Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jVCEGHvxHafYfP6DZ_5TfI2BRKg.roa
File: jVCEGHvxHafYfP6DZ_5TfI2BRKg.roa (raw, json)
Hash identifier: bVGXlOGc5SBpScgzgVqld6S4hx9rKwwnpUdliHWBRPY=
Subject key identifier: 8D:50:84:18:7B:F1:1D:A7:D8:7C:FE:83:67:FE:53:7C:8D:81:44:A8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B3E8112FD75C55A6606F7A6A8F85
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jVCEGHvxHafYfP6DZ_5TfI2BRKg.roa
Signing time: Thu 09 Apr 2026 14:08:30 +0000
ROA not before: Thu 09 Apr 2026 14:08:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396592
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b3:e8:11:2f:d7:5c:55:a6:60:6f:7a:6a:8f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d5084187bf11da7d87cfe8367fe537c8d8144a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:05:23:7a:75:fa:b8:a8:2b:cb:ca:6c:89:
d7:6d:a8:5e:48:b8:ef:00:f1:76:dc:ef:ce:08:88:
03:c3:36:1c:f3:54:c6:47:25:4f:1c:0c:c4:0f:94:
03:0d:6e:2e:d7:6a:97:93:6b:f8:23:52:ed:c1:c5:
f6:2b:b4:de:24:c6:9a:9b:2b:aa:a9:8a:7e:d8:94:
03:f9:3e:b8:94:54:2d:00:7f:92:0c:87:f5:dd:64:
c4:f9:24:28:7e:38:40:39:91:52:72:2b:c4:06:b0:
9b:95:3c:e4:38:4c:9e:4c:3c:6d:cc:d4:71:d9:ae:
6c:5a:d4:7c:43:b4:8b:92:13:a2:60:c6:5a:d8:c6:
dd:e6:a2:45:40:51:ac:06:94:b8:63:62:0f:51:35:
2f:1d:fd:63:4c:5b:71:9c:9b:c3:25:f6:0b:0a:e6:
a7:0b:c1:4a:42:c6:82:32:33:7e:c3:8e:33:10:ee:
b0:66:9a:c5:23:55:fd:2b:5c:45:aa:ab:33:77:e3:
c1:ba:56:b9:e8:12:7c:1b:c2:e8:a0:5d:36:9c:68:
49:79:89:54:b7:f9:5e:c8:be:0e:3e:5e:bd:3d:d2:
50:4c:1b:a3:59:13:a0:fd:43:1d:fc:54:4b:42:b7:
8d:e4:22:49:2b:17:77:23:78:61:6e:4b:0f:00:f6:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:50:84:18:7B:F1:1D:A7:D8:7C:FE:83:67:FE:53:7C:8D:81:44:A8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jVCEGHvxHafYfP6DZ_5TfI2BRKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
94:af:2c:01:10:b9:35:c9:dd:4a:b7:8e:e6:62:63:c8:22:34:
e9:b1:6f:d3:b1:5c:22:17:e8:27:55:ff:7c:3b:28:d8:a9:f2:
d0:e3:94:05:06:03:3d:c4:86:43:15:1c:37:89:21:3e:f9:2f:
ed:c5:f5:d3:0d:3e:d9:ef:96:ff:1b:26:c1:1a:63:bb:b2:9d:
04:d4:cd:f2:2d:5b:72:8b:4b:9e:46:15:e3:57:e8:41:5f:b6:
fe:de:75:5f:cd:bb:f3:f5:e1:5d:67:67:26:27:91:be:13:6a:
66:7b:1e:c3:d1:30:97:8f:0a:2a:3c:72:fd:5d:cd:1f:7f:d5:
73:b7:cf:99:79:4d:40:77:eb:10:e1:03:02:fc:69:10:66:fa:
6d:1f:7c:95:70:9b:cb:62:c7:d3:64:53:54:81:c7:72:20:59:
9b:96:14:3c:fe:ee:1f:6e:0f:ee:a6:d0:da:e7:d1:f5:a5:a3:
d7:47:8c:ab:2c:3c:d8:4b:73:ab:6c:54:e3:12:3f:16:4e:fb:
d8:93:0c:e2:0e:c9:1f:47:d9:65:dc:df:f3:ba:a9:62:68:78:
20:47:ff:b7:fe:7f:f2:25:6e:07:96:ae:bd:ed:3d:f1:8a:67:
93:07:41:ce:9e:6d:08:93:7e:5f:37:c7:51:37:5b:db:f2:da:
cb:f1:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:14 2026 by rpki-client