Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1XARWxFxBCpD2F52e58eBC4jMIw.roa
File: 1XARWxFxBCpD2F52e58eBC4jMIw.roa (raw, json)
Hash identifier: /BMjNCAIBH6wHdYVHWPsQxv9MdpRDDYGaht7/dEZY7Q=
Subject key identifier: D5:70:11:5B:11:71:04:2A:43:D8:5E:76:7B:9F:1E:04:2E:23:30:8C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82DF5AAF95674000C26CD62119D9BF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1XARWxFxBCpD2F52e58eBC4jMIw.roa
Signing time: Thu 26 Mar 2026 14:18:32 +0000
ROA not before: Thu 26 Mar 2026 14:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397206
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:df:5a:af:95:67:40:00:c2:6c:d6:21:19:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d570115b1171042a43d85e767b9f1e042e23308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:ad:86:cf:59:8b:cf:f7:91:6d:04:6e:af:
ff:24:c4:4d:d8:e6:1f:d7:7f:f6:1a:e7:1f:d8:d8:
ab:be:57:84:39:73:a1:d6:64:85:24:9c:54:a1:96:
16:53:4d:1a:21:c4:c6:09:a2:87:1d:a0:74:fe:eb:
80:e9:36:36:32:01:20:25:c7:a9:d3:90:06:61:9e:
dd:43:6c:a6:f6:ff:2d:8c:ce:a4:f9:28:9f:4b:9c:
6e:1c:a1:65:69:27:6b:0e:21:d3:fe:f1:7c:ae:58:
2b:80:8b:54:fd:c2:ea:5a:bf:0c:70:6c:ee:e2:76:
65:ff:b4:a4:58:92:de:b8:24:e8:68:8f:81:a3:05:
b8:16:c0:14:71:6d:14:40:d6:60:63:75:35:be:b6:
93:92:5d:14:b4:59:26:48:97:1d:a8:85:e6:a8:6c:
eb:09:ad:fd:66:90:44:c4:67:0c:a9:1d:e6:87:64:
c9:a7:d9:6b:55:27:54:06:42:a0:d8:26:65:ba:62:
52:45:94:ac:a0:25:16:58:37:ec:32:12:a6:05:7b:
1d:6a:00:1d:c2:26:d1:db:30:f6:9a:33:12:e2:25:
1b:43:51:cf:f8:c4:7e:4c:db:6e:a3:65:f0:82:57:
12:b8:08:59:e4:81:fa:8b:7b:e2:56:0b:86:9c:42:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:70:11:5B:11:71:04:2A:43:D8:5E:76:7B:9F:1E:04:2E:23:30:8C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1XARWxFxBCpD2F52e58eBC4jMIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:39:c9:ce:58:6c:28:d8:08:0d:f9:84:aa:38:2e:34:3d:ee:
4e:ae:52:1d:f1:96:54:3f:83:5d:09:3e:ee:44:94:27:91:e8:
af:ac:3e:2b:8f:8e:69:62:66:92:7b:db:8c:4f:46:b4:94:55:
7d:64:0e:ee:36:81:57:ca:7f:03:6d:d5:94:8b:9b:b2:69:a8:
e4:9f:56:f6:27:8a:0a:d3:31:fb:9a:58:dd:ec:b7:ff:e0:7b:
8c:42:4f:42:94:7c:61:41:7d:d2:7a:ba:ee:69:6e:92:09:52:
80:9a:85:a9:e1:98:b7:89:11:98:55:ac:5a:34:e4:1b:bf:76:
62:21:c1:fe:88:7b:9b:e4:46:ad:7c:59:4f:bf:47:cd:7d:20:
d4:6c:cd:3d:42:ca:be:56:e8:73:b8:9b:01:06:bf:25:8f:bc:
09:4d:67:df:71:c9:65:bd:27:87:c8:ca:13:3a:c7:d6:c5:fb:
5b:1b:7f:0c:24:ee:44:1d:f8:3b:90:e9:57:fe:89:21:b1:54:
3e:3c:e0:79:54:0b:a5:5f:f0:75:37:86:7c:4d:c8:e7:c8:dc:
23:66:24:17:61:31:96:ed:a0:a3:2e:4a:9a:84:e1:a1:9b:a5:
b8:33:fd:97:24:63:aa:55:01:86:df:b5:fd:0a:5a:51:0c:f4:
0a:3e:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:56 2026 by rpki-client