Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/leGqWtQiQ-h6orynBmd3zzvfnhw.roa
File: leGqWtQiQ-h6orynBmd3zzvfnhw.roa (raw, json)
Hash identifier: 7Bf89MPUp7rJZnl4RrltKzpPkvC+4pWE2lWx8/HwPp4=
Subject key identifier: 95:E1:AA:5A:D4:22:43:E8:7A:A2:BC:A7:06:67:77:CF:3B:DF:9E:1C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292947A56121FD300BC4C62A2859B31
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/leGqWtQiQ-h6orynBmd3zzvfnhw.roa
Signing time: Thu 09 Apr 2026 14:08:22 +0000
ROA not before: Thu 09 Apr 2026 14:08:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32651
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:94:7a:56:12:1f:d3:00:bc:4c:62:a2:85:9b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95e1aa5ad42243e87aa2bca7066777cf3bdf9e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:5a:9d:04:f3:48:49:dc:ce:8d:7c:c0:7f:
bf:aa:01:9f:17:77:01:e9:c1:28:ca:c5:55:a0:75:
46:8e:34:ee:19:7e:bc:23:dc:d2:eb:20:34:50:1e:
09:bb:34:cb:c7:52:00:fd:61:2f:82:09:3d:29:7a:
ba:8d:82:c3:bf:30:43:53:8b:19:45:d6:20:7a:81:
28:60:79:f8:45:08:4f:c1:5d:d4:c5:34:16:cc:92:
e7:37:7d:01:d8:05:b0:cb:a4:30:af:1c:22:26:1d:
05:ef:b8:b8:e1:61:2e:b1:7f:5f:1a:69:72:cb:04:
e8:b1:4a:44:40:d3:e5:10:fd:e0:29:a2:98:09:e7:
66:d6:ed:04:e2:5d:17:89:2b:f7:e2:af:67:30:61:
03:a3:e0:17:b9:22:aa:b5:92:ae:2b:89:eb:a2:4b:
78:6d:c5:90:ed:1f:81:fd:58:92:bf:bc:d1:3a:5e:
01:a6:62:92:6f:97:6a:cf:2d:fd:34:08:0e:2a:cb:
03:b6:3d:7e:b3:77:53:2d:8f:46:26:ff:37:ee:13:
fe:a3:93:95:6d:5b:8e:30:10:32:27:1b:56:b1:0c:
7d:2a:74:84:bd:ce:7f:f4:27:ee:ab:f3:df:3f:f1:
62:7b:82:eb:15:fb:c1:42:d7:31:17:96:da:d4:0f:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E1:AA:5A:D4:22:43:E8:7A:A2:BC:A7:06:67:77:CF:3B:DF:9E:1C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/leGqWtQiQ-h6orynBmd3zzvfnhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
78:c4:29:cc:b0:e5:ff:69:1c:71:41:15:77:db:4f:66:dd:b7:
85:84:55:41:81:6e:6b:57:3a:c3:f5:ff:fe:6d:ad:10:43:64:
39:61:e0:b2:44:ca:2e:2a:d7:3d:6c:c8:18:63:de:f2:f8:af:
02:f9:c0:bc:84:90:83:4c:d2:5b:1b:c4:a4:b1:9d:b2:4b:95:
34:66:ff:15:8d:71:bf:c0:b1:78:01:8f:3b:8e:26:a8:cf:a1:
a3:60:7d:21:9c:f4:12:d3:80:1f:9d:e0:b8:50:d3:bc:56:d5:
24:a5:c6:64:e1:95:24:c9:6f:d1:98:60:40:15:74:06:3a:cb:
0f:42:54:8f:1b:2b:21:60:6c:69:1f:8a:e0:3d:f4:f0:29:20:
bd:a6:fb:e9:ae:13:dd:32:3f:be:96:b6:0b:da:e0:a6:d0:14:
06:d1:d1:30:59:bf:fe:d8:f9:d7:e6:30:91:71:5e:c5:e9:d0:
04:f9:3e:b3:62:b5:9b:68:33:e4:78:7b:0a:1c:45:37:da:78:
c0:3f:5b:82:92:ff:60:97:c0:74:1d:9f:68:25:50:c4:e4:86:
b0:42:f5:46:de:4d:20:58:be:9b:99:36:ee:1d:d8:8d:da:84:
2f:16:13:6a:81:31:ff:d7:d3:4b:c1:8f:75:3e:06:b8:32:bb:
c6:c3:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:50 2026 by rpki-client