Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LYzHGCvy9s10PkjxdtWjkhEul74.roa
File: LYzHGCvy9s10PkjxdtWjkhEul74.roa (raw, json)
Hash identifier: D9RBv4czm2M1KivJLecUKJVq6O0YywyeM3P/g0aotzU=
Subject key identifier: 2D:8C:C7:18:2B:F2:F6:CD:74:3E:48:F1:76:D5:A3:92:11:2E:97:BE
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82BA341B0882FCE42460A987CB1C99
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LYzHGCvy9s10PkjxdtWjkhEul74.roa
Signing time: Thu 26 Mar 2026 14:18:23 +0000
ROA not before: Thu 26 Mar 2026 14:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396550
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:ba:34:1b:08:82:fc:e4:24:60:a9:87:cb:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d8cc7182bf2f6cd743e48f176d5a392112e97be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:aa:ac:a9:20:18:e1:c8:c1:d1:57:ad:bd:
59:45:75:80:55:2d:5d:e3:f9:54:2b:cb:6c:30:39:
e9:1f:90:c7:e9:3a:cd:39:68:6a:ed:a9:3b:19:60:
57:20:88:39:f2:9d:d6:01:35:d1:0b:06:24:f8:3b:
18:e5:71:f1:f1:ba:1f:e9:cc:d4:59:d3:c0:69:14:
fb:ea:1c:1d:c0:60:69:ba:e1:f8:d3:ae:cc:f4:dd:
21:51:02:5d:da:78:81:4b:81:43:42:09:72:34:82:
31:3b:34:27:f7:44:b9:0e:06:4a:95:f9:d0:e1:a7:
03:d1:06:16:66:53:7c:62:52:25:bc:c4:ff:e3:c1:
f1:b1:e7:fd:c4:24:fa:e3:64:ad:ff:be:66:6a:c0:
7d:65:50:38:81:cd:50:bc:c6:4b:06:c9:6a:af:a1:
34:54:b0:c5:dd:3f:90:bb:ef:f6:7e:4b:ae:30:27:
12:b8:b7:e7:cd:f2:a0:68:4e:29:1e:fc:13:12:8e:
81:a8:0a:a6:44:3b:e5:82:ed:97:3c:7e:91:a0:eb:
05:1e:b3:65:ac:46:eb:26:34:1a:6c:e2:07:3e:8d:
49:99:72:84:cd:64:66:b8:5f:6b:73:48:f2:9d:ad:
aa:5d:09:60:ea:3e:d9:60:9b:33:ef:0c:a5:6e:80:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:C7:18:2B:F2:F6:CD:74:3E:48:F1:76:D5:A3:92:11:2E:97:BE
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LYzHGCvy9s10PkjxdtWjkhEul74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
54:fb:cd:d8:21:20:aa:72:83:b8:2f:35:a4:9e:6a:9c:d3:86:
52:15:13:a8:a5:14:fe:f9:2d:6c:1b:84:d7:fd:7d:63:6c:7f:
ef:e6:48:33:ec:f0:dd:81:48:cb:a1:19:4b:ae:ba:92:ce:31:
d8:5f:17:36:5d:06:74:ca:d2:c6:6e:84:ee:ed:62:bf:93:ab:
cf:bc:12:d1:38:d1:5f:a4:17:07:7c:c6:c2:46:db:d5:1f:e3:
00:f2:e3:18:13:a0:92:60:2e:05:e4:43:91:f3:4f:da:94:bb:
27:52:c3:ec:be:92:13:e2:1d:cf:6a:ae:8b:5b:17:9b:22:02:
bb:c9:3f:88:55:72:7b:1a:9e:2f:f1:3a:10:1a:68:be:e9:ca:
e3:22:90:01:32:58:39:ee:ea:78:2e:9d:82:8d:9b:b5:47:ab:
c4:39:9e:d6:f2:a6:7e:db:3e:fa:36:41:09:8c:da:9a:e2:25:
d3:4c:d3:8e:86:97:b6:14:44:4a:08:17:11:91:9e:03:25:ef:
24:51:94:97:6a:b3:87:c2:a4:e7:4c:84:8b:a3:58:05:64:96:
cc:79:2b:d5:4a:c1:e6:60:77:3b:1e:42:da:a2:ff:ce:ce:eb:
c8:0e:a2:9e:9e:49:b7:9b:14:47:75:ac:c5:35:0f:46:ff:bc:
5f:00:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:47 2026 by rpki-client