Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dL5qOnRLTx-PhFbzJPPW47QI5M0.roa
File: dL5qOnRLTx-PhFbzJPPW47QI5M0.roa (raw, json)
Hash identifier: yFDbq52q9Y6quZd9+vSii8Zsv1mKzA6jkGBzoFjbNyc=
Subject key identifier: 74:BE:6A:3A:74:4B:4F:1F:8F:84:56:F3:24:F3:D6:E3:B4:08:E4:CD
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292940C518FC6ED35818C0E71D228B0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dL5qOnRLTx-PhFbzJPPW47QI5M0.roa
Signing time: Thu 09 Apr 2026 14:08:21 +0000
ROA not before: Thu 09 Apr 2026 14:08:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25485
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:94:0c:51:8f:c6:ed:35:81:8c:0e:71:d2:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74be6a3a744b4f1f8f8456f324f3d6e3b408e4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:0c:da:52:78:29:6d:05:b6:4e:31:78:4f:
1b:dc:51:04:54:47:5d:31:5c:51:af:81:a0:aa:16:
2b:f5:f2:2b:08:41:b6:b1:7d:eb:a1:85:90:d2:5b:
51:63:3e:86:1c:ba:7f:3b:54:9a:c2:4e:82:95:fa:
63:cc:64:4f:ec:46:13:77:94:8e:47:54:55:63:d1:
9a:d3:cf:50:39:00:11:e1:7d:4c:01:a7:b6:5a:8b:
86:a4:3a:9a:ef:9b:1b:a0:0d:ca:85:8a:93:89:c1:
29:34:19:e8:34:32:e2:97:87:4b:f2:3e:e8:9c:47:
7b:f2:12:c8:40:06:0e:32:4a:b3:97:14:ab:2f:5f:
88:9f:81:45:e3:b4:91:1a:0e:90:06:6d:d1:c6:97:
be:eb:67:5b:48:a6:12:44:df:91:8f:2e:2c:14:3a:
9a:0f:6a:12:52:f8:83:91:2b:dd:4e:3a:3f:bf:4b:
ff:11:cd:ad:40:97:c5:8d:a0:4a:54:ed:e8:62:d8:
b9:84:50:d3:da:39:5d:f3:7f:3d:14:d6:6d:fe:4d:
a5:21:7b:60:78:f5:64:80:2e:da:1d:d9:c2:f9:68:
ee:57:c5:27:02:69:db:ae:a4:08:c8:5e:4e:dc:96:
03:e9:26:8f:5e:87:45:f0:a1:b6:fc:7b:ef:b5:d7:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:6A:3A:74:4B:4F:1F:8F:84:56:F3:24:F3:D6:E3:B4:08:E4:CD
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dL5qOnRLTx-PhFbzJPPW47QI5M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
73:2c:75:9e:9c:b0:5d:e6:04:f4:4f:0e:86:b7:bc:df:4f:27:
6c:7c:ce:5c:b5:68:06:62:34:c5:4b:a5:a5:94:ba:14:f2:a6:
1e:fc:a3:6d:7a:55:f3:4c:aa:2b:f9:b7:58:cc:21:a4:cd:31:
46:0c:b7:0b:32:1a:27:e6:b0:11:9b:30:58:1d:d4:e0:dd:4a:
a5:ed:e1:f4:00:45:71:83:85:9e:44:d9:1d:73:4e:0c:41:73:
0a:fc:4b:c6:07:ce:b4:24:fd:9f:2c:34:88:a2:90:7b:82:33:
91:66:c5:ee:d1:ca:e7:2f:7d:b7:29:95:5b:fb:88:ce:5e:a8:
10:e1:1e:52:6c:69:e3:03:17:39:6b:82:8c:9b:72:40:6a:b5:
f2:72:db:c7:70:13:3b:76:1e:79:4e:03:6c:57:b4:00:b0:f4:
f3:7b:b2:05:e8:ec:40:b2:84:bb:88:a2:fa:48:96:28:a5:29:
07:ed:33:03:57:09:b3:2d:bf:c3:f7:72:11:e4:d1:f9:9f:6a:
85:19:8b:60:13:80:65:9d:4d:c2:44:52:1b:88:95:6c:2d:d4:
4b:20:6c:a0:1f:e5:2e:1f:b0:a4:27:c4:a6:54:ed:22:ad:5d:
57:5f:9b:f0:c9:e3:f5:57:a1:ee:01:7f:5e:5a:cf:c5:00:b6:
6a:fc:9d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:32 2026 by rpki-client