Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rnb5_B0MR8HHUP-HM1oMzQCPAIE.roa
File: rnb5_B0MR8HHUP-HM1oMzQCPAIE.roa (raw, json)
Hash identifier: xApY+xgYRYZH003nf1OZi8mkhUvH6huVfCJZ42DZ2TE=
Subject key identifier: AE:76:F9:FC:1D:0C:47:C1:C7:50:FF:87:33:5A:0C:CD:00:8F:00:81
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292AD398BEC4CAD0584B306BDE7D6EC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rnb5_B0MR8HHUP-HM1oMzQCPAIE.roa
Signing time: Thu 09 Apr 2026 14:08:28 +0000
ROA not before: Thu 09 Apr 2026 14:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396575
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ad:39:8b:ec:4c:ad:05:84:b3:06:bd:e7:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae76f9fc1d0c47c1c750ff87335a0ccd008f0081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:6d:96:f1:b8:e9:f0:68:21:a1:5d:88:41:
c9:75:f8:59:68:0b:50:cf:27:cf:5a:14:6f:f7:cc:
d2:16:b9:38:e3:7e:35:81:5f:32:68:9b:4d:f9:69:
e1:78:98:79:4f:5f:d9:36:a8:0a:e8:5b:64:dc:a2:
5d:c7:65:20:ed:ba:42:7b:fa:bb:94:a4:6a:48:ac:
ad:06:0a:c7:7f:8e:44:ce:db:28:da:bd:cd:59:6e:
55:06:d6:e9:e6:c6:71:7a:12:fe:5e:3e:86:f4:c3:
2e:07:73:7c:05:cd:ad:83:21:1a:01:d3:1b:07:f4:
8d:7d:18:67:a5:c9:fc:fc:a0:76:a0:5d:6c:a6:21:
5c:c5:3f:be:97:4f:c9:18:98:dc:f9:24:4f:e6:2b:
0f:83:50:0e:a6:e5:85:74:66:3d:c1:22:b2:67:42:
f2:59:dd:02:51:4a:d9:93:92:20:20:da:45:70:70:
22:21:e6:86:6b:ec:c8:1f:f5:e6:ea:57:bc:1c:7c:
4f:10:e9:f0:da:9a:b2:03:bd:8f:bf:48:90:7b:57:
d8:bd:5e:fa:28:86:60:2c:fb:2d:74:d9:27:ea:21:
f9:88:69:5b:cb:9c:ee:58:b0:6a:bf:7a:2c:18:15:
1e:b6:ee:4f:43:2b:47:bf:61:8c:b4:0b:09:52:ca:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:F9:FC:1D:0C:47:C1:C7:50:FF:87:33:5A:0C:CD:00:8F:00:81
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rnb5_B0MR8HHUP-HM1oMzQCPAIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
63:08:e0:fa:d1:ff:7a:36:c5:93:bf:d8:1b:25:7e:b3:9b:09:
db:48:a3:e6:fc:a6:5a:05:3d:96:e5:af:f9:9e:0d:8c:de:e9:
31:65:84:22:db:2c:d9:38:d8:67:78:ed:63:6e:32:16:2e:94:
8f:78:68:bb:4b:be:b5:d4:de:95:bd:d3:fb:dd:8f:b9:c9:7a:
21:54:fe:1d:db:d6:fc:dd:ce:8c:a1:69:b5:42:36:a7:d8:32:
54:34:9b:b6:2f:a1:e3:7e:c9:88:89:7f:cc:19:a1:ce:d1:54:
0a:14:a4:e8:f2:17:ae:d5:f7:17:fb:ad:17:cc:56:4a:cd:61:
f0:13:96:41:49:b0:31:cb:b0:86:ea:12:b6:7d:90:aa:19:70:
1a:75:e5:54:3b:47:98:80:e7:22:8a:61:68:d1:47:3e:40:03:
d0:91:ae:43:32:96:6d:f9:97:41:13:97:0c:81:c1:65:93:82:
bb:69:39:a0:0f:b6:98:a9:68:b4:3f:94:2a:77:0c:d8:b9:1b:
10:29:14:cf:ed:7b:97:6d:73:d5:dc:94:f8:27:92:0b:46:b1:
81:48:d3:54:12:eb:f5:a7:68:d3:c0:4d:03:86:97:36:76:f0:
83:86:c9:ea:ab:b1:9b:96:ed:0e:c1:c2:71:5f:18:b2:7b:bc:
44:b2:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:31 2026 by rpki-client