Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JS377stsuC0BRxEpo-ulwGiFSPc.roa
File: JS377stsuC0BRxEpo-ulwGiFSPc.roa (raw, json)
Hash identifier: eW/k6/8HIBLZVXCegU6ZwTUeOOhv5MgOspj46qcH1kU=
Subject key identifier: 25:2D:FB:EE:CB:6C:B8:2D:01:47:11:29:A3:EB:A5:C0:68:85:48:F7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D4B19A55713E051971EB534A3518
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JS377stsuC0BRxEpo-ulwGiFSPc.roa
Signing time: Thu 26 Mar 2026 14:18:30 +0000
ROA not before: Thu 26 Mar 2026 14:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396610
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d4:b1:9a:55:71:3e:05:19:71:eb:53:4a:35:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=252dfbeecb6cb82d01471129a3eba5c0688548f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:2d:17:77:eb:08:6a:ab:d8:00:b3:de:87:
a1:8e:3d:0b:cc:7c:cb:93:59:fd:50:13:00:2f:a0:
3f:50:38:92:17:81:c2:65:ac:37:31:14:8e:5b:10:
58:3d:55:60:25:85:97:fb:ee:03:41:9d:a0:3f:b1:
d3:11:b6:1b:8f:bf:d4:07:c3:74:d1:8b:66:10:27:
03:80:d0:af:00:9e:20:9c:cb:31:6b:24:40:c1:25:
5a:08:8c:0e:32:e6:fa:91:d2:94:e5:03:66:2a:47:
37:a8:72:91:43:ac:60:81:8a:0e:36:e0:53:30:78:
c4:ab:3e:ed:86:2b:fe:38:6a:14:3d:22:ad:91:55:
0f:be:7c:f7:8c:bf:b3:30:03:94:09:50:03:83:ef:
1b:dc:65:e0:9c:d3:b5:13:08:06:78:44:a0:0f:d0:
be:8f:d9:4a:15:07:72:e8:75:be:3d:a4:c2:15:0c:
c7:e0:74:b3:12:18:10:1f:72:a0:1f:fb:fb:28:20:
a2:c8:f3:54:ee:2d:d3:38:40:e5:43:52:9f:15:d8:
8d:e4:3f:88:f8:c0:7f:46:c5:a5:f2:ed:71:05:30:
60:66:4b:03:2f:e3:c0:03:ff:dc:ec:ca:bf:90:b6:
7d:52:15:de:78:fc:fa:fd:1a:86:95:04:a2:ed:17:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:FB:EE:CB:6C:B8:2D:01:47:11:29:A3:EB:A5:C0:68:85:48:F7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JS377stsuC0BRxEpo-ulwGiFSPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8b:1b:c3:53:f5:33:db:49:49:6e:19:b1:f1:35:78:07:02:
fc:11:45:ce:c2:7f:b7:74:83:36:e9:cd:8a:97:cc:ac:33:e3:
d0:3b:a4:28:ee:f4:fb:25:79:18:f2:56:1e:fa:1f:b5:ae:f1:
7e:1b:11:72:e5:5b:45:d9:6e:4a:b4:ff:3a:c3:54:65:c1:5b:
a2:fd:eb:05:fd:d6:ec:81:2d:2b:27:95:91:a7:55:75:5c:56:
39:4d:2a:07:81:c8:2d:f8:42:48:ac:4d:c0:2b:85:35:1b:cf:
c6:da:e7:cd:58:eb:1a:41:05:9d:b5:2a:dc:aa:1d:7a:98:98:
29:72:44:ad:c9:4a:1d:52:26:4a:4d:56:ed:cc:c4:d3:dc:fe:
ca:0d:9d:df:f3:36:34:33:ac:f6:fc:66:3d:ef:97:72:38:3e:
f0:61:22:5f:ab:9d:fa:8c:46:85:dd:90:99:3b:32:eb:3d:58:
b0:83:4e:27:5d:aa:fc:c0:84:23:06:ca:ea:e4:60:42:9d:38:
eb:33:61:db:85:ec:17:25:72:98:98:87:c6:6f:b1:3f:fa:b5:
28:88:f9:dc:25:2d:b4:74:27:a8:8e:25:8c:4e:eb:1b:50:d2:
3c:f2:03:7d:33:bf:b9:84:b5:10:6b:0b:d1:c1:d8:6c:4f:a7:
b2:02:9a:5c
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgtSxmlVxPgUZcetTSjUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTJkZmJlZWNiNmNiODJkMDE0NzExMjlhM2ViYTVjMDY4ODU0OGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLwtF3frCGqr2ACz3oehjj0LzHzL
k1n9UBMAL6A/UDiSF4HCZaw3MRSOWxBYPVVgJYWX++4DQZ2gP7HTEbYbj7/UB8N0
0YtmECcDgNCvAJ4gnMsxayRAwSVaCIwOMub6kdKU5QNmKkc3qHKRQ6xggYoONuBT
MHjEqz7thiv+OGoUPSKtkVUPvnz3jL+zMAOUCVADg+8b3GXgnNO1EwgGeESgD9C+
j9lKFQdy6HW+PaTCFQzH4HSzEhgQH3KgH/v7KCCiyPNU7i3TOEDlQ1KfFdiN5D+I
+MB/RsWl8u1xBTBgZksDL+PAA//c7Mq/kLZ9UhXeePz6/RqGlQSi7RdvzwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFCUt++7LbLgtAUcRKaPrpcBohUj3MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSlMzNzdzdHN1QzBCUnhFcG8tdWx3R2lGU1BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAlIsbw1P1M9tJSW4ZsfE1eAcC/BFFzsJ/
t3SDNunNipfMrDPj0DukKO70+yV5GPJWHvofta7xfhsRcuVbRdluSrT/OsNUZcFb
ov3rBf3W7IEtKyeVkadVdVxWOU0qB4HILfhCSKxNwCuFNRvPxtrnzVjrGkEFnbUq
3KodepiYKXJErclKHVImSk1W7czE09z+yg2d3/M2NDOs9vxmPe+Xcjg+8GEiX6ud
+oxGhd2QmTsy6z1YsINOJ12q/MCEIwbK6uRgQp046zNh24XsFyVymJiHxm+xP/q1
KIj53CUttHQnqI4ljE7rG1DSPPIDfTO/uYS1EGsL0cHYbE+nsgKaXA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:57 2026 by rpki-client