Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gjjuJY1FRKICndu1cP-rSN-50tk.roa
File: gjjuJY1FRKICndu1cP-rSN-50tk.roa (raw, json)
Hash identifier: tbRPkwuGw6sln978uRnc75/MAYbwlEjgMW0WBPN1Q+c=
Subject key identifier: 82:38:EE:25:8D:45:44:A2:02:9D:DB:B5:70:FF:AB:48:DF:B9:D2:D9
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292AC213A8EC34C072A02CE354B36E3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gjjuJY1FRKICndu1cP-rSN-50tk.roa
Signing time: Thu 09 Apr 2026 14:08:28 +0000
ROA not before: Thu 09 Apr 2026 14:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396572
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ac:21:3a:8e:c3:4c:07:2a:02:ce:35:4b:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8238ee258d4544a2029ddbb570ffab48dfb9d2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:6c:0d:c1:9a:f6:8f:06:78:96:9c:aa:bc:
08:6d:40:a0:43:d1:87:77:22:da:1a:85:0d:0d:e0:
3c:83:a7:2a:9a:a5:ef:1e:6e:94:60:71:22:d7:31:
77:9f:8f:80:ce:cd:04:0d:12:0a:75:60:f3:ef:a2:
54:a9:7d:26:02:40:95:23:7f:cd:52:dd:64:21:70:
67:48:04:7e:1a:35:d0:44:e4:0c:f0:4c:e8:5c:30:
32:5d:18:6d:2c:1a:4c:8d:1c:95:9e:dc:06:77:bc:
86:bc:34:0b:70:23:97:db:5d:f0:c3:ad:1b:46:87:
ee:3c:db:f0:27:5f:a4:11:b9:65:4b:b2:2d:d5:d2:
0d:46:c2:de:31:61:7e:34:c2:a7:4a:fd:02:4a:e3:
ad:b3:43:d5:4e:79:1c:73:97:bd:28:e7:1a:b2:df:
04:c7:59:83:33:a9:2c:8d:a9:92:b4:8b:4e:c2:81:
b6:7d:0f:09:17:4f:a3:df:4b:4c:fb:bd:1e:c7:d8:
c4:b2:5a:d0:b1:d4:6b:6f:ef:51:67:15:1c:0b:8f:
f6:bb:f7:09:cd:45:a9:d9:db:45:5c:5d:2c:ab:fd:
1d:e3:05:b0:79:05:0e:7e:0d:44:0b:ea:fb:fa:f6:
30:b8:c8:2d:a6:00:65:6d:8b:b7:87:04:ce:34:e3:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:EE:25:8D:45:44:A2:02:9D:DB:B5:70:FF:AB:48:DF:B9:D2:D9
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gjjuJY1FRKICndu1cP-rSN-50tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
6e:f7:8f:1c:3d:3e:3a:49:2a:61:19:80:9e:26:60:ca:82:3e:
1c:62:4b:44:30:1a:cd:af:ec:e1:49:8e:3b:42:66:3e:34:59:
c5:2c:3f:90:f0:4a:46:a4:0c:ab:b0:cc:c1:58:52:23:10:cf:
d7:51:27:1e:7f:0d:38:3d:eb:99:e0:5f:08:3e:48:22:c3:e2:
74:8c:46:7a:71:d7:66:05:9e:bc:0e:98:dc:a7:46:24:fa:b7:
fb:1d:ac:7b:1d:3d:26:cf:11:23:10:e4:6e:37:01:6a:8e:13:
d5:67:4a:fc:36:cf:48:e1:5d:d5:e3:03:8f:4e:08:be:51:d4:
2e:df:57:d0:24:81:58:11:ea:4e:04:20:32:48:c9:dc:d5:e4:
42:d5:f3:b4:85:05:62:86:3a:31:e6:a9:ae:1b:76:49:43:18:
3b:09:6c:85:4c:db:f6:2d:6b:a9:68:b2:19:30:71:85:2b:d2:
38:09:8f:b8:c3:e3:42:88:36:b7:01:19:ba:45:16:6d:1e:c8:
ab:81:82:0e:99:37:c8:67:fb:f8:c1:43:8c:11:43:33:4a:9a:
ca:4c:d0:47:08:c1:e5:64:53:35:d6:c5:f3:1b:43:79:2b:1b:
5a:92:ad:7d:ae:03:8a:93:76:bc:18:d4:b0:46:37:2a:09:8c:
cd:3a:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:55 2026 by rpki-client