Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BpLDPVXkmrp-Hd0vSprfq_WmZto.roa
File: BpLDPVXkmrp-Hd0vSprfq_WmZto.roa (raw, json)
Hash identifier: EDP3ZLxfkHvPfc0q9uP7IAnWvOiKKCp4omBXoGAOl/k=
Subject key identifier: 06:92:C3:3D:55:E4:9A:BA:7E:1D:DD:2F:4A:9A:DF:AB:F5:A6:66:DA
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D3F720FBF94DC5AF2ABFF4C15CFF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BpLDPVXkmrp-Hd0vSprfq_WmZto.roa
Signing time: Thu 26 Mar 2026 14:18:30 +0000
ROA not before: Thu 26 Mar 2026 14:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396608
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d3:f7:20:fb:f9:4d:c5:af:2a:bf:f4:c1:5c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0692c33d55e49aba7e1ddd2f4a9adfabf5a666da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:81:d5:26:52:92:61:51:d1:74:dd:54:fe:
57:8c:a2:7e:90:c8:0c:f7:09:d2:9a:9a:01:37:f9:
d5:0f:90:fa:bb:64:71:45:4f:16:27:1e:9d:cc:8e:
1f:1a:96:86:51:82:2b:17:8e:d2:93:f2:ef:52:ed:
ea:d8:73:0d:11:62:f0:1a:e6:4c:67:a4:4a:9a:15:
e9:8a:79:04:5f:f1:fe:3c:ec:3b:9e:3a:2f:a4:10:
f7:eb:78:23:a1:3f:02:ab:13:48:3d:f7:8d:e7:bc:
2d:77:ea:b0:cc:ca:92:ce:39:3c:e7:51:92:d0:ab:
f7:04:45:14:87:b9:48:6c:f2:b0:80:74:e5:3e:f3:
68:15:f7:79:f8:cb:1d:d5:13:44:44:f4:d5:9f:ee:
ae:bd:48:d0:92:11:c9:f0:40:6d:e0:d8:3f:dd:de:
7b:8a:89:5e:bc:0d:d8:91:16:53:49:28:9e:36:98:
28:75:66:d6:7c:a7:1b:c4:9d:be:b2:bc:23:fd:8f:
a3:76:09:df:f2:7a:b1:21:e9:ee:50:d2:08:fe:31:
72:46:8b:5f:6f:8f:5b:2f:4d:65:35:e8:63:80:3b:
5f:b7:a3:25:66:7e:14:bc:6e:8f:da:f4:fc:e2:52:
0a:e3:98:a5:88:eb:9e:8e:a4:30:c0:fc:02:f6:18:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:C3:3D:55:E4:9A:BA:7E:1D:DD:2F:4A:9A:DF:AB:F5:A6:66:DA
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BpLDPVXkmrp-Hd0vSprfq_WmZto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:75:39:0d:f0:6b:c6:29:39:9e:f3:ba:18:84:c2:a7:2a:16:
83:19:d2:5d:2e:e8:b1:c5:88:6c:1a:9a:e9:d1:42:53:4c:2f:
17:d8:29:3a:33:92:9e:d1:1a:97:62:5f:60:a5:5d:09:86:7d:
85:bf:3c:34:65:4c:e1:ad:7b:0d:02:61:4c:9d:49:27:0e:0e:
4a:c4:39:03:c9:6d:f1:11:4f:c8:f8:03:8b:08:b8:81:6c:ed:
ff:9c:51:84:4e:8f:15:3a:68:a5:92:bc:c6:5a:f8:03:14:af:
4b:ce:43:9b:4c:3d:71:1c:6c:70:ec:4e:29:c0:bb:67:31:d8:
8b:78:07:67:1b:3a:3e:0d:fb:3f:7c:4a:2d:c4:4c:df:42:88:
e7:fd:6f:14:26:ed:ce:53:0f:d7:35:d0:12:fc:6a:a2:83:55:
1e:a1:70:c1:98:f7:61:9b:89:0b:ca:a4:4c:6d:cc:4c:37:20:
5d:22:78:fa:44:b6:c8:aa:da:77:99:13:39:ea:03:ef:3e:c6:
51:50:47:d9:cb:c9:db:0c:cf:fb:7d:f9:32:07:0a:0a:d0:5e:
4c:26:11:1d:f0:87:04:62:2e:ec:9a:de:52:ac:af:66:4f:a4:
0b:2a:cf:8b:f3:ce:b2:1d:12:89:8a:51:de:35:f8:46:e6:e0:
b7:02:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:55 2026 by rpki-client