Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nR6aaS0-mvjTCPmSO9UfCgA88Gw.roa
File: nR6aaS0-mvjTCPmSO9UfCgA88Gw.roa (raw, json)
Hash identifier: wuRa9d7dMvBcCBrInApfRoi3goFLCSwV1afq6AY2mBE=
Subject key identifier: 9D:1E:9A:69:2D:3E:9A:F8:D3:08:F9:92:3B:D5:1F:0A:00:3C:F0:6C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929451710E6D26C709FD4516131D54
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nR6aaS0-mvjTCPmSO9UfCgA88Gw.roa
Signing time: Thu 09 Apr 2026 14:08:22 +0000
ROA not before: Thu 09 Apr 2026 14:08:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27544
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:94:51:71:0e:6d:26:c7:09:fd:45:16:13:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d1e9a692d3e9af8d308f9923bd51f0a003cf06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:88:9f:f3:79:9f:16:a8:26:54:35:a6:6e:
90:0f:4d:d3:72:5e:6a:3d:b1:13:06:fd:e5:57:c3:
aa:3d:82:9b:96:65:5c:4e:4c:f3:5c:f2:c0:3c:07:
4b:51:fb:b5:e3:16:fc:88:e7:46:fe:77:62:77:13:
f7:bd:9b:61:68:80:09:80:3e:48:81:3e:f2:24:68:
18:d1:2c:dd:b1:34:6a:59:3b:54:81:e6:bd:07:a6:
94:ad:10:a5:8b:44:57:1c:db:48:7c:c6:05:45:3e:
5d:27:5a:d3:4f:30:e7:34:f2:94:a7:d8:f6:1a:67:
1d:19:96:1b:ac:11:34:47:c9:83:1f:e2:eb:97:92:
07:ed:68:f2:9f:0c:b0:78:5d:af:7b:d1:02:d8:31:
97:16:b3:0c:43:7f:6d:d5:ea:9a:f7:6f:ec:a9:db:
32:3d:b5:6d:e8:0e:56:2c:8e:13:1e:94:0b:81:fc:
1e:7a:e7:98:43:2d:bb:7f:f7:8e:9b:96:05:54:80:
28:b0:42:f3:44:b5:58:a5:62:7c:c1:bf:74:35:fc:
48:b8:97:cc:82:13:d6:77:75:89:c9:ee:a6:b8:19:
ea:22:eb:78:24:19:3a:e2:0c:4c:4b:39:69:7a:39:
e0:1b:47:f3:30:39:5f:8b:f3:8e:d3:33:2a:5b:1d:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1E:9A:69:2D:3E:9A:F8:D3:08:F9:92:3B:D5:1F:0A:00:3C:F0:6C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nR6aaS0-mvjTCPmSO9UfCgA88Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
5a:80:19:61:c3:54:36:00:4e:63:5c:3c:bc:ab:44:2b:08:81:
bb:8f:61:5d:2a:6d:5e:48:5f:c9:0d:c0:63:68:20:5c:69:30:
4c:e4:d8:6c:fb:85:72:24:47:5d:f2:31:07:29:ff:d2:48:3a:
69:47:44:c8:7a:e0:be:0c:7c:3f:c2:ce:72:b2:cf:61:2c:ad:
38:0f:ca:5c:c8:85:56:e3:2a:a4:d2:2c:01:d3:47:e9:be:aa:
38:e1:00:b7:5d:56:8a:71:cb:6c:69:a5:b3:4c:e2:e0:69:4c:
f4:e4:e4:6a:df:f9:d9:78:9a:fa:1a:72:c4:0a:89:e9:a4:55:
8a:31:24:e8:8a:fd:84:64:20:1d:64:1e:c5:22:6b:25:93:d0:
e1:32:87:fa:6e:96:56:5d:16:4d:bd:bf:04:0c:4b:e4:bd:bb:
f7:d2:e9:39:e7:d2:12:d3:72:e7:bd:85:11:ee:e5:f4:21:0b:
e7:3d:4e:bc:22:04:30:cc:00:01:0e:ed:b0:72:43:f1:de:29:
58:56:5a:06:0e:71:70:84:18:00:55:86:88:df:b8:9e:01:eb:
a0:6a:08:02:63:e9:21:0b:53:06:85:7f:d5:21:4c:fd:c5:14:
09:9a:d9:f9:6e:35:cb:df:97:6c:3e:81:7f:86:2e:85:5d:7e:
ee:90:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:48 2026 by rpki-client