Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BcOcekE-xc4wdQP_JUb_diZu77Q.roa
File: BcOcekE-xc4wdQP_JUb_diZu77Q.roa (raw, json)
Hash identifier: 0ZFKVaVu1ik/jLAFGwvl0rvNZs3kgx9i54GlqoiAHbk=
Subject key identifier: 05:C3:9C:7A:41:3E:C5:CE:30:75:03:FF:25:46:FF:76:26:6E:EF:B4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B42694BF0AA8B8E4BF2E731D56B2
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BcOcekE-xc4wdQP_JUb_diZu77Q.roa
Signing time: Thu 26 Mar 2026 14:18:22 +0000
ROA not before: Thu 26 Mar 2026 14:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36631
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b4:26:94:bf:0a:a8:b8:e4:bf:2e:73:1d:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05c39c7a413ec5ce307503ff2546ff76266eefb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:17:17:30:30:7e:1d:c0:e4:30:88:f8:1e:
c9:e6:4a:9c:af:cd:d8:33:4b:5c:91:5a:3f:d8:f4:
fc:ab:d9:51:f4:81:10:b6:87:a1:de:f2:b4:10:30:
c7:24:69:ff:9c:f7:5c:9f:dd:11:4f:45:ac:44:a3:
50:e4:e5:55:6a:b0:4f:37:6a:90:58:52:86:99:fc:
a3:d9:a2:a7:c7:00:4a:7b:2f:97:c3:59:13:8a:5d:
9d:53:03:41:c4:76:51:8f:3d:2b:64:a8:03:1c:66:
37:9e:29:b9:a8:7a:5a:a6:9c:7a:05:ef:2e:1d:04:
5d:cd:50:a0:ed:25:cd:b8:09:82:09:7d:1d:9b:51:
6a:91:62:2b:b7:02:4f:08:3a:26:d3:d6:63:fa:50:
2c:a6:47:ac:04:d3:10:6c:27:2f:84:c3:0b:ee:04:
de:7a:dd:e3:63:d2:09:8c:be:b9:cd:e6:94:c7:76:
4b:b3:4e:92:25:bc:a5:d5:ff:da:43:41:ac:d0:26:
fc:b1:49:db:8f:95:26:40:f8:a8:ad:55:81:d8:a2:
6b:b6:e2:0e:1e:51:2d:13:ba:7a:7d:d5:45:fe:bb:
92:4a:02:ad:d6:ee:09:84:57:11:76:9e:6b:ea:ef:
b9:69:e9:32:f9:55:d7:9b:0f:43:37:1e:40:bb:bb:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C3:9C:7A:41:3E:C5:CE:30:75:03:FF:25:46:FF:76:26:6E:EF:B4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BcOcekE-xc4wdQP_JUb_diZu77Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cc:c9:d2:ce:f7:54:7e:4e:84:13:7c:32:e2:db:7b:57:86:
85:93:31:6c:39:11:44:25:08:2d:fb:81:c8:84:15:82:26:32:
d8:0d:28:f9:e5:64:cf:13:f3:b5:6a:60:5e:86:05:9c:59:af:
25:1e:e1:b7:76:88:67:d4:1e:2c:6e:3c:89:23:5a:47:77:a5:
d2:f9:65:09:87:e0:cb:88:30:e0:e4:16:5f:3e:ac:fb:66:b2:
f0:68:1f:13:a2:6c:92:c8:7f:5d:58:ea:9b:69:fb:a5:09:32:
01:e9:8f:57:49:b3:65:3e:46:1b:2c:7e:02:e9:0b:7a:3f:93:
5f:a6:b6:10:a2:a5:f5:95:b7:4b:ee:7a:af:b5:ba:33:99:1d:
2e:58:fb:9d:d0:59:ad:f6:2f:e2:49:bf:38:06:4d:3c:5c:70:
32:15:7b:5b:7a:20:24:69:1a:a0:a0:3b:9c:e1:92:7c:bc:57:
25:39:36:98:ba:9c:ce:8f:b3:25:17:47:f8:84:f4:7d:f7:89:
1e:f5:bb:e8:25:1b:14:c6:cd:3b:4a:0e:16:4e:10:6a:f1:59:
d4:68:3b:3b:00:64:35:b7:0a:9a:52:e5:90:53:b1:3f:c3:8e:
11:0a:d5:62:20:82:7d:50:7b:b6:e9:ed:7c:d3:72:ba:0f:45:
bb:86:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:48 2026 by rpki-client