Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iSPqohqpri8QAsp0T2qQCXs9z9c.roa
File: iSPqohqpri8QAsp0T2qQCXs9z9c.roa (raw, json)
Hash identifier: Xja5vj2L/jSE+vy98YkBLaqbqPNUZJgNB4oFOZctxhc=
Subject key identifier: 89:23:EA:A2:1A:A9:AE:2F:10:02:CA:74:4F:6A:90:09:7B:3D:CF:D7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292BF2BDCCAFE94F9E8A380EAF5710A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iSPqohqpri8QAsp0T2qQCXs9z9c.roa
Signing time: Thu 09 Apr 2026 14:08:32 +0000
ROA not before: Thu 09 Apr 2026 14:08:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396611
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:bf:2b:dc:ca:fe:94:f9:e8:a3:80:ea:f5:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8923eaa21aa9ae2f1002ca744f6a90097b3dcfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:dc:a5:03:a8:00:3f:ae:98:88:52:7e:0e:
9e:6d:19:a0:7d:d8:13:ed:51:a7:37:e7:a4:80:f3:
74:94:6d:5a:c7:21:50:55:69:a9:a1:58:ad:2c:38:
11:de:9d:55:67:67:d9:91:1c:31:2b:f1:06:19:ae:
b3:43:2e:b2:14:e4:b6:a3:1a:8c:01:de:3e:3f:5c:
74:9c:df:5a:6c:40:fb:9d:03:46:ed:18:63:b1:1f:
49:c1:3c:ed:37:86:fd:35:f9:6d:e6:03:70:ff:e5:
d1:b5:0d:22:e7:85:f8:f5:fa:3f:99:80:49:81:ff:
23:e2:7b:73:ff:0c:50:2f:60:b6:d2:1e:c7:d1:ba:
c4:f2:e1:59:a4:20:7c:e9:75:40:9c:73:0a:58:9e:
43:49:f4:2d:a2:54:f6:74:48:7d:cb:b3:b4:d0:13:
54:d6:6d:5c:41:dc:a4:7f:c5:5f:d7:45:70:2a:b1:
df:e3:ef:7e:0b:a3:2a:e7:db:df:bb:c2:10:0d:7c:
82:86:6a:91:5a:37:66:05:a2:84:1c:e7:d7:4f:8d:
ea:1c:bf:e6:57:e0:a9:42:45:5b:c9:e0:80:06:47:
bc:4a:67:ed:1c:17:0f:db:15:1b:af:75:4d:0f:63:
e7:2d:d9:5d:e1:29:77:4a:9e:35:e3:f9:c3:2e:e0:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:23:EA:A2:1A:A9:AE:2F:10:02:CA:74:4F:6A:90:09:7B:3D:CF:D7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iSPqohqpri8QAsp0T2qQCXs9z9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
21:6e:ae:f5:25:1e:68:5f:b7:8b:c1:9d:92:5c:f8:72:cc:da:
70:93:a5:9a:27:df:9d:04:7f:52:fa:d2:54:ad:aa:dd:fb:ee:
e8:d6:3b:43:3c:9e:0a:c2:31:c0:db:1a:ea:a1:62:c4:69:f5:
50:2a:64:1c:ab:14:17:ff:be:da:59:3e:d7:4c:92:fd:0a:1c:
04:c5:3f:7c:0b:bf:94:d6:91:fa:3a:a4:32:b4:b9:75:4c:69:
36:8e:51:68:b5:ef:bf:cf:52:99:ab:78:40:f0:9b:55:58:cd:
e6:a9:8c:ee:04:2d:b1:34:03:2d:62:2d:e0:f9:ce:d3:dd:f8:
ab:02:cf:99:f0:cd:ba:ad:34:74:bc:eb:b0:de:44:d3:c3:68:
5b:ca:d4:87:e2:3a:9f:12:ea:21:f7:17:21:0e:86:22:e1:29:
e5:6a:44:71:59:ee:be:c0:af:d6:25:67:ae:4e:af:1b:b5:ee:
be:49:ec:f3:9b:e4:64:4d:01:98:04:42:e2:9f:87:c0:af:f0:
21:df:34:bb:bc:b9:f2:37:0d:cb:30:d5:0c:4e:72:7a:01:93:
74:71:d7:30:88:2c:69:20:a2:bd:79:24:64:55:ea:22:b9:b1:
f2:cd:8c:6b:1b:e7:68:08:01:9d:a1:91:2d:24:a2:2d:a1:a4:
01:ad:65:9a
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykr8r3Mr+lPnoo4Dq9XEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTIzZWFhMjFhYTlhZTJmMTAwMmNhNzQ0ZjZhOTAwOTdiM2RjZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9fcpQOoAD+umIhSfg6ebRmgfdgT
7VGnN+ekgPN0lG1axyFQVWmpoVitLDgR3p1VZ2fZkRwxK/EGGa6zQy6yFOS2oxqM
Ad4+P1x0nN9abED7nQNG7RhjsR9JwTztN4b9Nflt5gNw/+XRtQ0i54X49fo/mYBJ
gf8j4ntz/wxQL2C20h7H0brE8uFZpCB86XVAnHMKWJ5DSfQtolT2dEh9y7O00BNU
1m1cQdykf8Vf10VwKrHf4+9+C6Mq59vfu8IQDXyChmqRWjdmBaKEHOfXT43qHL/m
V+CpQkVbyeCABke8SmftHBcP2xUbr3VND2PnLdld4Sl3Sp414/nDLuBwBwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIkj6qIaqa4vEALKdE9qkAl7Pc/XMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvaVNQcW9ocXByaThRQXNwMFQycVFDWHM5ejljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBACFurvUlHmhf
t4vBnZJc+HLM2nCTpZon350Ef1L60lStqt377ujWO0M8ngrCMcDbGuqhYsRp9VAq
ZByrFBf/vtpZPtdMkv0KHATFP3wLv5TWkfo6pDK0uXVMaTaOUWi177/PUpmreEDw
m1VYzeapjO4ELbE0Ay1iLeD5ztPd+KsCz5nwzbqtNHS867DeRNPDaFvK1IfiOp8S
6iH3FyEOhiLhKeVqRHFZ7r7Ar9YlZ65Orxu17r5J7POb5GRNAZgEQuKfh8Cv8CHf
NLu8ufI3Dcsw1QxOcnoBk3Rx1zCILGkgor15JGRV6iK5sfLNjGsb52gIAZ2hkS0k
oi2hpAGtZZo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:48 2026 by rpki-client