Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JL6vSAOg_8zLcC9CfxLKiT42dAo.roa
File: JL6vSAOg_8zLcC9CfxLKiT42dAo.roa (raw, json)
Hash identifier: 5ZZSJUFx8lHTQljAldrbqDflv35DpGm5avrvon+FMlM=
Subject key identifier: 24:BE:AF:48:03:A0:FF:CC:CB:70:2F:42:7F:12:CA:89:3E:36:74:0A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D977268B7E9E3703432D289F3398
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JL6vSAOg_8zLcC9CfxLKiT42dAo.roa
Signing time: Thu 26 Mar 2026 14:18:31 +0000
ROA not before: Thu 26 Mar 2026 14:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397195
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d9:77:26:8b:7e:9e:37:03:43:2d:28:9f:33:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24beaf4803a0ffcccb702f427f12ca893e36740a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:43:cf:85:ae:c8:ca:7b:a9:f6:9a:2e:42:
de:86:a5:54:70:dc:54:f7:fb:34:15:1a:c2:8d:00:
cd:de:0b:42:c8:21:03:12:eb:af:a4:7b:bd:21:3b:
a7:00:6f:4b:9c:81:2c:b9:3c:85:92:1f:fb:5d:38:
0d:e9:91:32:11:83:56:29:d5:01:6e:f6:ba:e2:d6:
c6:0c:e3:9b:7f:a9:4a:87:d5:c2:24:58:57:13:bf:
dd:75:88:a0:f4:97:a4:ec:f3:8f:e6:dc:00:f2:8e:
7b:1f:f4:6c:b3:48:1d:31:fb:9d:af:c5:1c:82:38:
0c:cf:bb:64:16:84:62:d2:25:74:cd:cd:42:71:43:
05:e7:ee:02:65:79:cb:22:1d:9b:37:e8:95:ab:14:
ae:14:fe:6c:cf:a4:c7:5b:20:31:01:3e:83:b3:29:
66:4b:fe:ae:c0:5e:5b:ea:e6:94:1f:47:84:75:49:
4f:3c:9c:dc:6e:99:ca:f2:23:a5:13:ad:99:6f:55:
66:8e:eb:58:40:0c:73:f9:0f:90:22:98:bd:a5:0f:
3a:08:87:8a:a2:5e:23:6a:9c:3c:14:a4:b0:b2:b9:
84:46:5b:eb:c7:49:1e:ae:ee:cd:15:83:0e:d7:b9:
8c:6f:d1:0e:7d:a6:fe:90:da:66:9f:9a:49:26:7a:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BE:AF:48:03:A0:FF:CC:CB:70:2F:42:7F:12:CA:89:3E:36:74:0A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JL6vSAOg_8zLcC9CfxLKiT42dAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c5:d4:c1:8e:d1:36:f1:8b:2e:63:d1:d2:4d:73:59:bc:8d:
6f:88:c3:18:97:41:43:5c:e5:dd:a5:67:53:df:c2:a2:45:b5:
04:d2:dd:a6:7a:30:21:a8:b7:77:92:f5:d8:8c:8f:11:35:78:
7e:cc:53:79:e8:a4:bb:9c:7c:81:57:01:4a:08:c1:a0:c2:3d:
3c:39:62:ed:80:3a:8d:1c:95:45:52:93:5f:72:a9:25:8b:1f:
c2:1c:bc:f8:e0:35:d5:4f:a1:b0:3f:25:3f:b6:d2:03:21:84:
4d:98:cd:51:af:89:92:7b:b3:86:97:b3:ef:29:eb:20:fa:3d:
78:d2:99:b4:d1:8d:b5:6f:ae:46:a5:47:ed:bd:df:23:df:50:
4a:12:d5:8f:58:2b:3d:b7:c9:2b:b3:59:3e:34:56:c4:73:e5:
64:81:a7:03:ab:29:22:51:ec:39:27:11:11:80:ab:0a:0e:6e:
6c:93:c0:7c:cd:0a:96:74:30:8c:ff:52:86:ce:18:65:bc:f2:
21:bb:e5:f7:8f:2c:42:c6:b6:df:7a:f6:75:b2:a3:a0:ba:93:
30:9e:85:b7:3d:cd:05:7f:39:88:82:21:8b:36:40:ba:ce:cf:
ec:05:dd:d6:d8:be:7f:42:a3:ef:47:2f:e4:6c:98:54:c2:a6:
6e:33:f4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:51 2026 by rpki-client