Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LYwB9UvS--5bgdaxrB0mMpjT9QI.roa
File: LYwB9UvS--5bgdaxrB0mMpjT9QI.roa (raw, json)
Hash identifier: VsXtUXBIM1gK1zpQOvahU1/9k7QYj2h1aGVwEbKTIO4=
Subject key identifier: 2D:8C:01:F5:4B:D2:FB:EE:5B:81:D6:B1:AC:1D:26:32:98:D3:F5:02
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B373374EDC46C3CB4495C2804516
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LYwB9UvS--5bgdaxrB0mMpjT9QI.roa
Signing time: Thu 26 Mar 2026 14:18:21 +0000
ROA not before: Thu 26 Mar 2026 14:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36629
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b3:73:37:4e:dc:46:c3:cb:44:95:c2:80:45:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d8c01f54bd2fbee5b81d6b1ac1d263298d3f502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:f1:16:e3:b3:97:08:46:45:d7:a3:0d:00:
78:34:0d:40:a5:7b:6d:c5:26:2d:bb:a2:88:1f:86:
27:ca:2b:30:89:a5:d3:2d:b2:22:06:72:82:07:8f:
e7:64:3c:22:63:96:34:8e:04:7d:f3:34:55:64:0d:
a9:fa:92:98:9b:21:6c:ea:15:ab:ef:1b:13:d4:10:
77:76:9a:da:78:f1:79:6e:71:11:e0:e5:2e:ca:b4:
3d:e5:db:9c:31:25:1f:18:5f:28:4b:e2:a3:d1:f7:
61:e0:26:14:70:60:6d:95:06:85:5a:87:e7:6a:b5:
64:65:5f:ea:e9:0c:e1:52:ed:4e:1b:4b:0f:09:59:
19:cb:bc:ed:00:35:6d:a4:aa:aa:81:f8:1d:ed:d7:
07:f7:45:ce:2b:47:35:58:c5:d9:02:2a:f2:09:12:
11:cc:10:ae:73:50:c4:d1:2d:82:f7:16:37:cc:07:
57:c7:f8:1d:6d:4a:3f:5c:3a:c3:c2:56:5d:aa:f1:
6e:94:e1:9e:ac:99:a3:0a:ef:09:83:e0:b2:54:b0:
b2:f4:4a:36:d6:20:2b:b0:1d:dc:83:d6:13:bc:30:
5d:ae:2a:d5:61:e9:67:a7:8d:cd:d4:18:99:f4:e3:
70:0a:9e:a3:ec:09:bb:8d:33:18:d3:2f:27:77:46:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:01:F5:4B:D2:FB:EE:5B:81:D6:B1:AC:1D:26:32:98:D3:F5:02
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LYwB9UvS--5bgdaxrB0mMpjT9QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fb:fb:99:a6:a0:d2:67:e3:ff:2d:a6:3c:e3:58:8b:cc:1e:
2d:d5:70:44:53:00:ee:20:f0:0d:d2:4f:1e:f5:e6:c2:21:d1:
c1:94:e9:09:23:65:26:18:6b:33:d2:00:d5:69:16:99:90:a6:
f4:7c:05:74:24:c0:e1:c1:5b:6b:7e:b1:55:da:fe:a8:f2:c9:
49:f0:79:83:05:06:54:05:55:cf:47:cb:72:b6:df:e0:5a:b4:
ee:d6:00:39:02:48:70:00:54:ab:ca:de:57:cf:ff:d7:4d:a0:
89:24:6f:51:af:dd:f2:48:40:3b:cf:bc:99:81:43:43:16:76:
61:e2:78:ad:e6:00:45:b6:bd:99:13:c4:b3:25:3b:b3:40:89:
d1:b4:0c:5c:96:cc:f9:54:69:1d:85:c9:67:09:d1:da:a3:fb:
43:fc:78:69:44:a2:c7:a7:9d:76:5d:a7:49:b7:c7:49:0b:0d:
59:13:ac:c4:06:fe:96:db:6f:cf:4a:90:dc:21:da:bc:1c:d3:
c2:5f:31:0d:a2:93:a2:f7:28:d2:0e:f8:74:f6:25:70:2b:8c:
8c:24:38:6e:a7:24:c0:fc:43:e5:db:2e:c0:7f:37:dc:c8:25:
b2:ac:ac:e4:8b:a5:16:43:58:53:4e:0f:e8:dd:e1:3a:65:45:
dd:68:c8:90
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgrNzN07cRsPLRJXCgEUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDhjMDFmNTRiZDJmYmVlNWI4MWQ2YjFhYzFkMjYzMjk4ZDNmNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcjxFuOzlwhGRdejDQB4NA1ApXtt
xSYtu6KIH4YnyiswiaXTLbIiBnKCB4/nZDwiY5Y0jgR98zRVZA2p+pKYmyFs6hWr
7xsT1BB3dpraePF5bnER4OUuyrQ95ducMSUfGF8oS+Kj0fdh4CYUcGBtlQaFWofn
arVkZV/q6QzhUu1OG0sPCVkZy7ztADVtpKqqgfgd7dcH90XOK0c1WMXZAiryCRIR
zBCuc1DE0S2C9xY3zAdXx/gdbUo/XDrDwlZdqvFulOGerJmjCu8Jg+CyVLCy9Eo2
1iArsB3cg9YTvDBdrirVYelnp43N1BiZ9ONwCp6j7Am7jTMY0y8nd0Ym8QIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFC2MAfVL0vvuW4HWsawdJjKY0/UCMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvTFl3QjlVdlMtLTViZ2RheHJCMG1NcGpUOVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAN/v7maag0mfj/y2mPONYi8weLdVwRFMA
7iDwDdJPHvXmwiHRwZTpCSNlJhhrM9IA1WkWmZCm9HwFdCTA4cFba36xVdr+qPLJ
SfB5gwUGVAVVz0fLcrbf4Fq07tYAOQJIcABUq8reV8//102giSRvUa/d8khAO8+8
mYFDQxZ2YeJ4reYARba9mRPEsyU7s0CJ0bQMXJbM+VRpHYXJZwnR2qP7Q/x4aUSi
x6eddl2nSbfHSQsNWROsxAb+lttvz0qQ3CHavBzTwl8xDaKTovco0g74dPYlcCuM
jCQ4bqckwPxD5dsuwH833Mglsqys5IulFkNYU04P6N3hOmVF3WjIkA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:39 2026 by rpki-client