Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/g0fJ9_ekBP2CZhhk9oO_5Dn_5sw.roa
File: g0fJ9_ekBP2CZhhk9oO_5Dn_5sw.roa (raw, json)
Hash identifier: 2dO3HayQpH/34BtSGhuNxbGB8dX57ve9DiFGafQpxaQ=
Subject key identifier: 83:47:C9:F7:F7:A4:04:FD:82:66:18:64:F6:83:BF:E4:39:FF:E6:CC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292AE172AF733095DB391B5BEF1E029
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/g0fJ9_ekBP2CZhhk9oO_5Dn_5sw.roa
Signing time: Thu 09 Apr 2026 14:08:28 +0000
ROA not before: Thu 09 Apr 2026 14:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396578
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ae:17:2a:f7:33:09:5d:b3:91:b5:be:f1:e0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8347c9f7f7a404fd82661864f683bfe439ffe6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:cf:2d:a7:6a:ce:f9:44:aa:80:f5:7f:07:
fd:5e:e2:66:f6:ef:5a:b5:99:15:8d:96:51:4c:d4:
11:8d:9a:fc:6f:5e:2e:b1:d2:1a:db:ef:1f:44:7f:
ff:3e:f8:1d:81:40:43:dc:2b:05:1d:82:40:80:36:
5e:8a:c7:46:d6:7f:28:68:5d:c6:20:7e:89:dc:af:
6c:f0:1c:8b:3a:3f:50:e9:8f:cd:fb:8b:ad:13:ed:
89:e4:26:86:4e:a5:cd:ab:9c:95:50:d1:47:20:30:
30:25:f2:7b:e2:f2:8f:86:f3:99:ef:2d:d7:91:92:
2d:4a:5b:53:72:05:02:a2:fc:d7:df:d1:27:c4:03:
7a:62:dd:ab:38:51:b9:59:90:20:3e:7a:f0:66:b7:
37:99:c2:e8:45:24:10:37:6f:ef:ed:c7:0e:f6:4c:
21:16:c3:c8:7c:5f:68:5f:1a:5e:fd:7f:54:be:f5:
93:29:5c:30:b6:dc:15:e8:bd:7e:0b:b4:9a:9a:2d:
f9:ce:2d:94:d9:03:c0:d3:a7:74:68:05:09:6a:98:
fb:bc:36:3b:04:11:52:fd:46:1b:aa:02:d2:b8:ce:
dd:b0:08:60:e7:ef:67:2a:f6:d4:5c:6a:8d:d0:33:
26:1e:04:d9:51:13:02:ed:e9:ea:0f:74:11:65:7e:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:C9:F7:F7:A4:04:FD:82:66:18:64:F6:83:BF:E4:39:FF:E6:CC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/g0fJ9_ekBP2CZhhk9oO_5Dn_5sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
4c:21:8c:e4:b4:2f:5d:27:4f:f2:41:f8:ed:fa:b5:7c:8a:34:
27:3c:e1:d4:31:54:c0:cb:e5:c0:af:28:56:d6:b0:ea:a1:98:
98:ab:f9:d9:a4:80:b3:a7:40:5f:34:46:ef:be:e4:b8:4b:27:
e0:87:07:c8:1d:f0:a4:31:cc:60:56:ce:4d:42:d9:0f:8b:16:
0c:30:91:fa:89:eb:31:a3:0e:a1:04:5e:f9:f8:63:f0:b3:21:
dc:87:52:bd:47:e3:e2:3c:36:35:47:c1:67:82:b1:0e:e1:49:
f4:29:48:f7:36:c9:1e:34:84:ee:46:38:20:ad:a8:76:99:26:
29:0a:88:19:88:a1:be:cf:b9:fd:28:21:c2:f0:fa:d9:ed:01:
ef:cc:36:7f:44:48:d2:04:78:d9:99:b4:23:9e:4a:87:5f:17:
6c:4d:d9:f5:52:09:a3:94:06:6c:c9:9e:df:fb:ac:31:7b:81:
f3:9d:78:32:dc:6e:47:f8:88:f6:0a:7f:68:fe:14:80:73:c2:
2e:a1:c8:0e:f9:0c:ec:b5:b9:3d:4a:60:82:d2:fa:36:29:1c:
59:72:d4:ea:f4:ee:77:08:fa:1a:e1:69:ad:9e:48:16:53:58:
17:e4:b1:b5:ea:2d:0c:eb:ee:c9:53:a7:1e:30:58:40:20:63:
2d:56:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:51 2026 by rpki-client