Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jft3zC8F5yXzzlXUGQ7g25DnOCs.roa
File: jft3zC8F5yXzzlXUGQ7g25DnOCs.roa (raw, json)
Hash identifier: F6VDhrLLO3HfLm2lL/ngasC+3BNtSP8uZHeOrTPIK8g=
Subject key identifier: 8D:FB:77:CC:2F:05:E7:25:F3:CE:55:D4:19:0E:E0:DB:90:E7:38:2B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929A726C733D5E5C02EE8C9A504489
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jft3zC8F5yXzzlXUGQ7g25DnOCs.roa
Signing time: Thu 09 Apr 2026 14:08:23 +0000
ROA not before: Thu 09 Apr 2026 14:08:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36625
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9a:72:6c:73:3d:5e:5c:02:ee:8c:9a:50:44:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dfb77cc2f05e725f3ce55d4190ee0db90e7382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:58:bc:f0:60:de:7a:71:66:a3:56:75:a7:
63:46:2e:a6:18:c2:a3:71:3b:57:65:77:d4:a3:d8:
1d:2f:b1:d5:3f:fe:ad:aa:89:e7:22:b5:8a:f3:7e:
af:f7:69:91:56:31:92:eb:0b:e6:d8:e4:c5:40:3a:
27:41:05:ec:a5:ae:01:20:a7:20:a7:5e:cb:3b:9c:
9b:80:44:86:ec:d2:03:f3:87:c2:ec:e4:6a:c4:97:
e9:d0:96:9d:8e:cf:96:46:86:17:d4:d5:1a:d1:c2:
2b:e5:cf:46:62:95:4b:7e:ed:39:e7:c9:c1:d8:b5:
ed:e3:eb:19:d8:ab:bc:1e:af:67:b0:e3:61:29:e1:
fc:a6:89:a5:43:bc:7e:48:f3:c9:9d:45:23:33:78:
5b:ae:eb:38:44:80:d8:35:2e:1d:92:66:9c:5c:15:
d4:91:39:cc:1a:50:f0:f4:bc:03:fe:59:30:e0:0d:
fd:80:97:b3:a7:25:83:96:f2:e9:ad:0b:3d:15:54:
5c:86:d9:04:47:9e:d3:73:ac:fd:f7:46:3f:34:7a:
bc:8d:1e:0a:03:c0:ab:e1:bd:c2:50:c5:72:d9:f8:
52:cd:c7:d4:4b:62:da:51:32:7f:a1:8b:b9:a5:e2:
a8:08:a6:87:b8:c7:ea:4f:0e:00:34:fd:b7:0a:00:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:77:CC:2F:05:E7:25:F3:CE:55:D4:19:0E:E0:DB:90:E7:38:2B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jft3zC8F5yXzzlXUGQ7g25DnOCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
95:2c:12:4a:70:39:ec:09:99:6b:58:27:28:79:be:a0:3d:7e:
57:8a:0b:cd:4b:2b:bb:a5:db:a0:a2:4d:c2:6b:54:a5:26:0d:
8d:d7:8f:38:a7:c2:63:a8:36:87:dd:4a:4c:c9:d4:02:3a:00:
d2:fe:b9:82:e9:e3:46:7d:21:ae:2e:7d:77:52:a3:fb:0e:60:
dc:3c:04:8c:9a:35:68:9a:b2:ad:57:29:a5:8c:5c:6a:f5:82:
a9:dc:51:2b:02:5d:40:19:12:4f:2a:b5:47:d2:85:83:e5:b7:
5b:e5:08:5b:32:43:c9:9f:8d:f4:1a:df:78:11:c8:db:3f:06:
b0:e5:ba:4e:03:16:12:20:77:24:b0:6e:a6:5c:d4:ec:e0:8a:
35:e1:c7:3c:86:03:45:aa:5d:43:5d:53:cc:a1:50:d7:2b:10:
bc:16:9e:c3:a7:7a:b5:5f:d4:90:21:f3:02:f8:e6:57:0c:35:
02:49:8b:8b:27:c5:0c:fa:62:08:30:b5:17:b0:03:71:d4:db:
1e:91:07:4c:1c:a9:a0:f5:13:d1:95:4a:8b:3c:6d:2b:e3:17:
2a:36:2c:c3:19:96:05:10:93:4f:2b:f6:e0:cd:c7:6e:c1:4a:
05:6d:04:97:bb:0b:04:ce:18:2f:05:3b:30:ea:2f:9e:36:ff:
e6:b1:39:e9
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykppybHM9XlwC7oyaUESJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGZiNzdjYzJmMDVlNzI1ZjNjZTU1ZDQxOTBlZTBkYjkwZTczODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdYvPBg3npxZqNWdadjRi6mGMKj
cTtXZXfUo9gdL7HVP/6tqonnIrWK836v92mRVjGS6wvm2OTFQDonQQXspa4BIKcg
p17LO5ybgESG7NID84fC7ORqxJfp0Jadjs+WRoYX1NUa0cIr5c9GYpVLfu0558nB
2LXt4+sZ2Ku8Hq9nsONhKeH8pomlQ7x+SPPJnUUjM3hbrus4RIDYNS4dkmacXBXU
kTnMGlDw9LwD/lkw4A39gJezpyWDlvLprQs9FVRchtkER57Tc6z990Y/NHq8jR4K
A8Cr4b3CUMVy2fhSzcfUS2LaUTJ/oYu5peKoCKaHuMfqTw4ANP23CgCIEwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFI37d8wvBecl885V1BkO4NuQ5zgrMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvamZ0M3pDOEY1eVh6emxYVUdRN2cyNURuT0NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAJUsEkpwOewJ
mWtYJyh5vqA9fleKC81LK7ul26CiTcJrVKUmDY3XjzinwmOoNofdSkzJ1AI6ANL+
uYLp40Z9Ia4ufXdSo/sOYNw8BIyaNWiasq1XKaWMXGr1gqncUSsCXUAZEk8qtUfS
hYPlt1vlCFsyQ8mfjfQa33gRyNs/BrDluk4DFhIgdySwbqZc1OzgijXhxzyGA0Wq
XUNdU8yhUNcrELwWnsOnerVf1JAh8wL45lcMNQJJi4snxQz6YggwtRewA3HU2x6R
B0wcqaD1E9GVSos8bSvjFyo2LMMZlgUQk08r9uDNx27BSgVtBJe7CwTOGC8FOzDq
L542/+axOek=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:23 2026 by rpki-client