a2:
80:2c:68:d3:aa:ae:f4:8c:50:a7:f8:c3:ed:18:a8:c1:0f:2c:
4c:eb:5d:cb
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykrRYmzLexPl/NqLOlq+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDg5MDZmMDQxMWNmOTMwNzVkYjhkNGQ2NDkyMTFhYjJmMjdlNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kg1m5kguueAOgZhgxlcRPBnAJdf
UWtZ2+yXIgu90mwUSgDwXx6/msHV7HLGlE9OGBQsC8cjhLcpQR4U1EvIOxaR6EGH
CxUPvFFcMunrq8gWgy3s0HMWasL4mxUT6AAjNe207gbNs5fTTyEEmRF9S4s8IRXB
HceOWSnYo41dc1aPVRyIwTHRHNxkR4bEGtBRR4OMsDpqnxTM48ar2ynvFfzASSYP
s4UvSWpkDldNGubDQ3rPD4rOq9fhQRLGc9boFo4OnoB1bND7O2GKoT45Y5MdUpM+
5oSB/vxdj1yIBZs9pRzvdXwtBGNQ6C9td1pqULJRxN8Kg2DgTP00PZoBbQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHSJBvBBHPkwdduNTWSSEasvJ+bQMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvZElrRzhFRWMtVEIxMjQxTlpKSVJxeThuNXRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAJn7RDIYcFun
Mgses7MxpJ5f3nwMVGtJ0sABJV7ZbqMEPC7SdyztZvB5jmb8C0eHdMPKbtAUy1Th
Zjtq+3iDHX9VpiSDwweZErqJqE/3TMFMS/irY7oPptU9O7Cs95QJfnFLLy5KzlU0
I/PF0JRyNBrvcy/f17zVu8n6mhmzuMmDdeZQeTMlo7hw3nwWZ2dEtIov5C5RUVTi
3yFGMeDTuAzbVlaKcQH7OH9EnLMLZavhsn5b0ElpdsOZmJzd/tV8oi7/g+fjCyV7
bsIt0kTeKg6fAnjLoIFEDCOMxH14TeoLc0kp1MxN4RxqooAsaNOqrvSMUKf4w+0Y
qMEPLEzrXcs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:41 2026 by rpki-client