Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/58PwOaFuXo_-7vm6ecsNqIFvAoo.roa
File: 58PwOaFuXo_-7vm6ecsNqIFvAoo.roa (raw, json)
Hash identifier: 2O0r70jNsErd7efqKEe49M0uulxA1UuYkTSIyb8uFoo=
Subject key identifier: E7:C3:F0:39:A1:6E:5E:8F:FE:EE:F9:BA:79:CB:0D:A8:81:6F:02:8A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D6BD307F3AB66E574A0F2088FF8D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/58PwOaFuXo_-7vm6ecsNqIFvAoo.roa
Signing time: Thu 26 Mar 2026 14:18:30 +0000
ROA not before: Thu 26 Mar 2026 14:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396617
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d6:bd:30:7f:3a:b6:6e:57:4a:0f:20:88:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7c3f039a16e5e8ffeeef9ba79cb0da8816f028a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:47:54:d0:82:d3:08:5b:5c:bf:4a:53:48:
53:8b:97:a8:a0:c8:a5:a5:d5:c6:69:a0:dd:8b:6d:
7f:0e:3b:14:12:ed:2f:e1:0e:8f:82:3c:d4:4b:c7:
de:46:44:51:e8:17:f2:f5:e3:f4:bf:b9:bd:91:e8:
00:96:ae:44:7d:bf:ff:f7:ca:66:d4:f3:61:f2:ff:
0d:8e:42:aa:5d:ce:02:70:4d:46:b8:db:fc:c4:1b:
4f:a4:39:f9:ee:1c:ad:99:8a:88:27:55:ee:f7:3e:
e1:c0:1e:6c:db:fb:2a:20:00:e3:11:7e:15:00:ab:
c1:d4:3c:10:12:8e:51:37:20:36:da:fa:83:dc:f4:
f5:3c:9c:5c:2b:3f:c6:10:58:ee:ed:99:01:f6:43:
55:2e:81:b8:10:3b:32:07:07:62:b1:34:aa:05:c1:
d8:d8:e3:4a:70:0f:fb:cb:b5:90:eb:4a:59:13:9c:
d8:73:4e:56:10:55:42:e9:d5:87:54:88:ec:4f:84:
4e:ca:70:8c:d4:a7:82:dc:ce:75:37:cb:71:b6:18:
6c:fe:53:6a:3f:af:ff:d3:c9:b2:83:fb:45:5d:39:
d5:5b:0e:50:12:87:f2:83:1c:49:20:15:df:31:39:
c8:ab:f2:d5:af:64:c0:a7:dc:f1:ec:1e:00:dd:7e:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:F0:39:A1:6E:5E:8F:FE:EE:F9:BA:79:CB:0D:A8:81:6F:02:8A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/58PwOaFuXo_-7vm6ecsNqIFvAoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9b:3a:7a:21:3b:33:7a:cd:74:4c:68:a2:81:e2:f2:04:7b:
7d:4e:6d:ec:da:de:60:83:ee:c2:f4:9c:b8:fd:85:8d:70:87:
e9:8e:ec:84:52:d8:d3:de:27:67:02:54:28:44:08:32:d7:75:
d3:bb:de:4c:d7:47:b3:de:f8:3b:18:d9:50:87:01:39:20:cf:
c1:1e:98:fa:5d:05:9e:d5:3f:03:50:b4:e4:45:25:8a:34:24:
6e:a5:43:81:1d:60:8c:02:7e:03:ac:9b:0b:13:c5:e3:09:f7:
76:2b:a1:0b:cb:04:86:eb:8b:85:ef:e5:a7:02:79:b9:24:3b:
39:62:96:d5:3f:e5:b7:43:81:78:2b:98:b2:bd:8f:68:6f:df:
5a:61:c0:25:94:10:bc:4b:97:03:d0:97:fd:c6:49:b0:0c:f6:
d3:ff:a9:9f:7e:be:57:44:39:76:99:96:ee:08:74:5f:3b:ce:
a4:02:17:2f:1e:26:4f:f0:c2:8f:0d:2b:ef:f5:4a:df:be:7c:
d6:07:24:98:22:55:28:02:c8:80:a0:79:b6:42:aa:39:86:18:
62:38:d3:70:db:19:6b:86:43:6e:b7:6c:48:97:3c:d1:fa:c0:
9f:a0:4d:83:d6:05:e4:d1:1f:7c:1e:d8:da:a4:ca:16:24:99:
5e:16:2a:9e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgta9MH86tm5XSg8giP+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2MzZjAzOWExNmU1ZThmZmVlZWY5YmE3OWNiMGRhODgxNmYwMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTRHVNCC0whbXL9KU0hTi5eooMil
pdXGaaDdi21/DjsUEu0v4Q6PgjzUS8feRkRR6Bfy9eP0v7m9kegAlq5Efb//98pm
1PNh8v8NjkKqXc4CcE1GuNv8xBtPpDn57hytmYqIJ1Xu9z7hwB5s2/sqIADjEX4V
AKvB1DwQEo5RNyA22vqD3PT1PJxcKz/GEFju7ZkB9kNVLoG4EDsyBwdisTSqBcHY
2ONKcA/7y7WQ60pZE5zYc05WEFVC6dWHVIjsT4ROynCM1KeC3M51N8txthhs/lNq
P6//08myg/tFXTnVWw5QEofygxxJIBXfMTnIq/LVr2TAp9zx7B4A3X7SGwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFOfD8Dmhbl6P/u75unnLDaiBbwKKMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvNThQd09hRnVYb18tN3ZtNmVjc05xSUZ2QW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAN5s6eiE7M3rNdExoooHi8gR7fU5t7Nre
YIPuwvScuP2FjXCH6Y7shFLY094nZwJUKEQIMtd107veTNdHs974OxjZUIcBOSDP
wR6Y+l0FntU/A1C05EUlijQkbqVDgR1gjAJ+A6ybCxPF4wn3diuhC8sEhuuLhe/l
pwJ5uSQ7OWKW1T/lt0OBeCuYsr2PaG/fWmHAJZQQvEuXA9CX/cZJsAz20/+pn36+
V0Q5dpmW7gh0XzvOpAIXLx4mT/DCjw0r7/VK37581gckmCJVKALIgKB5tkKqOYYY
YjjTcNsZa4ZDbrdsSJc80frAn6BNg9YF5NEffB7Y2qTKFiSZXhYqng==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:54 2026 by rpki-client