Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jNUJ4U6pLJ9e58J780d_ZaZPZPQ.roa
File: jNUJ4U6pLJ9e58J780d_ZaZPZPQ.roa (raw, json)
Hash identifier: fTQMLycJkgXpoTnx2zSLYHqfDg7i8wA1aZlTASNFMHQ=
Subject key identifier: 8C:D5:09:E1:4E:A9:2C:9F:5E:E7:C2:7B:F3:47:7F:65:A6:4F:64:F4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929C86DA70387BAF16DC79C3691EE8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jNUJ4U6pLJ9e58J780d_ZaZPZPQ.roa
Signing time: Thu 09 Apr 2026 14:08:24 +0000
ROA not before: Thu 09 Apr 2026 14:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36629
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9c:86:da:70:38:7b:af:16:dc:79:c3:69:1e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cd509e14ea92c9f5ee7c27bf3477f65a64f64f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:60:3f:b6:a9:25:c2:03:13:7a:c1:a6:28:
3c:cf:e7:be:e9:0f:c6:fd:8c:be:cd:bd:c2:00:88:
b5:b0:3d:d2:8a:9f:04:26:1b:e7:1f:13:36:48:89:
79:30:51:01:86:85:cb:78:8b:33:78:c6:24:5e:a5:
ea:81:ef:85:f0:c7:e2:c1:b0:e0:72:3e:c2:ff:e8:
f4:9e:38:fc:91:e8:25:ef:31:c8:ec:68:93:27:8c:
02:1f:86:7c:f7:5d:8f:de:19:8d:9f:79:63:4a:24:
a6:0c:81:e8:ee:17:78:e8:1f:30:0d:03:95:64:fa:
1c:54:33:3d:55:8d:94:83:88:1e:3d:3a:34:68:b9:
8f:1a:f4:33:92:5a:c1:70:eb:bf:0e:01:d2:b8:f0:
77:bf:5f:e6:30:46:f3:ea:fc:7c:60:43:9e:43:41:
5a:5c:b1:6d:12:15:12:be:dc:3f:b4:14:ae:57:39:
92:db:ee:6d:cd:06:d8:52:ac:f4:20:64:c1:8d:71:
6a:5a:d0:af:5c:77:49:4b:d0:8a:b9:75:29:d5:24:
b9:3b:86:fe:fd:fb:b4:5f:ac:ca:0b:bf:c2:bc:6c:
b6:39:1b:2c:cd:bc:04:d8:e8:ee:87:eb:57:8a:db:
d6:f5:d0:c4:25:32:79:ab:6a:00:d2:a4:ed:94:be:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:09:E1:4E:A9:2C:9F:5E:E7:C2:7B:F3:47:7F:65:A6:4F:64:F4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jNUJ4U6pLJ9e58J780d_ZaZPZPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
57:87:17:44:66:31:ff:7f:ca:e6:36:45:8f:c7:1d:5a:f9:18:
22:c1:20:b0:10:65:15:41:e4:2d:11:9d:71:e1:cb:ff:4e:00:
c7:f4:9c:93:79:e3:a7:ca:f0:ad:5f:ce:a8:57:2c:88:ee:52:
10:d1:8b:ab:ea:79:1f:b9:fb:36:3a:c5:e0:d0:39:36:8c:3e:
c7:f7:39:0b:e6:d2:ac:80:a7:9c:87:b6:7f:b9:b0:be:12:b0:
a6:c5:18:83:cf:5d:a6:3d:b3:20:fe:75:d2:88:9a:c6:2b:28:
32:29:2e:2c:56:56:cb:af:9e:c1:c1:80:39:42:e6:09:a5:32:
a8:b6:f4:af:35:ed:d6:a2:73:9b:4c:63:c3:8b:e4:2e:1d:dd:
87:eb:5b:37:25:d9:74:61:ed:86:98:4e:44:0e:d6:e3:3b:6d:
b0:8c:7e:dc:ce:b9:6c:f5:87:10:90:3e:fb:f6:71:26:30:af:
e7:93:d8:47:a9:b8:85:c5:dc:c6:89:f4:d5:d9:f0:88:b4:fd:
34:32:5d:8f:7a:51:69:bb:ee:8e:a0:5e:16:07:2a:21:3c:74:
cc:cb:81:9c:b9:02:a8:90:93:a4:32:7f:38:01:c8:95:f7:d7:
ad:bb:46:db:48:9a:c8:59:01:bf:c0:da:75:71:f4:a6:c0:80:
66:57:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:15 2026 by rpki-client