Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Iwse7tPV5BXMwtIB2bcUQVJzsFo.roa
File: Iwse7tPV5BXMwtIB2bcUQVJzsFo.roa (raw, json)
Hash identifier: P0msaMzEWBFkvkneBflXPBhfxzcKv5Qh4UhAGdMUIoE=
Subject key identifier: 23:0B:1E:EE:D3:D5:E4:15:CC:C2:D2:01:D9:B7:14:41:52:73:B0:5A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D649F11BD1F660D3947B8817A3C9
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Iwse7tPV5BXMwtIB2bcUQVJzsFo.roa
Signing time: Thu 26 Mar 2026 14:18:30 +0000
ROA not before: Thu 26 Mar 2026 14:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396615
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d6:49:f1:1b:d1:f6:60:d3:94:7b:88:17:a3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=230b1eeed3d5e415ccc2d201d9b714415273b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0b:27:ff:50:cd:a7:9b:a3:11:ee:cd:1c:e1:
62:97:83:63:d7:fd:30:d8:7a:20:2e:98:9e:b2:49:
2c:0f:f1:54:3b:37:f2:31:9b:4b:8e:04:60:28:59:
71:71:95:92:a2:6a:5d:bd:53:79:a5:91:94:20:de:
4c:9d:f3:04:7d:38:8a:c5:c1:04:7b:2c:0e:94:fa:
b6:33:55:42:e1:0f:7f:90:88:3a:ac:61:05:5e:01:
4c:38:ea:84:37:93:0a:60:bd:85:e4:25:4e:ec:df:
25:e9:59:f3:54:07:29:71:91:1d:c5:7e:03:52:71:
85:4d:32:51:d6:e9:5c:f2:ba:a1:27:be:ce:b0:9c:
7c:fb:f6:a1:6a:e3:45:df:25:f6:6b:e3:f5:77:45:
62:ab:c6:c0:7b:94:e5:42:78:7b:48:0f:e1:30:0a:
9a:b6:e5:d1:ff:7e:2e:96:ef:ed:7a:55:1e:83:3c:
60:b0:34:ac:36:a9:d6:9b:d2:75:d9:ea:ab:b5:00:
db:a9:81:bf:ba:06:ce:e8:ac:90:97:a6:96:88:77:
3b:ee:e0:61:e9:31:4b:4a:bc:e7:99:31:69:fb:9a:
ba:f0:d2:f4:5e:fc:0c:3b:da:65:8e:6d:12:21:ba:
14:1c:c8:78:3d:08:84:3d:e9:a8:a7:b8:6c:20:1c:
f9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0B:1E:EE:D3:D5:E4:15:CC:C2:D2:01:D9:B7:14:41:52:73:B0:5A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Iwse7tPV5BXMwtIB2bcUQVJzsFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c2:25:6b:c6:bf:f2:8a:19:15:6b:74:d9:83:fd:8f:9f:04:
1f:35:d9:e1:35:4a:6d:bf:f0:7c:29:a8:7a:8d:e8:95:b7:3e:
e9:df:41:97:51:0d:8b:1b:99:70:1b:57:50:6e:c2:f2:28:88:
44:c5:c2:09:c0:b4:ff:d8:24:60:22:35:8a:44:e6:04:e2:48:
25:8b:0e:f6:1a:a6:55:0a:92:65:53:ef:c1:63:cb:a1:01:5c:
ca:eb:f8:74:26:ad:22:6a:83:01:22:82:2c:88:9d:92:f6:ee:
7b:27:35:67:ca:89:ad:66:f0:d2:ca:cd:7a:ab:05:d3:0d:35:
cf:04:00:98:39:b8:70:b4:ea:d6:04:fe:04:a3:a7:6f:f6:b3:
13:a4:f8:b2:36:c2:e2:0c:63:8c:79:88:67:5d:4b:a4:4d:99:
7f:ac:74:4c:f7:c0:5a:76:d4:57:33:8e:ee:3c:24:36:60:b4:
98:3a:ce:8e:e8:8c:39:23:e8:38:6d:1d:e2:aa:f5:0c:cd:cc:
c7:30:8e:35:3b:fc:a9:dc:7e:5a:bb:37:36:7a:87:61:3e:c8:
a7:04:9d:92:59:5a:2e:09:25:f2:ff:6f:92:ff:a9:2e:a5:07:
2b:54:c5:5a:3b:57:08:e8:d2:2b:5d:21:ed:57:da:20:10:ec:
11:4c:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:56 2026 by rpki-client