Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/wG_pbURjhW3Pcuco3ujhp-csPPg.roa
File: wG_pbURjhW3Pcuco3ujhp-csPPg.roa (raw, json)
Hash identifier: aDME+A+QWDt02EkvElbwE7teTD67omY3hixcAV26WSM=
Subject key identifier: C0:6F:E9:6D:44:63:85:6D:CF:72:E7:28:DE:E8:E1:A7:E7:2C:3C:F8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292B89A2505565C36C5698F60F6F179
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/wG_pbURjhW3Pcuco3ujhp-csPPg.roa
Signing time: Thu 09 Apr 2026 14:08:31 +0000
ROA not before: Thu 09 Apr 2026 14:08:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396600
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:b8:9a:25:05:56:5c:36:c5:69:8f:60:f6:f1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c06fe96d4463856dcf72e728dee8e1a7e72c3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:a3:f0:03:6a:8c:a4:fc:f0:53:3c:c9:6e:
a1:88:3f:91:3c:e3:b0:77:ad:f3:15:4b:c4:19:6e:
de:98:4f:9b:f9:1b:42:4a:4c:cc:62:d9:50:41:32:
af:6c:52:eb:00:6d:24:3c:c0:cf:7f:4a:67:d2:df:
c8:18:36:4d:4c:ef:21:f1:42:37:dc:3e:2d:4e:50:
f7:0c:5a:59:3e:49:98:ce:61:11:b5:ae:46:df:61:
00:53:df:52:17:18:9e:f0:2e:46:1a:52:20:7f:ef:
6c:70:5a:3c:b0:75:72:70:c6:76:9a:a6:6e:3b:3e:
03:1b:74:fc:2b:ec:7b:85:56:46:0c:78:96:32:2e:
86:c5:b2:fb:0a:41:50:d6:8c:8f:81:3b:86:93:81:
ff:af:22:1b:06:d5:36:1b:a3:76:fe:1c:eb:44:bf:
56:5d:aa:97:d0:f2:18:d6:e3:c4:08:6c:a5:b4:c7:
1a:10:23:ef:fa:2c:77:ea:a3:06:a8:fd:8d:eb:9f:
3c:d7:44:17:30:db:70:a4:f1:82:02:30:17:0f:42:
d4:07:74:74:2f:08:30:83:0b:61:77:26:df:be:3a:
f4:47:cc:d1:93:ff:c2:19:e7:71:c8:2b:8d:9a:3d:
0d:54:f1:37:5a:07:89:b6:0b:70:40:1a:97:a8:69:
8e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:E9:6D:44:63:85:6D:CF:72:E7:28:DE:E8:E1:A7:E7:2C:3C:F8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/wG_pbURjhW3Pcuco3ujhp-csPPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b3:87:3a:06:7b:88:3d:2a:5b:6f:72:d4:72:71:71:70:b6:
b1:3d:ae:d1:8c:fb:04:56:01:f1:18:09:31:4c:31:57:d6:5c:
bc:e0:65:51:3e:a5:30:07:2c:ca:2d:ec:9d:10:7a:21:b0:28:
52:8b:7d:f6:04:57:d6:ab:53:2a:76:c8:32:f7:b0:61:2d:91:
7d:ec:88:59:d5:00:08:81:5f:f3:34:e1:c8:28:44:a5:f9:a8:
f2:8d:cf:d3:de:4e:45:5c:f9:9c:33:d6:d1:91:a1:4d:a8:34:
0b:7b:8c:7b:3d:45:89:df:99:c0:fb:d3:96:53:b0:b4:ea:72:
5f:c2:31:35:05:69:3d:90:3a:c7:08:81:c2:0b:09:45:9d:21:
f6:78:1b:3c:dd:7a:a8:88:b7:dc:5a:e9:8f:4b:f2:ca:07:1a:
a5:73:3b:fd:ae:74:d3:1d:ed:39:30:00:8a:bf:93:88:25:ff:
a4:51:b5:cd:3e:b9:3c:eb:5f:27:7c:c2:dd:bc:02:65:89:73:
07:e6:13:44:d4:10:35:a6:a1:8a:74:cc:df:c0:4a:5f:f0:5f:
92:4e:6c:06:d2:d0:05:73:24:b9:7c:d1:c4:b0:a3:05:33:a0:
7e:6c:6d:36:25:cb:13:a8:24:d9:43:13:fc:7e:8d:f2:98:33:
86:6d:05:4f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1ykriaJQVWXDbFaY9g9vF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDZmZTk2ZDQ0NjM4NTZkY2Y3MmU3MjhkZWU4ZTFhN2U3MmMzY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu92j8ANqjKT88FM8yW6hiD+RPOOw
d63zFUvEGW7emE+b+RtCSkzMYtlQQTKvbFLrAG0kPMDPf0pn0t/IGDZNTO8h8UI3
3D4tTlD3DFpZPkmYzmERta5G32EAU99SFxie8C5GGlIgf+9scFo8sHVycMZ2mqZu
Oz4DG3T8K+x7hVZGDHiWMi6GxbL7CkFQ1oyPgTuGk4H/ryIbBtU2G6N2/hzrRL9W
XaqX0PIY1uPECGyltMcaECPv+ix36qMGqP2N658810QXMNtwpPGCAjAXD0LUB3R0
Lwgwgwthdybfvjr0R8zRk//CGedxyCuNmj0NVPE3WgeJtgtwQBqXqGmO7wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFMBv6W1EY4Vtz3LnKN7o4afnLDz4MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvd0dfcGJVUmpoVzNQY3VjbzN1amhwLWNzUFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAKuzhzoGe4g9
KltvctRycXFwtrE9rtGM+wRWAfEYCTFMMVfWXLzgZVE+pTAHLMot7J0QeiGwKFKL
ffYEV9arUyp2yDL3sGEtkX3siFnVAAiBX/M04cgoRKX5qPKNz9PeTkVc+Zwz1tGR
oU2oNAt7jHs9RYnfmcD705ZTsLTqcl/CMTUFaT2QOscIgcILCUWdIfZ4GzzdeqiI
t9xa6Y9L8soHGqVzO/2udNMd7TkwAIq/k4gl/6RRtc0+uTzrXyd8wt28AmWJcwfm
E0TUEDWmoYp0zN/ASl/wX5JObAbS0AVzJLl80cSwowUzoH5sbTYlyxOoJNlDE/x+
jfKYM4ZtBU8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:27 2026 by rpki-client