Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GCdSygXENPnquCb7QGdiGq55XD4.roa
File: GCdSygXENPnquCb7QGdiGq55XD4.roa (raw, json)
Hash identifier: YGQIr4GpEPA4D5Q8KZ9LvG82iuPEvghv4F6GxwsOcS0=
Subject key identifier: 18:27:52:CA:05:C4:34:F9:EA:B8:26:FB:40:67:62:1A:AE:79:5C:3E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B4863E72618D44F4FE6575C6A887
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GCdSygXENPnquCb7QGdiGq55XD4.roa
Signing time: Thu 26 Mar 2026 14:18:22 +0000
ROA not before: Thu 26 Mar 2026 14:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36632
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b4:86:3e:72:61:8d:44:f4:fe:65:75:c6:a8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=182752ca05c434f9eab826fb4067621aae795c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:7a:80:71:da:27:93:1e:8b:4c:92:62:bf:
5a:f5:d9:f4:27:44:4f:ee:6b:86:26:04:e7:43:28:
e8:2d:a6:13:04:8f:3b:d3:62:84:cc:6d:f7:8e:d4:
a1:12:2f:a6:a7:e5:e6:dc:25:04:be:83:e8:51:35:
fa:c9:4e:48:e8:c8:72:85:ce:03:b4:c2:8e:b7:c2:
d5:a4:75:24:9b:79:c5:97:19:db:37:44:37:f6:e2:
aa:57:73:47:39:ba:db:71:cd:9b:59:69:84:49:69:
8b:4f:ab:b4:14:b5:72:c0:02:50:5e:01:f2:63:4a:
be:8a:2e:fc:a7:7f:7f:2d:b3:27:1a:d6:60:e9:24:
6e:20:e2:6c:9c:57:a4:e2:00:d8:47:2a:a3:32:a8:
41:fc:79:b1:c9:32:70:00:c6:58:01:ba:fe:80:ed:
97:56:06:f0:35:f8:95:e1:7e:58:8c:2c:8a:8e:bf:
49:c8:a7:64:fb:81:9d:55:4a:3f:31:68:02:a1:76:
33:73:ab:57:ae:2a:26:ba:92:29:19:46:05:4a:d7:
58:fd:ef:34:5e:98:e2:aa:3f:1e:6e:1f:4f:a6:fa:
ff:e4:e7:51:2b:82:08:4b:89:a0:c9:9b:d3:78:6b:
da:26:69:7f:3a:fe:ba:2c:dc:06:48:39:91:f9:5f:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:52:CA:05:C4:34:F9:EA:B8:26:FB:40:67:62:1A:AE:79:5C:3E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GCdSygXENPnquCb7QGdiGq55XD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:14:5c:30:b6:4e:18:39:c3:4b:17:c6:6d:39:67:7a:f8:4a:
e1:99:d2:89:23:d9:18:9b:31:1a:cf:b3:35:41:ac:08:57:23:
a0:39:66:4a:d8:89:a1:0a:96:15:0f:b6:32:90:d1:37:0a:cb:
30:47:4d:e7:c5:5e:5c:ca:fb:f6:a2:0f:66:d3:5c:60:e0:09:
de:26:fc:a3:12:59:31:84:5c:5d:3d:fb:d1:e4:69:e5:dd:24:
e7:f6:87:db:e4:34:4a:92:89:53:b8:5d:23:24:6c:00:8d:3f:
59:48:0e:a7:eb:80:3a:b0:3f:8b:10:4e:27:6b:4b:cf:17:ea:
6e:c0:67:fe:c9:27:0b:dc:50:a1:c0:3a:9c:15:d9:80:fc:b2:
7f:b1:cc:32:40:20:45:45:81:c8:fd:d8:59:39:a1:c5:7c:71:
e5:1d:fb:20:a6:86:62:b3:cc:5d:6d:72:1e:46:81:d1:50:1c:
b2:16:9d:36:41:ab:6b:8b:7c:87:e9:27:93:a1:8f:b5:d4:60:
5e:a9:3c:5c:68:bc:8b:5b:9b:ab:e9:63:05:ea:ba:cd:c3:83:
12:d7:c3:e4:df:f7:36:59:8a:39:9c:eb:84:03:0d:87:fd:ff:
1f:7e:f3:18:64:5d:a3:44:75:37:d5:c7:60:ef:eb:36:eb:06:
bc:6b:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:54 2026 by rpki-client