Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DyCbm95VT_hHiDeI8_MZ9cv6ft0.roa
File: DyCbm95VT_hHiDeI8_MZ9cv6ft0.roa (raw, json)
Hash identifier: yOOKHSDjauPtx8TWhyq5Mq4pxVRhxK2e/CXYj3IUbJU=
Subject key identifier: 0F:20:9B:9B:DE:55:4F:F8:47:88:37:88:F3:F3:19:F5:CB:FA:7E:DD
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82DCFEF12F523ADB1633A4E82D6677
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DyCbm95VT_hHiDeI8_MZ9cv6ft0.roa
Signing time: Thu 26 Mar 2026 14:18:32 +0000
ROA not before: Thu 26 Mar 2026 14:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397204
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:dc:fe:f1:2f:52:3a:db:16:33:a4:e8:2d:66:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f209b9bde554ff847883788f3f319f5cbfa7edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:f9:5b:f3:5b:4d:fd:84:79:c9:e5:4e:9b:
32:c5:51:48:30:56:4f:22:b0:c6:41:fa:ba:b9:3c:
ba:f1:6f:4d:fe:d4:9e:74:48:b7:6b:0d:1d:e7:04:
3e:44:37:e9:88:3b:0e:83:84:66:df:d5:78:b4:04:
b0:97:f8:9b:98:d1:27:71:f2:6a:5f:b0:0c:61:d6:
0c:21:f7:c5:be:a7:61:8c:62:84:6d:b8:12:f1:ee:
07:d7:22:ff:2a:87:17:cb:a4:4d:f2:58:13:ba:2d:
4f:d2:94:3a:fe:87:73:a1:9c:1b:55:a5:41:7f:fc:
27:8d:2b:75:a2:59:2b:51:76:bd:bb:e1:82:97:35:
2e:d0:4c:c0:dd:d8:1b:13:3f:3c:e7:25:97:2c:b4:
88:d3:4c:28:f7:1f:0c:01:87:5b:bc:39:7a:ad:f0:
21:82:8a:6c:a3:ed:55:e6:15:9f:88:4f:93:f8:41:
a4:8d:59:91:64:0f:84:88:f3:d2:84:ee:3b:5a:1b:
b0:89:2a:e5:31:73:83:2a:a0:44:a2:8d:2f:6c:95:
e3:24:4f:f8:1e:9c:0e:1f:af:4a:8f:68:23:a4:12:
1b:92:c0:c8:79:a2:c8:8a:50:c7:a8:4c:6c:00:bc:
37:48:6d:a0:f8:43:f9:b4:44:ef:08:1e:6d:2e:7c:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:9B:9B:DE:55:4F:F8:47:88:37:88:F3:F3:19:F5:CB:FA:7E:DD
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DyCbm95VT_hHiDeI8_MZ9cv6ft0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
24:eb:93:0c:6e:6b:77:6b:5e:d5:ea:b6:4b:4b:6c:5a:ec:55:
a2:97:74:51:98:b5:96:84:48:32:37:4e:0b:6e:f0:45:e4:24:
b7:33:5d:35:3d:b3:b6:e2:d5:61:7b:b1:8f:b5:c4:61:31:22:
a9:8e:2e:11:19:b4:88:2e:40:d4:9a:06:b3:fb:37:55:06:b7:
40:a6:5e:dc:ec:e2:4f:4e:2e:71:4d:ac:b0:7c:a9:b7:2c:d7:
96:32:99:89:cc:89:9a:b1:68:e2:b3:e4:2a:f6:8b:f9:9d:9c:
b1:c7:82:2a:8b:e4:93:11:0a:66:68:2f:87:45:30:36:e7:54:
aa:61:dd:a6:88:2a:1b:49:36:94:70:f0:a6:0d:0d:78:23:ec:
23:ca:3d:c4:70:b0:0a:9d:03:77:84:60:68:7e:67:bf:63:d4:
f6:16:47:04:f8:8f:64:de:d6:0d:2f:ed:fd:3d:37:4c:49:3c:
f4:d2:9d:17:99:a9:44:7a:32:55:51:71:9e:37:5e:64:d8:5a:
4f:c3:bc:5a:f5:ae:1f:9c:31:2f:9a:40:9c:bd:05:eb:c5:3f:
63:ac:b2:80:dd:ea:e8:6f:4c:cf:b0:f2:3a:b0:fd:7d:da:4c:
03:30:19:31:cd:9e:9a:f8:9c:bd:ab:78:a6:ee:f4:3f:3e:df:
86:15:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:56 2026 by rpki-client