Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nyRJejRCZg5JysDz5pFUN6xspig.roa
File: nyRJejRCZg5JysDz5pFUN6xspig.roa (raw, json)
Hash identifier: AYeE+ptO7wahrVO6zcGgSsur0PaXB9pbbNhUPoB5cXo=
Subject key identifier: 9F:24:49:7A:34:42:66:0E:49:CA:C0:F3:E6:91:54:37:AC:6C:A6:28
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929DFE4DE173EE2F4CD273CCF965F8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nyRJejRCZg5JysDz5pFUN6xspig.roa
Signing time: Thu 09 Apr 2026 14:08:24 +0000
ROA not before: Thu 09 Apr 2026 14:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40647
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:9d:fe:4d:e1:73:ee:2f:4c:d2:73:cc:f9:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f24497a3442660e49cac0f3e6915437ac6ca628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:dd:2d:58:65:d5:a1:7a:9a:3c:c9:91:2f:
83:8c:5d:c1:db:53:83:63:43:09:67:88:ce:6b:66:
c5:a7:3a:fd:5d:af:36:ae:ea:e5:29:76:ab:c0:17:
b6:5b:8a:5c:3d:8f:96:0e:cf:c8:7e:ff:1c:31:76:
f7:f7:c0:bf:34:13:71:36:94:55:36:fe:c3:8c:c6:
68:34:f1:a3:b0:4a:36:18:48:3d:c3:5c:f7:ea:f7:
f0:94:24:2a:1f:a4:24:63:d5:b2:46:28:fe:91:96:
d5:95:a5:e7:33:c6:db:89:07:75:9b:1f:37:62:fc:
ae:f7:51:dc:ec:a8:5f:e2:84:3e:ee:c6:70:f1:5e:
66:47:b1:07:af:1b:20:c0:fb:5c:a0:c7:bc:55:dd:
80:97:21:53:0d:1c:1b:66:50:00:c2:89:68:53:3c:
7f:e3:40:5e:0d:ce:fd:6a:07:84:d7:fb:b7:cf:9a:
10:f4:12:45:f7:ab:85:73:24:d5:71:7d:05:f4:07:
e5:f2:6c:09:6d:c7:79:9b:13:17:70:5a:13:32:dd:
f9:0f:de:8d:c0:3a:df:39:4b:13:ce:fe:ef:05:be:
34:d3:e3:4f:74:e5:47:1d:5f:5a:1a:70:c3:15:3d:
43:c7:2b:bd:e9:fc:59:f2:bb:2b:7b:6b:74:cd:2e:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:49:7A:34:42:66:0E:49:CA:C0:F3:E6:91:54:37:AC:6C:A6:28
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nyRJejRCZg5JysDz5pFUN6xspig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
40:cc:e8:bc:bb:78:50:bf:24:72:8c:b9:93:3e:6b:92:18:d1:
3a:e0:b4:f5:04:2f:14:c5:06:dd:4f:65:0d:39:6b:c4:de:79:
94:cf:d8:21:c0:8c:31:53:42:8c:15:51:99:98:e2:c2:60:c6:
fd:02:64:ea:d5:4d:b2:47:1d:ab:f8:4f:39:c7:c2:6f:c0:a9:
70:3d:db:82:77:53:52:19:32:e0:69:b1:3c:1a:07:ca:35:62:
e2:61:1b:91:08:93:8b:3f:bd:2f:a3:66:1f:50:f8:2b:a9:e6:
98:34:a2:55:08:42:97:1a:5c:38:73:60:10:ef:3e:f2:cb:9d:
6f:ca:ad:49:a3:99:e1:cd:84:38:68:e7:7c:ca:16:ca:a8:ec:
6f:55:33:2d:c5:9e:e5:41:8a:67:4b:58:08:5d:58:26:3e:f9:
cb:21:20:6c:6b:49:fd:76:78:17:1d:c5:54:c8:97:45:58:b4:
3b:77:f4:85:16:31:e7:d6:ba:8f:2b:72:1d:4d:b8:75:1f:b0:
71:61:cb:3f:4a:e9:bb:86:72:a2:13:11:b3:2e:92:60:39:b8:
cf:1f:32:37:38:e5:78:78:06:04:d4:da:93:35:9a:74:78:fc:
85:17:97:6c:df:6d:a2:38:dc:98:7a:ac:b8:4b:5d:3b:a0:d0:
4e:9c:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:52 2026 by rpki-client