Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OOURF90Gz0GvmdBLiA1Nk-2KaQI.roa
File: OOURF90Gz0GvmdBLiA1Nk-2KaQI.roa (raw, json)
Hash identifier: +kcKJ1tyGH9oGxte6JKzxYu322iWBbCPrW0eTFacebc=
Subject key identifier: 38:E5:11:17:DD:06:CF:41:AF:99:D0:4B:88:0D:4D:93:ED:8A:69:02
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82AA59391EF91001C983DFA8DA473C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OOURF90Gz0GvmdBLiA1Nk-2KaQI.roa
Signing time: Thu 26 Mar 2026 14:18:19 +0000
ROA not before: Thu 26 Mar 2026 14:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22547
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:aa:59:39:1e:f9:10:01:c9:83:df:a8:da:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38e51117dd06cf41af99d04b880d4d93ed8a6902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:95:04:78:5d:a7:3d:03:4a:58:dc:a4:f2:
19:20:31:d3:55:2d:31:2a:4c:5f:aa:ea:48:68:93:
fb:17:2f:0d:e0:45:1a:d2:fe:c4:0a:fe:0c:be:a0:
da:dc:8c:8e:94:21:99:1f:c6:8b:4a:34:c0:44:13:
c7:52:33:5a:ae:91:90:77:08:44:6f:38:76:fb:fc:
1f:24:f1:e9:d0:29:1b:e0:76:fc:31:d9:4a:63:6e:
54:22:e1:7e:4a:71:ab:9c:53:99:50:71:55:6c:7d:
62:fa:eb:4e:d3:38:6b:37:3a:89:c0:14:c6:f1:33:
f2:66:98:6a:b2:60:4a:80:51:85:91:3b:fd:5d:58:
2d:6f:ed:0d:20:1b:19:55:5a:02:eb:b8:e6:83:e4:
a6:57:ae:2f:82:5a:ff:e0:7f:03:b5:bd:05:dd:0f:
3b:42:61:1a:20:de:3e:0a:ca:b3:69:fc:c8:d3:38:
c0:bf:88:89:f1:76:17:7a:33:ea:18:ae:42:21:41:
7d:2b:c9:33:ae:12:96:25:cb:8d:c7:3d:1b:4d:72:
7c:f9:d3:b7:52:91:5f:da:c5:94:b3:c7:38:98:12:
40:8d:2d:39:39:5e:f9:e3:50:6e:bc:f8:a4:f7:0c:
00:1f:92:3b:ee:a8:30:10:34:a1:43:d4:34:f8:b1:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:11:17:DD:06:CF:41:AF:99:D0:4B:88:0D:4D:93:ED:8A:69:02
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OOURF90Gz0GvmdBLiA1Nk-2KaQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
10:02:83:16:04:e8:6e:a0:a6:c2:ce:c5:0d:28:45:a0:74:3d:
98:2c:9e:ef:77:68:89:47:ca:ff:a6:a2:71:5c:30:5b:03:75:
d0:de:a1:bc:6f:ad:ec:5f:79:fa:7d:38:9f:ce:9c:32:49:bf:
02:0d:ad:af:74:76:35:3b:e2:7e:ee:24:e1:cc:32:c7:6b:85:
37:4b:e4:1a:37:97:72:af:75:61:19:34:02:53:75:22:8c:8d:
cd:81:db:f9:36:fa:ed:fd:c5:36:25:fb:7c:48:0e:97:f6:b7:
ca:b4:96:d8:9e:69:31:39:1f:61:c8:25:d9:1f:96:85:ac:1b:
fd:87:1c:26:e2:e1:d2:d1:ec:0f:61:c9:d8:55:f2:d1:ad:af:
bf:c8:92:95:20:bf:9c:df:3a:a5:24:32:37:1a:01:85:72:d3:
37:8d:14:2f:87:c3:df:88:85:28:0f:18:e8:4f:fd:ae:0f:cc:
13:e9:bf:c9:41:4d:78:21:6c:92:7c:cb:3d:88:81:49:e3:0a:
ed:d4:30:cc:79:1c:82:17:95:e7:3d:b0:27:6c:75:78:e0:42:
9a:a1:90:dc:b6:7b:be:e9:1f:7d:32:8a:2c:5c:09:30:68:8b:
8b:68:ee:92:9d:2f:01:8d:b8:20:75:e4:84:32:bd:f2:d1:e1:
10:a1:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:46 2026 by rpki-client