Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5ANsXueYyMi0RygPE7675bWFD5E.roa
File: 5ANsXueYyMi0RygPE7675bWFD5E.roa (raw, json)
Hash identifier: oHYiO41JOaoKdnJ8/I66Lyfw6XCy9Pifji8iXnOtpTQ=
Subject key identifier: E4:03:6C:5E:E7:98:C8:C8:B4:47:28:0F:13:BE:BB:E5:B5:85:0F:91
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D5CB8029B1BC41DCA515084C3E90
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5ANsXueYyMi0RygPE7675bWFD5E.roa
Signing time: Thu 26 Mar 2026 14:18:30 +0000
ROA not before: Thu 26 Mar 2026 14:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396614
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d5:cb:80:29:b1:bc:41:dc:a5:15:08:4c:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4036c5ee798c8c8b447280f13bebbe5b5850f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:6b:6b:96:d5:45:de:ed:49:32:0f:ec:49:
27:a7:8a:e3:3a:e2:e5:0d:42:59:70:bb:47:f4:fc:
76:de:18:d8:56:8c:30:9f:4d:dc:cb:1b:ae:1c:ac:
24:f2:a2:25:0f:04:37:47:49:98:f3:ed:ff:b0:92:
af:90:2e:95:7e:a7:7c:7c:40:59:fd:26:16:4f:06:
fe:e3:27:b6:ff:9d:76:90:2b:c3:9d:1a:0e:76:78:
a5:5c:bf:d2:5a:33:f2:32:90:3d:ed:5d:d5:75:ea:
68:af:10:9e:e2:92:0b:41:b0:45:75:1a:a6:31:0a:
b0:ef:1b:e2:00:b5:00:c0:11:63:bb:65:b8:a2:11:
c7:2b:db:97:ec:ec:54:44:92:17:cb:06:54:48:c5:
7c:64:f4:59:c3:4c:04:01:bb:30:ff:da:08:ff:13:
57:06:4a:c3:9a:26:04:5b:77:e1:2a:71:b5:97:c2:
0e:eb:ff:78:a4:73:80:a0:da:94:85:1a:af:60:18:
7c:08:0c:76:10:24:ec:22:83:40:da:77:a9:f9:87:
86:d3:2a:30:40:a6:e1:01:6c:a0:6a:0f:45:21:18:
42:4d:9d:72:67:c6:eb:da:43:bf:cb:34:48:84:c2:
9f:7a:b3:0a:4a:ba:f0:a2:f2:0e:90:4e:ce:0a:08:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:6C:5E:E7:98:C8:C8:B4:47:28:0F:13:BE:BB:E5:B5:85:0F:91
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/5ANsXueYyMi0RygPE7675bWFD5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:50:2f:38:28:93:87:f0:3a:f9:f5:4e:11:e2:43:da:ab:d5:
67:16:78:64:29:b0:8b:3d:30:a5:ad:89:8c:cc:71:4e:5b:0e:
96:8f:be:66:25:0f:56:5e:50:4b:11:c5:e6:16:5e:4b:1a:f1:
8c:b0:31:a5:41:6b:97:ab:1a:9c:b2:0d:e2:1f:54:30:54:31:
a8:00:35:c0:c0:5a:0d:86:4b:55:48:fe:f7:f2:66:81:f2:27:
2c:31:da:8b:1e:e9:a1:41:68:56:cd:74:90:c5:fc:60:4e:2d:
20:90:89:05:2b:87:f0:bb:3d:f3:c6:d1:5c:fd:91:ff:65:83:
da:54:6d:81:87:68:4c:78:6e:31:1b:a2:3a:b1:ad:15:54:90:
96:99:6e:3a:59:f8:89:cb:78:de:77:8a:79:af:e9:56:0b:16:
39:92:43:23:de:26:46:cc:0d:af:38:9d:bb:16:af:6f:d4:48:
da:0f:9e:2a:ce:2e:a0:92:4c:0f:52:fd:d3:61:a6:b3:04:e3:
8c:6d:54:b0:24:42:da:39:e3:a0:6b:b6:25:f0:6d:a5:f5:b3:
bd:d0:ea:61:c5:5e:9b:df:a9:63:80:16:63:6f:a4:53:f5:b0:
32:70:83:0c:f4:51:20:e4:2e:63:46:c7:3b:bb:dc:dd:ad:15:
5f:d9:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:50 2026 by rpki-client