Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/QWkra8b0WIu4eUTpR1f92uQ_ivk.roa
File: QWkra8b0WIu4eUTpR1f92uQ_ivk.roa (raw, json)
Hash identifier: 8/QQjggyyT6rCrr66Vq5a+mhLuxx85pz/DeVoAAbwHA=
Subject key identifier: 41:69:2B:6B:C6:F4:58:8B:B8:79:44:E9:47:57:FD:DA:E4:3F:8A:F9
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B84C770C9F7D33A3FEF6676E340C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/QWkra8b0WIu4eUTpR1f92uQ_ivk.roa
Signing time: Thu 26 Mar 2026 14:18:23 +0000
ROA not before: Thu 26 Mar 2026 14:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396545
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b8:4c:77:0c:9f:7d:33:a3:fe:f6:67:6e:34:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41692b6bc6f4588bb87944e94757fddae43f8af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:ad:ca:26:58:0c:b6:40:ca:3a:f7:7d:b5:
f0:d2:f9:ad:81:3b:07:9b:e4:67:5b:48:8a:68:57:
a6:31:19:ba:d7:4d:9a:13:04:e1:17:08:38:c0:1f:
e1:be:6e:94:a3:e8:c9:ea:d6:46:81:3d:b6:ad:a3:
48:0a:de:aa:9d:34:cf:bd:8a:07:52:88:22:7a:16:
f1:d2:5e:5f:4f:29:2d:de:15:c0:ff:94:62:8f:f3:
28:dd:b9:8b:c8:a8:a0:5b:ce:7a:6c:48:5b:1e:3a:
62:ef:e7:ed:d3:05:1a:1d:74:c7:a4:fa:32:54:e8:
41:1d:d3:91:10:01:02:72:0c:2b:77:a7:cb:57:19:
14:27:4c:a4:1d:23:74:f5:46:f0:c8:3c:9c:da:ff:
88:10:b8:02:da:5f:31:69:69:7b:b0:c1:03:34:5b:
26:02:25:bc:8a:7c:71:50:eb:7f:a9:3a:81:11:07:
84:20:b6:b1:9c:08:25:2d:77:b5:3a:16:0f:32:b7:
51:50:8c:ea:d0:d5:cc:1d:5e:34:5d:14:b8:03:87:
4f:a4:b5:12:a4:17:d5:6c:a2:06:01:bf:7e:55:e9:
56:52:73:b7:10:35:ae:3d:7d:c9:25:53:03:9e:d6:
6f:ab:3b:46:bc:39:68:e8:77:31:f9:6c:9c:d9:b4:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:2B:6B:C6:F4:58:8B:B8:79:44:E9:47:57:FD:DA:E4:3F:8A:F9
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/QWkra8b0WIu4eUTpR1f92uQ_ivk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:07:8f:68:92:73:8b:50:5c:e3:1e:06:12:80:c0:42:57:0b:
3a:40:a2:e2:5b:3c:27:48:c1:63:ac:12:fb:66:f4:1b:9e:3e:
31:71:ca:b0:aa:8e:4b:b3:99:d9:84:3b:90:a4:1b:0d:cd:26:
0c:0d:ab:0c:90:4b:ab:53:f2:cd:ed:2c:ff:dc:a1:8f:f1:be:
62:72:2a:78:6c:12:9f:0c:30:52:33:bd:f3:4a:fc:81:6b:e6:
e2:95:27:c3:99:21:18:6d:c2:41:fe:21:ec:37:3e:76:73:21:
9f:80:86:ba:5f:fd:0e:f1:0e:1f:90:24:c0:d6:51:eb:40:3b:
d9:b0:db:28:29:90:13:12:2c:02:72:d7:c8:c8:5a:3c:32:09:
a2:3f:33:c0:12:b5:e5:31:b9:4a:a0:64:68:89:25:43:fc:c2:
ad:32:c7:59:49:fd:ec:74:86:14:2f:2c:b1:9c:0d:a9:5d:93:
37:d8:5e:6f:a2:09:c9:a3:4b:fb:3a:29:fa:4a:5d:2d:22:3c:
9e:52:f1:46:6f:73:e6:dd:73:77:45:db:2a:9c:23:1b:17:72:
ff:27:84:d3:a6:a9:60:7f:6a:0e:37:52:c3:f4:fc:ff:c7:2b:
87:5f:cd:de:0a:b8:45:e1:50:c2:a5:d3:fd:d6:da:12:b5:6e:
2c:a7:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:58 2026 by rpki-client