Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/43nXe98f6Fm5a5W-9LLjprDCYyY.roa
File: 43nXe98f6Fm5a5W-9LLjprDCYyY.roa (raw, json)
Hash identifier: fXfh440HcBNuPqQ37vaxrmfbFPN09/aUjxfg31efaTs=
Subject key identifier: E3:79:D7:7B:DF:1F:E8:59:B9:6B:95:BE:F4:B2:E3:A6:B0:C2:63:26
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D1CA69636D82916F254FDC4D52B5
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/43nXe98f6Fm5a5W-9LLjprDCYyY.roa
Signing time: Thu 26 Mar 2026 14:18:29 +0000
ROA not before: Thu 26 Mar 2026 14:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396602
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d1:ca:69:63:6d:82:91:6f:25:4f:dc:4d:52:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e379d77bdf1fe859b96b95bef4b2e3a6b0c26326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:9d:de:c7:f4:3b:b0:f8:69:04:00:4c:2d:
ef:ad:67:d6:20:5b:c3:75:f6:d9:b9:f2:4e:31:b1:
d3:68:98:09:54:b9:c8:58:f5:3c:6d:57:d4:95:55:
9c:c4:1d:9d:bf:ff:c6:88:b8:b3:66:b3:e9:49:b7:
5d:3c:13:36:de:11:12:6a:cf:c2:7e:48:70:55:e0:
8f:13:37:23:53:0b:40:22:bd:89:66:5b:05:f5:33:
27:c9:75:ed:cf:24:49:24:ae:80:eb:1d:52:fb:88:
05:f6:2f:08:3c:78:cb:9d:86:14:60:4a:c3:a4:fd:
4e:96:eb:87:34:8a:7a:35:c6:ff:7f:78:d5:48:11:
1d:4d:e9:ca:b4:10:f1:e7:ba:ad:98:39:52:42:cf:
74:be:0b:fc:45:bf:7f:1a:bd:4d:2f:7b:66:ce:16:
be:1b:72:61:48:0c:0a:db:72:8e:38:79:af:db:4a:
02:c5:58:50:40:0d:49:15:34:f7:f1:ac:a0:9f:bb:
bb:83:40:e7:95:53:d4:34:ac:13:ba:5a:89:36:21:
c5:0f:29:cf:d6:69:fc:75:de:bf:fc:f0:45:de:e8:
3a:a0:c6:57:fc:eb:f6:67:af:c5:e9:f0:15:6f:f6:
cc:6e:f9:6f:fe:aa:e5:97:8c:10:a2:74:09:7b:9f:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:D7:7B:DF:1F:E8:59:B9:6B:95:BE:F4:B2:E3:A6:B0:C2:63:26
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/43nXe98f6Fm5a5W-9LLjprDCYyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bd:e8:4f:da:67:6f:a8:36:50:c8:16:c5:e3:9d:99:1f:26:
c9:94:d7:18:ec:2f:2c:ab:67:c3:b9:77:2f:a9:04:bb:3c:5d:
7d:ee:b9:0d:ae:83:7d:93:9e:fb:52:71:e5:14:c5:2a:f0:fe:
0a:12:03:46:61:23:d1:84:2c:c0:d5:78:3c:18:b0:f6:42:cf:
3d:81:f0:d8:24:25:41:e3:d4:1a:93:01:8d:45:35:8e:ac:de:
2b:f5:bb:06:63:e4:d4:10:03:b4:15:71:86:ee:75:7f:c0:97:
81:dd:46:f9:83:8a:4a:57:8b:04:e6:89:a5:dd:9d:16:59:15:
4c:57:4a:a0:b5:bd:28:7f:1f:2f:ac:87:52:7f:2b:a2:55:b7:
23:f1:c2:bf:58:1e:0c:14:df:3e:20:22:54:cf:d8:52:9f:b2:
72:1c:62:e0:5c:37:7d:c1:00:7a:bf:59:6f:65:a9:c3:08:8d:
b8:40:29:e4:22:e6:c3:ac:50:3e:33:04:b4:8e:47:6a:b6:2b:
92:da:27:26:e4:48:e5:b6:07:80:d9:17:1f:07:f1:5a:ef:ab:
2d:47:2b:46:d6:c3:1f:4e:c1:a3:18:1a:e3:3e:d2:17:66:bc:
d0:bd:af:36:0b:11:64:15:32:8f:d4:03:8a:7b:0a:30:e5:84:
03:3c:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:56 2026 by rpki-client