Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kpr9RiR0bSDtfPGib7iErChh89c.roa
File: kpr9RiR0bSDtfPGib7iErChh89c.roa (raw, json)
Hash identifier: vRZmg+PZQpM2DKlLMVpZkMnlg422cqI0PyGccB74kaA=
Subject key identifier: 92:9A:FD:46:24:74:6D:20:ED:7C:F1:A2:6F:B8:84:AC:28:61:F3:D7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C36A5B99936803BA22119016845C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kpr9RiR0bSDtfPGib7iErChh89c.roa
Signing time: Thu 09 Apr 2026 14:08:34 +0000
ROA not before: Thu 09 Apr 2026 14:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396827
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c3:6a:5b:99:93:68:03:ba:22:11:90:16:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=929afd4624746d20ed7cf1a26fb884ac2861f3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:0a:ea:b4:90:8f:8e:6b:6c:0f:b8:06:f6:
bf:e9:46:e5:cb:a2:de:45:19:63:d8:99:64:25:de:
b9:f1:01:ad:e3:f6:16:04:e8:a2:79:2f:2d:38:e8:
b8:bb:7f:ba:18:a0:0d:4e:4d:a8:92:85:65:9d:31:
48:5d:38:4f:a7:eb:ab:74:4e:28:c7:ee:9b:a5:a0:
02:ae:e7:96:a7:2d:93:3c:1f:f5:06:44:8f:7c:46:
c2:03:87:e7:ca:2d:a3:d0:9b:94:42:bc:29:41:41:
28:b2:63:25:73:7d:36:39:a6:8a:2b:88:ba:ef:0b:
d0:de:f3:7c:73:01:da:87:ee:a9:4b:14:05:35:db:
39:01:b7:74:d5:d5:84:2f:0d:7a:71:ef:64:25:26:
74:75:e6:cf:75:b3:c0:dd:2e:90:52:58:9d:09:e3:
e5:26:6f:55:58:36:3f:1b:d1:aa:fa:ea:62:c2:34:
34:59:e4:de:26:33:ef:0e:90:ce:02:a0:bc:56:35:
46:0f:69:4e:43:1a:3c:2e:05:d6:a5:69:a9:b7:f0:
91:42:2b:51:83:96:73:8f:fe:51:65:f7:68:d9:be:
91:b0:0e:3f:de:00:64:55:9a:99:02:8f:b8:46:0f:
f5:fe:0b:bb:31:f3:5a:91:18:8e:95:8d:9c:ab:2f:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:FD:46:24:74:6D:20:ED:7C:F1:A2:6F:B8:84:AC:28:61:F3:D7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kpr9RiR0bSDtfPGib7iErChh89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
31:a6:09:b6:7b:11:cb:fc:06:cb:70:d9:1f:6a:f0:8d:d5:71:
6a:85:3c:b8:1d:9e:c5:3c:2f:7f:8a:7d:e8:22:88:ae:0f:e3:
bb:25:ce:cf:5c:19:3d:af:f0:a6:3b:a6:8c:94:a3:3f:f9:22:
77:7c:bd:bf:27:c1:da:7f:b7:0f:ed:61:b0:a6:15:b3:99:1f:
5f:ea:86:b0:72:66:ed:21:3d:74:19:6e:7b:22:51:44:7f:de:
90:da:af:d1:7f:f1:11:7e:64:6d:63:bb:a4:ba:3b:98:8a:e4:
ff:cd:e6:8d:b3:94:ab:eb:db:f3:7f:bf:b9:5e:7e:4d:8b:c6:
f9:12:fa:98:c0:1a:86:48:58:7f:93:d1:54:59:98:54:a7:57:
43:fd:62:d2:60:6e:83:56:1f:1f:79:af:70:6d:e0:a3:99:62:
e1:74:c4:07:c3:0d:26:6d:c4:0c:2e:22:d9:63:30:d8:38:26:
8f:68:b1:57:c8:84:5c:c8:24:2a:3c:b6:2f:2b:c2:af:2c:73:
04:3a:0d:51:09:90:68:d3:c4:ca:5d:4b:0c:c0:dc:96:d5:c2:
ca:5b:3c:5c:12:51:e4:13:c6:44:58:5d:07:db:11:c2:9c:ac:
49:ca:13:87:58:13:8f:58:c4:14:6b:d7:7f:81:cc:6c:1b:3e:
89:b5:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:22 2026 by rpki-client