Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/u0WehPvmnkhXVjgY5qMNZ8-nskw.roa
File: u0WehPvmnkhXVjgY5qMNZ8-nskw.roa (raw, json)
Hash identifier: HWbTFSfMk6sguPMDAAnsHwRI6T5OBIQEn+qV+QesLLI=
Subject key identifier: BB:45:9E:84:FB:E6:9E:48:57:56:38:18:E6:A3:0D:67:CF:A7:B2:4C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292AB4DC65BDA04BB6859FB3F55F806
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/u0WehPvmnkhXVjgY5qMNZ8-nskw.roa
Signing time: Thu 09 Apr 2026 14:08:27 +0000
ROA not before: Thu 09 Apr 2026 14:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396571
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:ab:4d:c6:5b:da:04:bb:68:59:fb:3f:55:f8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb459e84fbe69e4857563818e6a30d67cfa7b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:e8:cd:c3:6f:45:25:78:d4:cd:83:7e:92:
59:c5:9a:1d:f0:87:6a:c7:f1:0c:e1:4b:aa:ca:c2:
26:cd:44:01:c6:1c:0d:8a:0d:f9:af:0d:44:e1:b4:
f3:d4:d3:09:3d:ca:80:6c:03:9f:db:c8:4d:ba:7b:
f6:8e:70:4d:21:e6:77:78:d6:78:e9:73:7a:9f:35:
fa:33:aa:c6:3c:5c:d4:10:01:28:03:4f:d6:a8:4d:
9d:b4:3a:f3:65:21:61:9f:51:cc:d5:2c:34:57:fe:
f5:98:2f:44:f3:15:54:d2:9b:1f:12:4a:61:87:c0:
2b:3d:e2:81:3f:f6:ce:7f:69:ae:78:85:98:30:56:
c2:a9:36:3c:7c:95:42:7a:b5:ac:7d:e6:9e:c3:53:
ee:cc:01:ff:09:ae:9c:18:46:ef:22:cb:fc:05:0a:
3c:75:b5:c3:db:1e:66:76:5e:8b:41:63:69:53:ec:
e2:ef:07:8c:ff:2c:07:d5:78:dd:cb:4c:6e:ff:af:
40:62:30:86:ff:91:2c:0b:4d:c1:4d:b4:e8:a3:5f:
41:94:cf:ba:cf:e6:85:1e:27:94:8d:5b:a6:b0:c1:
c9:1f:3e:b0:0f:26:6c:0b:3c:38:74:6c:71:ed:59:
9b:9b:51:ec:4a:a6:df:e4:3c:05:52:f6:e0:22:89:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:9E:84:FB:E6:9E:48:57:56:38:18:E6:A3:0D:67:CF:A7:B2:4C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/u0WehPvmnkhXVjgY5qMNZ8-nskw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
a4:b8:f5:ee:c3:a4:5f:87:c8:64:75:c9:8d:18:b4:99:13:00:
fe:61:19:c4:a7:e6:07:c3:3f:9c:fa:bf:a9:72:0b:ed:5c:ee:
77:17:ea:41:b0:2e:27:58:08:9e:93:d6:ab:54:20:94:b3:b1:
20:4f:c6:4f:58:05:0f:18:44:49:46:db:f2:5a:d3:cf:21:bc:
fb:15:46:b9:b8:2c:ea:c7:ff:56:21:f1:13:4f:3f:e3:66:79:
79:0c:4a:2c:5e:1f:6e:22:4a:ce:51:3e:ab:ea:68:0d:27:79:
36:9d:d9:52:2e:9b:a8:f5:d4:ae:0a:7f:b1:a9:bb:9a:da:bf:
c3:56:a0:93:8a:bf:4e:32:09:4b:9e:e9:73:3d:a6:5b:0b:ef:
03:7a:01:ce:aa:5e:3b:3d:1d:fa:0c:5a:2b:3b:b6:2f:97:a1:
e0:0e:af:a4:de:97:5a:fc:9c:86:f3:04:e4:cb:96:ac:4c:ca:
25:02:4a:60:2a:c7:96:31:53:ae:2f:85:99:5e:17:09:87:7b:
09:17:6d:56:5e:e8:ff:e1:91:13:9e:c9:8b:d1:57:f2:b7:5f:
e7:d9:55:13:5b:e6:6c:5f:24:0d:92:53:ac:c5:93:15:58:16:
9c:de:71:d1:9a:f0:13:64:a2:36:12:6f:35:7b:b0:78:b3:93:
a2:e6:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:51:05 2026 by rpki-client