Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/q4Xx4wq26ZlVTydZEXsMbOSHz7I.roa
File: q4Xx4wq26ZlVTydZEXsMbOSHz7I.roa (raw, json)
Hash identifier: 58dHZ10H8U54nm61AnSCOnQZno8v/QLOgnQvsm8KM2E=
Subject key identifier: AB:85:F1:E3:0A:B6:E9:99:55:4F:27:59:11:7B:0C:6C:E4:87:CF:B2
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292A30F36467A190C807830FFEA55B0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/q4Xx4wq26ZlVTydZEXsMbOSHz7I.roa
Signing time: Thu 09 Apr 2026 14:08:25 +0000
ROA not before: Thu 09 Apr 2026 14:08:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396549
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:a3:0f:36:46:7a:19:0c:80:78:30:ff:ea:55:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab85f1e30ab6e999554f2759117b0c6ce487cfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:0d:1a:db:fa:21:74:7a:7d:c5:dd:44:df:
10:2d:e9:0f:ac:60:fe:6b:c9:13:1c:75:c5:02:b6:
7d:7e:a7:9c:59:48:8b:40:fb:ba:15:f7:9b:75:03:
c9:ee:88:11:9e:c0:c3:18:4b:44:8a:26:3f:bb:4e:
b8:0d:41:a2:82:cd:eb:b0:40:1d:df:90:a9:df:74:
30:5d:c3:2b:0f:07:ae:21:32:65:94:ea:c4:d6:8d:
44:aa:58:74:b2:4e:fa:27:14:92:a3:c8:75:1b:b3:
ef:6c:12:a9:d0:8b:52:b8:3e:99:0d:ed:5d:ef:83:
51:dc:e9:61:9d:1d:16:56:3e:3c:f9:15:c4:11:6b:
a3:b5:29:dd:0b:63:42:46:9a:a0:58:24:59:1d:25:
d4:fe:27:94:06:9f:ad:7b:3d:40:9c:8d:e1:db:7b:
14:a8:3f:46:77:ca:65:07:ab:63:58:03:9f:89:d8:
26:12:a4:2a:32:c6:28:f6:d2:74:34:6b:7c:65:79:
1f:43:0d:b3:2e:6c:b0:7a:c5:a6:37:4f:7c:fc:00:
2d:9d:4f:17:36:b5:ce:ed:73:fe:6d:3e:78:cc:58:
44:e1:fd:bf:fa:74:04:9b:f3:17:fb:43:3f:37:e5:
0b:18:8e:29:e5:0c:f9:60:91:09:32:ef:04:c1:13:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:F1:E3:0A:B6:E9:99:55:4F:27:59:11:7B:0C:6C:E4:87:CF:B2
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/q4Xx4wq26ZlVTydZEXsMbOSHz7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
ae:f1:e9:e1:27:a4:9d:58:73:ce:2f:69:17:d2:d1:a8:d4:e9:
df:b8:8b:36:60:fa:55:b9:15:31:02:07:32:87:9a:c3:08:3a:
b0:20:70:fc:55:3c:af:18:18:74:fb:d1:df:5c:af:88:51:d4:
ea:84:16:af:21:d8:6d:29:2d:d7:32:67:e2:3c:84:6d:22:78:
63:b8:ee:98:79:de:9a:f3:e7:05:97:e6:17:9b:55:da:2a:34:
a4:d9:fc:03:f0:56:78:42:7b:b0:65:aa:e1:8b:6b:e9:8d:fe:
27:fe:b0:c8:08:23:68:95:06:57:02:f1:84:41:a3:73:2c:30:
3a:23:5a:d6:4a:2d:91:2b:3c:3f:fc:13:fa:f3:b4:47:76:36:
15:e0:1a:51:af:eb:63:d1:9e:fc:c4:f1:25:87:94:88:19:de:
69:a4:32:dc:81:d5:fa:f8:58:7f:91:af:df:79:12:c6:13:d1:
dd:aa:11:ba:1d:bd:b6:dd:b8:23:68:f5:69:8c:7d:f7:dd:e0:
18:7b:03:ab:5f:36:f4:31:cb:3a:b1:7b:ff:81:44:62:af:03:
fd:ae:3a:a3:09:95:fe:47:a9:0c:a2:dd:4e:0f:fa:e4:79:18:
a1:23:55:e9:b4:d0:d3:ba:ba:16:c6:a5:f9:a1:ea:30:1d:a1:
b6:2b:d3:a7
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykqMPNkZ6GQyAeDD/6lWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjg1ZjFlMzBhYjZlOTk5NTU0ZjI3NTkxMTdiMGM2Y2U0ODdjZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoucNGtv6IXR6fcXdRN8QLekPrGD+
a8kTHHXFArZ9fqecWUiLQPu6FfebdQPJ7ogRnsDDGEtEiiY/u064DUGigs3rsEAd
35Cp33QwXcMrDweuITJllOrE1o1Eqlh0sk76JxSSo8h1G7PvbBKp0ItSuD6ZDe1d
74NR3OlhnR0WVj48+RXEEWujtSndC2NCRpqgWCRZHSXU/ieUBp+tez1AnI3h23sU
qD9Gd8plB6tjWAOfidgmEqQqMsYo9tJ0NGt8ZXkfQw2zLmywesWmN098/AAtnU8X
NrXO7XP+bT54zFhE4f2/+nQEm/MX+0M/N+ULGI4p5Qz5YJEJMu8EwRPsVwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKuF8eMKtumZVU8nWRF7DGzkh8+yMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvcTRYeDR3cTI2WmxWVHlkWkVYc01iT1NIejdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAK7x6eEnpJ1Y
c84vaRfS0ajU6d+4izZg+lW5FTECBzKHmsMIOrAgcPxVPK8YGHT70d9cr4hR1OqE
Fq8h2G0pLdcyZ+I8hG0ieGO47ph53prz5wWX5hebVdoqNKTZ/APwVnhCe7BlquGL
a+mN/if+sMgII2iVBlcC8YRBo3MsMDojWtZKLZErPD/8E/rztEd2NhXgGlGv62PR
nvzE8SWHlIgZ3mmkMtyB1fr4WH+Rr995EsYT0d2qEbodvbbduCNo9WmMfffd4Bh7
A6tfNvQxyzqxe/+BRGKvA/2uOqMJlf5HqQyi3U4P+uR5GKEjVem00NO6uhbGpfmh
6jAdobYr06c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:28 2026 by rpki-client