Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/g620FN6La4SpjHxPLTwOPtAuuRg.roa
File: g620FN6La4SpjHxPLTwOPtAuuRg.roa (raw, json)
Hash identifier: WnJSjcwE3jSaudz0TPdNcOof55909deNefLn6QmR6PE=
Subject key identifier: 83:AD:B4:14:DE:8B:6B:84:A9:8C:7C:4F:2D:3C:0E:3E:D0:2E:B9:18
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292974EC708F02E9D2984382161BABB
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/g620FN6La4SpjHxPLTwOPtAuuRg.roa
Signing time: Thu 09 Apr 2026 14:08:22 +0000
ROA not before: Thu 09 Apr 2026 14:08:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36619
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:97:4e:c7:08:f0:2e:9d:29:84:38:21:61:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83adb414de8b6b84a98c7c4f2d3c0e3ed02eb918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:57:47:4c:63:11:4b:ef:8e:c3:02:5b:f7:
d9:d0:c4:52:5a:e3:cc:e4:03:63:6f:24:a6:6e:b7:
18:74:b3:dc:c0:c3:b6:52:7a:6d:51:9d:bc:83:b6:
fe:26:0e:f2:ab:b8:51:bd:49:57:8a:b4:08:90:0a:
36:18:73:ec:f2:f6:ac:fd:35:d1:b7:af:c1:87:c4:
ca:12:71:83:fe:23:8f:81:71:d2:c5:b0:c8:c6:02:
d7:ee:70:4e:ab:58:e9:89:6f:c5:f7:e9:41:8b:62:
cf:18:82:d4:8d:0e:c2:0e:8b:2a:f5:76:10:e0:2d:
ed:73:d1:08:dd:69:d7:cd:87:e6:59:ce:57:d9:8e:
54:b4:5c:db:6b:42:2d:8b:16:15:93:02:08:37:a1:
61:8c:d0:b2:a0:c0:5c:e6:75:0a:66:15:1f:91:99:
05:85:cb:3d:03:0b:6b:d4:16:84:8b:de:db:bc:e3:
ff:76:0d:50:1f:43:f1:ae:cf:15:e0:48:96:31:e3:
a6:20:18:e7:89:d6:89:f6:49:66:0f:c7:00:31:70:
a7:00:18:be:1f:62:5f:2f:8c:12:b9:11:75:49:ea:
96:90:86:9e:9c:78:07:1f:3f:d1:5e:9c:cf:c3:a1:
07:b4:74:31:fb:b5:63:3f:0e:54:32:d2:2e:2b:a2:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AD:B4:14:DE:8B:6B:84:A9:8C:7C:4F:2D:3C:0E:3E:D0:2E:B9:18
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/g620FN6La4SpjHxPLTwOPtAuuRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
71:d0:17:c1:82:55:f7:59:54:c9:56:58:fc:fb:17:c1:6d:15:
e2:11:b5:58:0b:28:0d:cb:92:d8:02:3d:56:ab:49:b1:4f:c6:
4b:a3:8a:1d:ca:bd:ee:0f:67:a8:10:71:69:19:0e:e3:4e:0f:
d7:b1:2d:21:e2:2f:ff:26:02:fa:ff:d5:92:36:6f:66:2d:a4:
02:4b:92:69:f4:aa:6b:c8:52:2e:d8:62:f9:a4:22:0c:ba:f1:
43:f1:6f:3a:51:be:dd:15:6b:b0:8c:8d:cd:9b:2a:a9:9b:4b:
13:7c:37:4e:6f:ce:af:22:f0:3b:9d:5c:bc:d9:bf:58:34:f6:
be:f5:ef:9b:65:e3:26:19:b6:1c:af:c6:99:0a:cf:04:cf:dc:
01:f5:8e:fa:5a:92:41:ef:ac:53:bf:24:68:e1:e4:cd:c5:d4:
71:ac:4c:b8:3d:24:41:92:14:f5:0d:39:6a:e8:85:1e:94:6c:
15:84:3f:c6:cd:7d:6b:e8:33:19:f5:35:4c:11:35:f4:4b:19:
ce:05:d2:43:73:b2:d2:9b:c0:41:18:7e:06:13:55:cd:ee:47:
3a:57:34:54:a8:ed:01:cb:30:dd:dc:97:2d:ce:48:2e:6f:b4:
5a:7b:83:da:a0:d9:9c:7e:7a:ad:af:cd:98:63:a1:6a:84:bb:
2c:ed:30:06
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykpdOxwjwLp0phDghYbq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2FkYjQxNGRlOGI2Yjg0YTk4YzdjNGYyZDNjMGUzZWQwMmViOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtatXR0xjEUvvjsMCW/fZ0MRSWuPM
5ANjbySmbrcYdLPcwMO2UnptUZ28g7b+Jg7yq7hRvUlXirQIkAo2GHPs8vas/TXR
t6/Bh8TKEnGD/iOPgXHSxbDIxgLX7nBOq1jpiW/F9+lBi2LPGILUjQ7CDosq9XYQ
4C3tc9EI3WnXzYfmWc5X2Y5UtFzba0ItixYVkwIIN6FhjNCyoMBc5nUKZhUfkZkF
hcs9Awtr1BaEi97bvOP/dg1QH0Pxrs8V4EiWMeOmIBjnidaJ9klmD8cAMXCnABi+
H2JfL4wSuRF1SeqWkIaenHgHHz/RXpzPw6EHtHQx+7VjPw5UMtIuK6LYrwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIOttBTei2uEqYx8Ty08Dj7QLrkYMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvZzYyMEZONkxhNFNwakh4UExUd09QdEF1dVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAHHQF8GCVfdZ
VMlWWPz7F8FtFeIRtVgLKA3LktgCPVarSbFPxkujih3Kve4PZ6gQcWkZDuNOD9ex
LSHiL/8mAvr/1ZI2b2YtpAJLkmn0qmvIUi7YYvmkIgy68UPxbzpRvt0Va7CMjc2b
KqmbSxN8N05vzq8i8DudXLzZv1g09r7175tl4yYZthyvxpkKzwTP3AH1jvpakkHv
rFO/JGjh5M3F1HGsTLg9JEGSFPUNOWrohR6UbBWEP8bNfWvoMxn1NUwRNfRLGc4F
0kNzstKbwEEYfgYTVc3uRzpXNFSo7QHLMN3cly3OSC5vtFp7g9qg2Zx+eq2vzZhj
oWqEuyztMAY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:23 2026 by rpki-client