Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4SDmR_LABWYHElYh0a0Ui6LeOm0.roa
File: 4SDmR_LABWYHElYh0a0Ui6LeOm0.roa (raw, json)
Hash identifier: v1FJJUA7l9dZG6B+szDBnVlB50w8q7RyvoxcrTG00mM=
Subject key identifier: E1:20:E6:47:F2:C0:05:66:07:12:56:21:D1:AD:14:8B:A2:DE:3A:6D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B92BBC59C91E00A2C6F586A10B41
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4SDmR_LABWYHElYh0a0Ui6LeOm0.roa
Signing time: Thu 26 Mar 2026 14:18:23 +0000
ROA not before: Thu 26 Mar 2026 14:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396546
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b9:2b:bc:59:c9:1e:00:a2:c6:f5:86:a1:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e120e647f2c0056607125621d1ad148ba2de3a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:03:2a:e0:e0:26:81:bb:36:7c:37:a5:36:
eb:17:48:24:7c:b2:8b:df:ef:64:16:09:48:8d:f7:
3c:9b:38:bb:45:39:dc:90:79:a9:05:93:95:e0:fa:
9d:a2:3f:97:66:c6:6d:54:f6:db:2a:08:89:4b:60:
54:98:93:bd:28:27:e1:a2:53:24:20:e8:b7:42:5d:
bf:56:b2:25:88:68:67:f7:4e:f2:e6:78:7e:cc:ea:
34:0b:6d:6b:96:86:3f:6f:e4:81:05:ad:12:ce:11:
e1:c3:e8:f4:1d:a1:f7:73:25:08:82:22:2b:a5:a4:
b7:a2:9e:10:72:5b:7a:6a:20:6d:bc:8c:3c:6f:cc:
b2:b4:3c:23:99:41:6e:87:6a:aa:31:58:7d:97:11:
c8:cc:cb:a6:44:8b:30:e6:c3:5b:b4:6c:60:c2:ce:
d3:43:cb:0e:46:66:29:fb:6c:0e:78:26:1b:77:6a:
37:2a:aa:41:14:8d:d2:97:8b:1b:75:21:ac:a0:f2:
6b:5e:6b:e6:c9:73:28:c9:8a:89:82:de:08:43:bc:
52:03:09:e6:98:bb:ac:e2:a3:3f:1c:15:20:fe:7f:
45:d1:a0:6f:7c:0e:31:af:3e:09:4e:c1:9f:14:3a:
aa:a0:ea:14:6c:6c:4e:0c:79:a5:0c:6e:35:9f:f8:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:E6:47:F2:C0:05:66:07:12:56:21:D1:AD:14:8B:A2:DE:3A:6D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4SDmR_LABWYHElYh0a0Ui6LeOm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:dc:74:eb:b9:1b:f0:a8:86:b9:2e:13:8d:ea:0d:aa:1d:f2:
d5:42:17:4c:6b:1c:79:19:15:a5:71:50:5f:1c:f2:ed:ce:21:
90:e7:49:6c:88:a2:73:66:fb:66:1f:ff:bd:29:b7:fa:92:8e:
33:b2:39:33:e4:0d:af:f0:66:ba:09:6f:0c:cf:32:3c:86:6e:
e5:85:c8:7a:43:33:5e:05:84:0e:6c:6e:95:b2:a0:b1:fb:2e:
96:e6:c3:29:4f:51:99:90:c1:5a:22:cf:41:88:3d:be:d0:c7:
32:31:33:7a:1c:c1:41:85:a9:85:5e:cc:c7:68:0f:54:10:fd:
4e:41:bd:63:21:22:13:0f:97:cb:89:78:60:3a:ed:f3:e0:94:
80:65:f6:3f:6e:ec:e6:b8:83:45:80:bc:28:0b:f7:cd:7a:8d:
dd:5e:69:de:51:11:94:45:c2:98:ef:57:e6:d2:f9:d6:63:eb:
2f:49:82:37:90:fd:48:9c:53:98:4e:e4:26:ee:16:1c:3e:73:
98:70:3b:5e:b4:8c:43:b1:9f:d5:86:a6:7a:b2:48:a4:e7:d8:
4e:18:a7:3f:f2:fa:67:2b:7e:d9:d3:16:50:c0:bc:ac:e3:9a:
45:6f:de:49:7f:73:c0:71:dc:7a:d0:48:5b:bf:9e:b2:39:1e:
98:b8:98:f5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgrkrvFnJHgCixvWGoQtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTIwZTY0N2YyYzAwNTY2MDcxMjU2MjFkMWFkMTQ4YmEyZGUzYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqEDKuDgJoG7Nnw3pTbrF0gkfLKL
3+9kFglIjfc8mzi7RTnckHmpBZOV4Pqdoj+XZsZtVPbbKgiJS2BUmJO9KCfholMk
IOi3Ql2/VrIliGhn907y5nh+zOo0C21rloY/b+SBBa0SzhHhw+j0HaH3cyUIgiIr
paS3op4Qclt6aiBtvIw8b8yytDwjmUFuh2qqMVh9lxHIzMumRIsw5sNbtGxgws7T
Q8sORmYp+2wOeCYbd2o3KqpBFI3Sl4sbdSGsoPJrXmvmyXMoyYqJgt4IQ7xSAwnm
mLus4qM/HBUg/n9F0aBvfA4xrz4JTsGfFDqqoOoUbGxODHmlDG41n/jm5QIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFOEg5kfywAVmBxJWIdGtFIui3jptMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvNFNEbVJfTEFCV1lIRWxZaDBhMFVpNkxlT20wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAutx067kb8KiGuS4TjeoNqh3y1UIXTGsc
eRkVpXFQXxzy7c4hkOdJbIiic2b7Zh//vSm3+pKOM7I5M+QNr/BmuglvDM8yPIZu
5YXIekMzXgWEDmxulbKgsfsulubDKU9RmZDBWiLPQYg9vtDHMjEzehzBQYWphV7M
x2gPVBD9TkG9YyEiEw+Xy4l4YDrt8+CUgGX2P27s5riDRYC8KAv3zXqN3V5p3lER
lEXCmO9X5tL51mPrL0mCN5D9SJxTmE7kJu4WHD5zmHA7XrSMQ7Gf1YamerJIpOfY
ThinP/L6Zyt+2dMWUMC8rOOaRW/eSX9zwHHcetBIW7+esjkemLiY9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:57 2026 by rpki-client