Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OhWNZfftOF0fHTFzkOmJUNtTKBk.roa
File: OhWNZfftOF0fHTFzkOmJUNtTKBk.roa (raw, json)
Hash identifier: yZm6z0ou3s2vEp6oxoDKTlspaK6ZKukK40fIfZTpQ1Q=
Subject key identifier: 3A:15:8D:65:F7:ED:38:5D:1F:1D:31:73:90:E9:89:50:DB:53:28:19
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82AC6C33E19A8ACDCAC667C29414E1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OhWNZfftOF0fHTFzkOmJUNtTKBk.roa
Signing time: Thu 26 Mar 2026 14:18:20 +0000
ROA not before: Thu 26 Mar 2026 14:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32651
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:ac:6c:33:e1:9a:8a:cd:ca:c6:67:c2:94:14:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a158d65f7ed385d1f1d317390e98950db532819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:34:05:8d:ad:78:02:8e:32:73:7c:cd:52:
4d:d6:9a:c9:60:37:8c:89:ff:7d:19:23:9e:a2:50:
3d:2a:86:86:e3:79:ac:be:1d:dc:36:bf:6f:d7:9b:
34:75:21:f4:25:78:8f:01:50:9c:ae:aa:39:3f:f5:
d4:1d:7b:fc:5f:27:9b:1f:71:ec:89:86:ea:26:66:
e8:a7:4a:61:1a:d1:65:19:41:95:60:4c:6f:cf:33:
96:d9:ce:a8:ce:98:07:5d:b3:71:33:ef:ce:23:a2:
18:0c:c7:1b:de:32:7b:2f:ab:01:2b:1f:40:e6:9e:
b7:2a:84:44:15:b5:7f:48:7b:74:4c:04:bd:bf:b9:
d5:b3:dd:d3:f9:b6:78:27:95:5c:56:9a:13:df:2a:
c6:d0:06:9e:82:7f:17:16:e2:b5:eb:cd:3e:27:0d:
46:e9:8c:6c:71:59:03:7e:1b:30:03:bd:19:12:19:
03:e5:e3:0b:d5:d1:fd:0f:07:ae:f6:f8:e4:17:25:
b7:74:31:15:3b:12:7e:c0:53:f0:99:41:37:d1:f4:
f8:52:34:dd:27:74:0f:0f:1a:c7:21:6b:6c:64:52:
f8:ff:8b:90:7e:e6:c4:29:96:ce:6f:0b:5d:68:7a:
5b:f8:c0:86:f0:21:ea:9e:4b:d5:59:14:47:6d:d1:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:15:8D:65:F7:ED:38:5D:1F:1D:31:73:90:E9:89:50:DB:53:28:19
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OhWNZfftOF0fHTFzkOmJUNtTKBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
89:14:2f:20:62:21:2e:1b:25:39:e1:e7:81:d8:9a:32:ea:70:
ce:32:32:87:a6:2d:10:68:e4:59:6f:f4:71:2a:86:56:69:8c:
d6:54:4b:69:dd:7d:c4:ba:53:63:e8:39:54:94:88:63:d3:84:
f1:88:46:f6:8e:d9:4f:e7:aa:44:27:a8:ba:6a:de:45:98:cf:
36:b7:6d:f8:10:41:b6:84:1c:24:f9:a0:31:dd:40:5d:2b:a8:
26:a2:1e:e7:9b:a5:aa:cf:89:5a:b3:67:ab:aa:8e:1a:48:6d:
69:fb:92:f4:0c:8e:04:a4:a9:57:4e:55:e8:83:59:fd:38:5a:
03:7c:97:47:2a:fe:e5:f6:75:a5:15:06:dc:8c:3d:1a:74:bc:
bb:56:06:63:75:95:18:a1:16:8f:22:71:88:fe:a5:2c:10:bc:
f0:ef:bd:35:8a:b5:e9:99:86:86:0f:ac:b7:86:08:cd:59:2a:
56:ab:c8:9d:08:47:63:da:95:d8:98:ad:5c:34:cb:ce:b5:af:
d8:0f:1e:d7:ed:f7:5f:3d:8a:9b:51:c8:c4:ed:54:47:fd:29:
eb:63:87:ff:96:9b:45:ca:c9:18:34:32:64:88:ca:b8:fb:13:
b1:02:fa:82:29:de:f6:7a:1d:5b:54:f7:14:e8:cf:5a:38:85:
c3:4c:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:58 2026 by rpki-client