Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0bhRqkiKLy7UxOQIKcIPHm40qpY.roa
File: 0bhRqkiKLy7UxOQIKcIPHm40qpY.roa (raw, json)
Hash identifier: /qYRMj+b9+94ZyF05za1uOw25bq7+DXRccZ+op+rits=
Subject key identifier: D1:B8:51:AA:48:8A:2F:2E:D4:C4:E4:08:29:C2:0F:1E:6E:34:AA:96
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B5E5E00173BA0766697A304651C8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0bhRqkiKLy7UxOQIKcIPHm40qpY.roa
Signing time: Thu 26 Mar 2026 14:18:22 +0000
ROA not before: Thu 26 Mar 2026 14:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211369
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b5:e5:e0:01:73:ba:07:66:69:7a:30:46:51:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1b851aa488a2f2ed4c4e40829c20f1e6e34aa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:e1:45:d1:42:51:16:78:9e:dc:05:33:44:
dd:fd:a7:b1:f1:db:92:dc:f5:d5:54:81:f4:37:84:
6b:bd:4b:f7:fd:39:83:38:c8:9d:9f:1a:9f:0d:80:
87:f7:89:a1:9d:c1:8b:0c:3d:e4:1f:e9:b0:5a:a6:
4e:64:d1:46:fc:3d:8b:79:f9:a6:8b:eb:33:e2:a7:
0f:01:ce:12:5e:7a:a8:55:71:75:80:7b:f3:08:0e:
9a:73:bf:78:fa:ab:29:7b:3d:92:b5:fc:eb:91:5b:
ed:df:71:76:d4:59:93:26:cf:5e:1c:ae:87:fd:fd:
6c:9f:9e:ef:7b:5a:91:ff:3c:b2:86:c5:70:33:44:
ff:8f:b2:23:45:7f:e0:e0:24:58:20:d8:7e:d5:42:
2d:86:d5:c3:55:28:08:bf:38:f9:75:2a:fb:c1:72:
f8:84:d9:7f:41:94:b9:da:cb:eb:e6:ec:e2:57:c4:
ae:f5:26:c2:b1:7f:84:e0:1c:34:27:e7:f3:98:e0:
8c:bc:17:70:3f:f7:67:8c:b6:15:d6:96:e1:4d:9d:
1c:7d:45:db:47:a3:2c:d1:4a:66:cc:aa:0a:14:b1:
c6:2e:55:5c:1c:49:60:5a:14:95:6a:f8:eb:ac:ab:
97:cb:5e:28:20:d3:d4:94:31:d0:e7:62:f3:59:ef:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:51:AA:48:8A:2F:2E:D4:C4:E4:08:29:C2:0F:1E:6E:34:AA:96
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0bhRqkiKLy7UxOQIKcIPHm40qpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7b:0a:4d:5b:0c:96:15:2c:7d:aa:22:e7:a4:f4:d9:1b:5c:
21:a7:3e:b1:e5:71:45:e7:24:d4:99:e9:95:f5:c5:1a:27:04:
ce:05:67:eb:39:fe:d6:c7:51:b1:30:17:78:ba:8c:e3:7e:0b:
1c:55:78:69:a1:cb:88:c7:d1:99:3f:a0:ac:f1:88:a4:6f:86:
a7:e4:c1:0c:f8:ec:f0:4d:68:eb:83:00:0e:1d:cc:fe:2f:93:
58:6d:6f:9c:21:0e:f5:03:01:5c:91:91:b7:31:96:cf:16:8d:
ed:94:f7:0b:13:af:93:a4:9e:4c:46:34:ab:ff:da:a8:ea:ab:
29:6c:b3:c3:b1:8a:4e:6d:f2:e7:d8:a0:82:ef:b6:b5:c2:72:
bb:9b:ef:00:6e:fb:30:d4:fb:ac:e0:d0:36:e3:51:b8:67:52:
ea:52:b6:34:29:a7:25:df:e0:36:c8:5f:70:9c:be:9e:25:be:
00:b9:29:e0:71:fe:ec:47:ca:1e:16:d2:ba:c5:a0:3f:df:00:
a0:fa:36:ab:12:11:e2:cd:b3:8d:ab:15:1d:25:58:d0:e5:5a:
9c:88:c6:68:bb:f3:1d:a8:7d:ab:d9:a1:31:1d:d5:15:d4:3a:
33:cf:9e:44:a5:42:da:f7:56:a1:45:ef:7e:9e:3f:b1:93:b2:
dd:6c:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:45 2026 by rpki-client