Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gMK1Etv2w4QuWdqgGtriW4cIoNc.roa
File: gMK1Etv2w4QuWdqgGtriW4cIoNc.roa (raw, json)
Hash identifier: VEmaJg6ddUiQ0GKxSwgWE1+4aOr6HOP4L3okhBjEcCU=
Subject key identifier: 80:C2:B5:12:DB:F6:C3:84:2E:59:DA:A0:1A:DA:E2:5B:87:08:A0:D7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D729291864F0529A7A40226A62D5D850C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gMK1Etv2w4QuWdqgGtriW4cIoNc.roa
Signing time: Thu 09 Apr 2026 14:08:21 +0000
ROA not before: Thu 09 Apr 2026 14:08:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19836
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:91:86:4f:05:29:a7:a4:02:26:a6:2d:5d:85:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80c2b512dbf6c3842e59daa01adae25b8708a0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:c5:0b:6d:0d:77:92:89:07:3f:46:0b:e6:
39:a2:79:eb:e7:85:ee:48:06:ea:17:77:16:51:2d:
3a:3a:cd:34:ca:97:24:6e:6d:bf:2f:7c:af:d0:c8:
c6:17:a3:85:7e:65:df:86:84:50:84:53:a0:be:4d:
5e:cf:ca:40:4a:09:06:39:0f:2f:24:e1:25:84:d5:
5e:a8:77:6f:dc:3a:37:4a:73:f6:42:c6:b1:be:16:
33:a3:f3:a4:c3:c1:ff:29:e1:e5:00:9e:16:0a:fb:
e5:74:39:df:6c:34:46:28:58:99:05:bc:30:05:6e:
63:5d:d1:e3:16:0b:a5:e0:94:36:b9:36:b6:74:68:
6e:bd:d1:98:31:8a:7d:8b:a1:5c:c5:81:7b:b1:a0:
43:d8:ed:02:eb:81:ff:40:0a:dd:6d:46:19:0a:28:
74:4c:6e:6e:55:9a:43:e8:1f:af:ad:62:15:f1:8c:
5d:f9:ea:bd:dc:8b:18:af:37:7b:32:0a:ad:62:4d:
c5:dd:1f:57:2a:4a:5a:b3:53:bb:25:a6:43:28:bc:
81:62:47:d3:9d:d2:e5:61:7d:95:e9:3f:7f:77:36:
f7:e7:bb:52:cb:08:d3:dc:21:05:5c:b0:d3:ef:45:
51:47:58:31:fb:9a:7d:ed:98:bc:10:eb:77:cd:72:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C2:B5:12:DB:F6:C3:84:2E:59:DA:A0:1A:DA:E2:5B:87:08:A0:D7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gMK1Etv2w4QuWdqgGtriW4cIoNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
26:73:eb:69:f5:59:a3:95:8a:14:3d:8a:5b:60:1e:89:89:21:
2a:11:1a:fa:b2:d3:59:01:35:5f:06:1e:93:da:e7:e0:bb:49:
e6:1a:17:19:23:1a:46:70:63:82:9b:2c:9f:7d:bd:61:11:ed:
4b:0c:69:7d:8a:5c:84:55:31:76:4c:b5:57:f0:b7:fe:3b:01:
9b:6e:e1:4e:01:d9:bb:56:14:2c:e6:11:24:61:9f:0a:e6:4f:
68:a9:5d:6d:0c:ab:30:f4:87:fe:cb:5e:97:fa:26:64:8e:57:
32:38:1f:05:0f:6c:63:ca:1d:73:27:f8:3e:1d:cc:82:9b:63:
fa:c8:1d:57:0d:ae:06:e7:9a:25:69:3d:5d:05:51:36:2d:e6:
8b:6e:f0:f2:b0:ea:6e:47:fb:a8:81:7a:25:d2:63:26:39:4a:
f8:c0:56:54:69:e6:58:de:bc:d6:f0:b9:ac:8a:c5:43:22:d8:
5f:59:42:92:a0:a1:d9:a2:d1:f7:e6:d2:43:55:1c:74:69:fa:
9e:a2:d2:c9:e0:b4:72:b1:6e:57:d8:27:23:c2:1a:59:b8:25:
3a:fc:0a:93:1b:96:7f:f1:7f:95:45:6b:33:4f:fa:f5:f3:d7:
03:ae:19:0a:5f:1e:71:d1:df:a5:e3:53:64:76:b6:a5:e7:7f:
7d:a4:04:27
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykpGGTwUpp6QCJqYtXYUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGMyYjUxMmRiZjZjMzg0MmU1OWRhYTAxYWRhZTI1Yjg3MDhhMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprFC20Nd5KJBz9GC+Y5onnr54Xu
SAbqF3cWUS06Os00ypckbm2/L3yv0MjGF6OFfmXfhoRQhFOgvk1ez8pASgkGOQ8v
JOElhNVeqHdv3Do3SnP2QsaxvhYzo/Okw8H/KeHlAJ4WCvvldDnfbDRGKFiZBbww
BW5jXdHjFgul4JQ2uTa2dGhuvdGYMYp9i6FcxYF7saBD2O0C64H/QArdbUYZCih0
TG5uVZpD6B+vrWIV8Yxd+eq93IsYrzd7MgqtYk3F3R9XKkpas1O7JaZDKLyBYkfT
ndLlYX2V6T9/dzb357tSywjT3CEFXLDT70VRR1gx+5p97Zi8EOt3zXIbvQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIDCtRLb9sOELlnaoBra4luHCKDXMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvZ01LMUV0djJ3NFF1V2RxZ0d0cmlXNGNJb05jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBACZz62n1WaOV
ihQ9iltgHomJISoRGvqy01kBNV8GHpPa5+C7SeYaFxkjGkZwY4KbLJ99vWER7UsM
aX2KXIRVMXZMtVfwt/47AZtu4U4B2btWFCzmESRhnwrmT2ipXW0MqzD0h/7LXpf6
JmSOVzI4HwUPbGPKHXMn+D4dzIKbY/rIHVcNrgbnmiVpPV0FUTYt5otu8PKw6m5H
+6iBeiXSYyY5SvjAVlRp5ljevNbwuayKxUMi2F9ZQpKgodmi0ffm0kNVHHRp+p6i
0sngtHKxblfYJyPCGlm4JTr8CpMbln/xf5VFazNP+vXz1wOuGQpfHnHR36XjU2R2
tqXnf32kBCc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:50 2026 by rpki-client