Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/P9jZ__qJcOaQX2b6sGJuV-fUa1Q.roa
File: P9jZ__qJcOaQX2b6sGJuV-fUa1Q.roa (raw, json)
Hash identifier: 57J9LIN4luItTojUeWTeVxoSdbyLSKuA6+D7WPbOXbA=
Subject key identifier: 3F:D8:D9:FF:FA:89:70:E6:90:5F:66:FA:B0:62:6E:57:E7:D4:6B:54
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82CC4C73E12F048A86D7837A6AFCB7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/P9jZ__qJcOaQX2b6sGJuV-fUa1Q.roa
Signing time: Thu 26 Mar 2026 14:18:28 +0000
ROA not before: Thu 26 Mar 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396590
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:cc:4c:73:e1:2f:04:8a:86:d7:83:7a:6a:fc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fd8d9fffa8970e6905f66fab0626e57e7d46b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:85:5b:9c:32:09:ae:7e:96:eb:8c:7f:13:
7e:d8:86:53:ea:11:5d:90:50:95:e8:31:15:c1:56:
ec:16:dd:ff:9a:e5:c6:be:63:d5:09:a5:a2:ec:e5:
ea:5d:29:74:03:f1:f3:16:f2:f3:77:f5:9d:dd:85:
3e:b0:e9:64:00:e6:ce:67:9a:73:64:e4:a9:d3:94:
15:c7:a6:ba:65:ed:5a:57:2d:61:4f:38:f4:1d:50:
62:ef:24:5f:b7:56:b1:af:87:52:f8:33:00:e4:21:
34:2f:43:fb:da:80:10:bb:30:aa:5f:76:c7:fb:23:
da:1d:e9:f2:18:0c:09:60:03:5e:97:71:36:10:f9:
ce:e7:b2:73:2c:c2:ef:8d:0d:2b:13:99:b9:18:39:
59:57:b6:dd:61:7f:17:70:f3:98:31:bf:d5:99:65:
e5:5b:fa:ed:88:47:c4:e1:e4:51:cd:03:91:f1:52:
c3:6d:ed:3c:85:cc:e9:f3:45:ad:d8:10:7b:c7:17:
0e:73:5f:bc:57:cc:e1:2b:b2:d5:0c:dd:9f:47:d6:
3a:11:43:05:53:be:5f:6e:95:d2:5f:25:24:79:fc:
48:79:1a:37:ae:e4:89:6e:b1:5d:39:97:00:33:15:
41:d4:1b:db:9a:b8:8d:1e:55:99:02:86:70:76:2e:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D8:D9:FF:FA:89:70:E6:90:5F:66:FA:B0:62:6E:57:E7:D4:6B:54
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/P9jZ__qJcOaQX2b6sGJuV-fUa1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d2:ff:bb:b0:ac:ac:6b:06:1e:31:00:d7:f4:a3:dc:d1:e7:
9f:43:4e:83:3d:14:b6:1e:0a:d7:d3:85:6d:fc:c2:c4:91:c7:
9f:c9:17:d0:65:6d:71:cf:ad:05:4a:ee:41:84:e0:2b:d2:e3:
af:2a:ca:0c:84:e8:b2:17:33:c2:e1:b3:4f:a7:30:47:ef:f0:
97:11:33:28:74:1e:6c:45:88:5b:02:8d:5f:ff:be:67:29:65:
86:30:35:a7:6c:bd:1b:9f:4b:54:94:a9:43:af:8d:c0:3d:07:
fe:df:da:b5:78:28:45:96:54:b8:ee:88:7a:6a:2f:36:77:e7:
84:57:71:0a:9f:93:57:62:61:11:01:a9:cc:9e:3a:e1:8e:eb:
c2:dd:f7:3a:24:48:2b:42:4d:79:c6:96:30:40:50:e8:2d:f9:
6d:a8:13:df:5f:1f:57:5b:d3:66:b3:3e:50:79:1a:6b:a6:5f:
be:6b:b5:ee:d2:2a:c6:3e:ee:51:20:2a:3c:3b:61:83:9a:78:
bb:a4:ab:0e:db:d7:25:7a:a9:19:73:c1:59:04:d1:e6:70:3e:
e2:ff:ef:84:01:81:2d:bc:bc:5a:bb:bf:77:90:cd:1b:15:cb:
2d:9d:55:e6:45:2d:21:9c:04:36:be:38:f3:3c:87:e3:de:b4:
7f:0e:3a:11
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgsxMc+EvBIqG14N6avy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmQ4ZDlmZmZhODk3MGU2OTA1ZjY2ZmFiMDYyNmU1N2U3ZDQ2YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLOFW5wyCa5+luuMfxN+2IZT6hFd
kFCV6DEVwVbsFt3/muXGvmPVCaWi7OXqXSl0A/HzFvLzd/Wd3YU+sOlkAObOZ5pz
ZOSp05QVx6a6Ze1aVy1hTzj0HVBi7yRft1axr4dS+DMA5CE0L0P72oAQuzCqX3bH
+yPaHenyGAwJYANel3E2EPnO57JzLMLvjQ0rE5m5GDlZV7bdYX8XcPOYMb/VmWXl
W/rtiEfE4eRRzQOR8VLDbe08hczp80Wt2BB7xxcOc1+8V8zhK7LVDN2fR9Y6EUMF
U75fbpXSXyUkefxIeRo3ruSJbrFdOZcAMxVB1BvbmriNHlWZAoZwdi7kOwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFD/Y2f/6iXDmkF9m+rBiblfn1GtUMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvUDlqWl9fcUpjT2FRWDJiNnNHSnVWLWZVYTFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAgNL/u7CsrGsGHjEA1/Sj3NHnn0NOgz0U
th4K19OFbfzCxJHHn8kX0GVtcc+tBUruQYTgK9LjryrKDIToshczwuGzT6cwR+/w
lxEzKHQebEWIWwKNX/++ZyllhjA1p2y9G59LVJSpQ6+NwD0H/t/atXgoRZZUuO6I
emovNnfnhFdxCp+TV2JhEQGpzJ464Y7rwt33OiRIK0JNecaWMEBQ6C35bagT318f
V1vTZrM+UHkaa6Zfvmu17tIqxj7uUSAqPDthg5p4u6SrDtvXJXqpGXPBWQTR5nA+
4v/vhAGBLby8Wru/d5DNGxXLLZ1V5kUtIZwENr448zyH4960fw46EQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:46 2026 by rpki-client