Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ljXzdu-KhL_cqf6NhWAfy1ZPAF8.roa
File: ljXzdu-KhL_cqf6NhWAfy1ZPAF8.roa (raw, json)
Hash identifier: 73txLXyOph+K7mxpCikSCodpKdyXFUC5rlN+q0jSGoA=
Subject key identifier: 96:35:F3:76:EF:8A:84:BF:DC:A9:FE:8D:85:60:1F:CB:56:4F:00:5F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A288E1E377310343D59E64ED6E37
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ljXzdu-KhL_cqf6NhWAfy1ZPAF8.roa
Signing time: Thu 09 Apr 2026 14:08:25 +0000
ROA not before: Thu 09 Apr 2026 14:08:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396546
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a2:88:e1:e3:77:31:03:43:d5:9e:64:ed:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9635f376ef8a84bfdca9fe8d85601fcb564f005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:72:a5:60:8c:ba:79:7a:50:21:2c:36:2a:
6d:3f:5b:11:d6:29:38:fe:a3:4e:6b:4d:41:7b:25:
5c:1e:6a:d5:44:3f:a2:5b:51:68:7d:4d:25:e9:f9:
8e:82:5b:03:0a:be:a7:dd:da:4b:22:05:34:8e:d4:
a5:83:4a:c2:09:ca:14:27:4d:19:45:9d:61:8c:f4:
71:2e:f9:6d:d9:b3:7c:34:a3:5d:7c:53:c3:e5:a5:
56:bf:50:4d:2d:60:ed:62:95:7b:75:d8:d6:6d:96:
14:ec:62:e0:b0:40:e3:d6:dd:83:66:dc:42:79:66:
45:18:0a:2f:24:f3:bf:29:b1:43:59:8b:d2:77:87:
e0:d5:86:cc:0b:2f:63:c6:47:d5:47:70:50:ff:08:
30:3e:64:54:66:fe:54:36:04:b8:82:b6:ee:8c:86:
b7:e1:6f:72:01:c2:f8:f4:4e:13:91:26:68:39:42:
68:ca:be:38:02:25:51:2d:e8:71:87:ca:8e:c4:6d:
73:9a:80:6b:d4:54:6e:99:4c:2a:73:f9:23:e9:b1:
c2:2a:5a:3a:bd:85:b0:84:50:3b:2a:43:7b:50:9f:
fe:3a:c6:13:ed:3a:6d:ca:86:4b:73:b5:0e:35:e0:
13:a8:38:ce:9f:06:5b:11:e8:e0:d8:75:fe:79:36:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:35:F3:76:EF:8A:84:BF:DC:A9:FE:8D:85:60:1F:CB:56:4F:00:5F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ljXzdu-KhL_cqf6NhWAfy1ZPAF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
5b:50:b6:21:49:78:14:31:aa:6b:f8:7a:30:49:2b:25:f0:d2:
6a:ae:3e:8c:7d:44:8c:36:9d:90:bb:5e:db:4e:2d:f5:f6:d2:
de:e8:49:7e:4f:0c:50:5e:28:9a:74:c5:5d:9d:8f:ef:7d:d1:
08:0b:38:63:85:29:17:56:2d:44:a6:82:9b:33:fa:00:93:5b:
2e:08:cd:53:56:32:62:96:a8:bf:af:74:af:df:09:1b:f1:6d:
d2:db:af:e6:37:6b:65:28:0c:16:6c:17:ba:d6:6b:01:20:d9:
67:dc:36:18:14:1c:da:f4:b9:1f:ff:47:8a:2b:78:93:b2:5d:
69:87:79:f6:6e:ac:2f:11:48:26:82:74:1a:57:3d:04:ac:d7:
26:25:59:bc:f7:35:a8:cd:75:a8:78:43:d9:93:af:9d:b5:c5:
e4:98:f3:8e:10:9b:ba:2e:91:f4:a0:67:29:fe:03:df:f9:34:
a5:c3:53:4d:ea:e9:76:c0:97:9c:78:e7:4c:8f:82:c8:56:72:
04:51:4a:6a:f9:e7:f0:12:f7:49:7c:f1:1c:b9:59:fe:f2:af:
f8:80:1b:6a:0f:9f:86:b6:05:f9:98:75:2a:91:23:ae:22:e9:
31:7d:3c:49:7a:5b:02:b4:6c:29:8a:f1:79:e2:67:37:44:06:
95:48:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:15 2026 by rpki-client