Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nYTc4ENzsT9nxy8DyBLEBmjCJu0.roa
File: nYTc4ENzsT9nxy8DyBLEBmjCJu0.roa (raw, json)
Hash identifier: qI0tIbG7KhlfhtUP2Kdbx+hfUOLoxNcuulKG0s4Xi84=
Subject key identifier: 9D:84:DC:E0:43:73:B1:3F:67:C7:2F:03:C8:12:C4:06:68:C2:26:ED
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292ACA95F9B76B11E3AB7B3372D3839
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nYTc4ENzsT9nxy8DyBLEBmjCJu0.roa
Signing time: Thu 09 Apr 2026 14:08:28 +0000
ROA not before: Thu 09 Apr 2026 14:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396573
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ac:a9:5f:9b:76:b1:1e:3a:b7:b3:37:2d:38:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d84dce04373b13f67c72f03c812c40668c226ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:81:a8:12:8a:48:23:4f:d9:9f:f7:98:73:
77:d6:cd:93:70:f5:11:f6:9c:c7:55:13:2e:64:d1:
73:3f:8e:ab:e9:37:f8:5f:c4:49:4f:b2:94:0f:ef:
10:74:3e:f6:76:a2:1d:f9:a1:0d:6c:74:fa:75:e8:
d5:da:d1:35:d4:c2:13:7e:88:dc:47:65:a8:7c:a0:
7e:b6:20:d2:62:59:10:d6:58:2b:81:c7:c9:4f:13:
a3:78:0e:d5:7d:98:c9:03:19:e9:c1:0c:1d:78:81:
59:75:8c:75:bc:7d:6c:c4:dd:7c:82:58:82:3f:11:
d9:89:56:8f:e8:e6:09:d6:0e:4a:8e:ca:53:64:56:
eb:69:06:5e:8e:4a:4c:d1:5a:9f:d9:a0:40:34:8a:
53:af:9b:97:a1:c3:23:45:1e:d9:74:ab:18:41:a6:
09:13:10:a7:d4:a4:9c:83:58:19:b7:86:e0:ab:4f:
5a:d5:96:b0:96:f1:34:29:ae:98:76:bc:6d:5c:6e:
ff:81:cb:47:a9:41:98:ab:e9:f5:00:14:f4:91:25:
19:7d:a7:2e:68:fb:56:58:e5:ee:74:b3:3c:ac:61:
5a:57:d2:ee:76:2e:31:3a:00:61:9c:04:2d:95:f9:
62:53:68:a7:6c:68:11:4c:ab:ab:60:6c:bb:78:79:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:DC:E0:43:73:B1:3F:67:C7:2F:03:C8:12:C4:06:68:C2:26:ED
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nYTc4ENzsT9nxy8DyBLEBmjCJu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
23:a6:15:31:09:de:a9:94:7f:ff:59:c8:4f:c8:a3:a6:10:25:
8c:5f:c0:6d:8f:b4:1a:9e:6c:cf:e5:23:3b:3f:90:f2:04:23:
57:60:6a:d9:c5:26:40:d0:66:43:ad:67:c8:50:b6:b8:5c:53:
c6:df:cf:af:a8:83:64:e4:69:c5:02:39:29:e9:a4:cc:79:6b:
01:70:36:67:8d:f3:0f:9a:50:9b:37:e4:aa:7d:48:41:51:4d:
ad:13:2a:73:7f:9a:ef:72:bc:e9:1f:4b:76:b0:2f:15:da:7f:
8f:75:90:9c:dd:85:b8:a3:65:a5:f2:e2:c5:a4:90:37:42:af:
6f:86:fc:01:2f:a9:76:ea:e4:50:84:6d:8f:b5:4a:3d:35:ca:
ed:8f:c9:f3:f5:a8:af:9b:c1:8d:91:6d:df:2a:bf:98:8b:6d:
73:ec:0a:7e:ad:71:a9:e7:e0:82:2a:20:05:8d:b3:75:1c:32:
29:69:f4:50:a6:16:90:4e:28:bf:e6:bd:87:92:9b:1b:a0:cc:
59:bc:ba:3b:bd:66:76:d3:02:aa:cb:81:4d:2c:70:73:d5:8f:
d2:f2:a2:9e:81:dd:14:38:fb:fd:58:e8:ad:a4:6d:5d:65:86:
11:83:55:f1:fc:41:17:4a:6e:a2:8d:7a:f2:84:9f:35:24:3b:
07:1e:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:41 2026 by rpki-client