Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kj15emZ4hjaJQIryYbISWLgw2qk.roa
File: kj15emZ4hjaJQIryYbISWLgw2qk.roa (raw, json)
Hash identifier: +MT/Rw4bYkcUkXVrfLWJN0RJcrqrGT7IZLLnh5+iou4=
Subject key identifier: 92:3D:79:7A:66:78:86:36:89:40:8A:F2:61:B2:12:58:B8:30:DA:A9
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C1305C3F00A26B9A538C11EAA054
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kj15emZ4hjaJQIryYbISWLgw2qk.roa
Signing time: Thu 09 Apr 2026 14:08:33 +0000
ROA not before: Thu 09 Apr 2026 14:08:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396616
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c1:30:5c:3f:00:a2:6b:9a:53:8c:11:ea:a0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=923d797a6678863689408af261b21258b830daa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cd:af:d0:80:8e:27:93:7a:75:40:82:53:9e:
8b:44:4c:fc:1a:9d:02:bc:2b:8f:95:d0:cb:ed:c6:
60:a6:0a:b4:0f:a5:f0:05:d6:ea:37:eb:b1:b9:0c:
5b:69:0f:3f:bb:4b:7e:70:54:e7:3d:d6:05:c8:06:
8c:08:1a:fa:fb:1b:bd:ed:6e:23:93:23:c7:9e:7f:
f9:e3:81:37:df:15:93:0e:e6:b7:64:06:4f:a9:e1:
19:1c:86:a8:39:34:3f:09:39:85:87:88:5c:22:8c:
74:b9:86:e3:83:c2:5c:f1:75:b2:75:b1:32:7f:14:
20:02:fb:5c:db:f3:a1:71:82:92:1d:5f:9e:4e:6b:
ef:df:79:6d:2b:bd:93:b0:7e:ff:a1:80:83:2d:12:
93:89:4c:44:a1:88:ab:98:68:ee:af:fd:a4:ac:bc:
8f:13:af:35:a9:5d:56:ff:eb:4a:13:75:36:5d:33:
5d:b1:13:2f:79:95:f1:68:da:0d:db:98:89:67:a7:
a7:2c:28:ab:d7:01:74:48:c6:e5:2b:96:f1:1c:dc:
fa:36:74:ad:41:6a:c6:d9:42:dd:d3:93:82:ce:b6:
eb:18:84:32:6a:ba:c5:be:25:ce:31:7a:95:c4:c4:
21:17:09:fd:bb:b5:0e:c2:54:73:bd:81:92:38:81:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:79:7A:66:78:86:36:89:40:8A:F2:61:B2:12:58:B8:30:DA:A9
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kj15emZ4hjaJQIryYbISWLgw2qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
8c:7d:2b:0d:bf:e8:f3:68:aa:40:dd:1f:b4:ff:0d:60:ea:3e:
b3:81:c3:bb:0f:b2:d2:48:b8:46:d2:eb:27:e4:92:2c:c0:bf:
4c:38:f0:1f:df:fd:19:86:50:32:f1:5d:2b:c8:48:55:70:5b:
50:16:b7:22:b1:4c:c0:3d:e9:00:c8:10:cd:5d:5c:c1:52:cb:
07:7d:57:3f:fc:cb:82:4a:9f:30:68:60:ae:c8:4a:22:f6:42:
c4:8e:79:6e:83:66:05:71:3a:2b:22:7c:25:3f:eb:b4:ad:51:
cc:2c:b7:d2:da:d2:b1:a0:47:51:80:bc:b6:17:83:c9:ad:c7:
71:dc:2a:f6:f4:94:31:d0:e9:84:99:b6:d8:97:11:70:a2:a7:
27:87:67:92:f5:01:0e:e9:f2:30:c5:7d:7b:41:ef:80:09:75:
2e:40:96:fd:6b:c5:db:91:db:c3:25:2d:b7:ba:d6:b5:a9:1f:
19:03:9b:c6:cf:4f:f5:e6:de:4a:91:86:c4:60:ec:eb:57:49:
ef:30:5a:8d:8c:5e:a9:95:8b:86:45:65:88:a6:07:c0:6c:b4:
a2:39:1d:44:63:de:63:53:79:a5:cd:60:14:3b:8d:2b:c4:0f:
25:1e:dc:5a:4c:84:5a:d3:7c:33:de:29:12:15:1d:4c:6a:11:
8b:27:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:10 2026 by rpki-client