Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/emOUgYsJF6t2hybi_Uqamzv0bDc.roa
File: emOUgYsJF6t2hybi_Uqamzv0bDc.roa (raw, json)
Hash identifier: 3srnKAuZ0YOBq1PldHEnEdTDOn0MAVNp2j9nu6k2oIY=
Subject key identifier: 7A:63:94:81:8B:09:17:AB:76:87:26:E2:FD:4A:9A:9B:3B:F4:6C:37
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A67B7850390304E6EDC70293ED79
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/emOUgYsJF6t2hybi_Uqamzv0bDc.roa
Signing time: Thu 09 Apr 2026 14:08:26 +0000
ROA not before: Thu 09 Apr 2026 14:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396555
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a6:7b:78:50:39:03:04:e6:ed:c7:02:93:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a6394818b0917ab768726e2fd4a9a9b3bf46c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:84:b0:d4:92:ff:8d:01:d7:df:56:ee:a4:
82:d9:50:d4:d7:1b:8c:99:fe:3c:5e:d5:02:49:d4:
a3:3e:7d:bd:6b:52:65:e5:51:48:80:c2:f1:63:08:
c1:5a:5c:a0:a2:bc:6c:55:b2:72:44:f8:43:6c:8c:
16:b4:d0:80:51:4d:5d:56:ec:db:15:39:c2:21:b5:
8f:e9:cd:b9:66:84:b4:f8:67:1f:26:6a:7d:ab:6c:
2d:fc:d1:a4:f4:dc:3f:92:93:76:6b:cc:75:a2:3d:
f5:af:3b:f0:fe:b9:b0:25:f1:cf:85:b6:7f:82:11:
4e:2f:fd:26:99:f2:da:47:70:f9:1a:ff:f7:d3:81:
8a:d4:a2:e0:40:1d:74:f1:e1:a6:b4:c7:68:9a:cb:
08:3d:b8:6e:69:d9:5f:f6:02:3e:9f:64:1b:62:93:
b5:12:36:9a:38:33:8a:a0:16:97:d9:47:5b:2d:b9:
e0:06:7b:cd:19:b5:ab:ad:33:9b:8f:6d:ec:a2:ca:
ca:07:02:76:cf:b7:65:92:19:f9:85:ea:36:61:7a:
a0:a7:de:e1:a6:1c:21:68:07:58:d7:9f:7f:c8:47:
e0:51:89:04:86:ef:22:cb:a1:3b:a9:14:2a:10:ba:
a0:65:8b:ce:43:01:80:dd:bd:3b:4b:60:6e:5b:d5:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:94:81:8B:09:17:AB:76:87:26:E2:FD:4A:9A:9B:3B:F4:6C:37
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/emOUgYsJF6t2hybi_Uqamzv0bDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
be:53:1b:69:3a:6d:60:75:78:b7:09:b6:98:77:df:12:0d:f4:
fa:13:7b:c5:2f:80:80:26:48:70:fd:fc:26:49:51:3b:1f:30:
cd:07:3e:2c:34:d3:42:0b:ed:a0:03:c1:dc:a1:70:3a:1c:e9:
b9:69:97:36:0e:b3:1d:9a:ac:2d:30:dc:4b:1c:a8:6a:48:43:
17:a1:3c:4b:ee:16:7f:26:c6:54:70:35:53:2c:12:c6:a3:e0:
44:cd:b6:1a:b7:f8:fd:1c:85:87:92:15:7f:3d:33:ab:4e:39:
74:7d:cc:83:cd:ee:ec:ab:a6:f3:73:7d:fa:c7:ac:dd:75:37:
19:18:6e:ab:04:a9:39:d8:da:a3:0e:ba:63:ad:03:65:54:e4:
0b:3a:d4:01:8f:05:13:e9:a0:9e:68:83:ea:b6:75:ac:f6:f3:
21:ce:e8:05:33:a3:16:47:78:0a:2f:e6:21:0d:76:71:57:74:
b5:5b:cf:db:b6:0e:20:65:c7:b5:65:02:73:a3:d0:1b:16:1e:
78:68:38:6e:7f:8d:d0:51:99:ed:16:73:fe:a4:93:f1:4b:f2:
3a:50:c2:c8:ca:f2:e0:2f:23:58:db:fa:91:0d:8f:65:22:12:
cf:e1:fc:83:f7:1f:d6:32:76:0e:13:91:d8:2b:d0:1a:bd:98:
6e:f9:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:27 2026 by rpki-client