Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SgVu2mQ5y_BXH2DK_Jxj0FcKUEo.roa
File: SgVu2mQ5y_BXH2DK_Jxj0FcKUEo.roa (raw, json)
Hash identifier: 74vJZkgK+RgnhQ6SwFtO0kNsrSj095RU+qwOY7zIH/A=
Subject key identifier: 4A:05:6E:DA:64:39:CB:F0:57:1F:60:CA:FC:9C:63:D0:57:0A:50:4A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B0E827C52F11B5BEC3C1F724F4AD
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SgVu2mQ5y_BXH2DK_Jxj0FcKUEo.roa
Signing time: Thu 26 Mar 2026 14:18:20 +0000
ROA not before: Thu 26 Mar 2026 14:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36623
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b0:e8:27:c5:2f:11:b5:be:c3:c1:f7:24:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a056eda6439cbf0571f60cafc9c63d0570a504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:0f:8f:2f:4b:10:6d:bd:b2:1c:9d:7d:32:
44:66:69:6f:8f:bf:5c:6b:e3:34:f0:6b:c8:9a:69:
db:a7:0d:39:71:08:72:4f:cc:4c:4a:6a:9d:a3:f0:
08:e7:34:b1:76:24:f7:1f:1e:97:8e:76:2b:44:4d:
23:ed:88:45:5a:78:c1:c8:7c:f6:0b:fb:ae:f9:f4:
1b:16:ca:22:59:96:00:3c:60:72:81:ae:92:1f:13:
f0:37:54:86:c7:3f:32:80:f8:a5:a5:cd:45:31:ff:
fb:5c:51:3c:b1:2d:ba:77:54:21:31:3f:10:c5:5b:
c3:ef:29:30:de:db:44:55:89:39:a9:79:0b:3b:d6:
b4:87:33:9b:d2:05:c2:15:b0:10:04:e3:1a:99:ec:
73:d4:13:fe:30:fa:0d:69:b5:de:e4:1a:8d:85:38:
83:0e:a0:45:b4:d6:0d:0b:2f:cf:9f:ac:62:62:0e:
4d:6a:74:23:5e:c1:df:56:8f:57:3c:8b:51:27:50:
2b:40:32:35:bb:48:fe:bb:d5:1e:ae:34:ac:13:af:
02:b0:0f:fd:a2:5b:49:f8:de:4f:a0:28:2b:0a:49:
77:15:b4:92:07:5c:fd:1c:58:0e:7c:00:b3:31:2e:
ba:8c:17:1f:b3:7c:1a:6f:8e:c3:8a:5e:f4:29:3f:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:05:6E:DA:64:39:CB:F0:57:1F:60:CA:FC:9C:63:D0:57:0A:50:4A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SgVu2mQ5y_BXH2DK_Jxj0FcKUEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c1:5f:3e:7e:a6:2e:f3:97:12:c1:75:87:57:61:64:ce:46:
fa:e8:14:e5:b3:43:8d:c0:54:15:e0:d2:73:58:40:1b:bc:34:
e9:b9:a5:02:67:a4:16:1c:0e:6f:12:23:b8:58:36:9a:f7:e9:
fb:1e:3e:04:be:76:5f:b3:68:30:0a:25:1d:6f:ac:76:4e:ea:
f4:f0:cc:bc:01:f2:6a:c5:16:cc:6c:fc:5c:5b:94:48:9b:00:
ac:92:5e:5e:b9:f5:16:53:f4:e0:d9:30:3c:3b:de:5e:16:cb:
5f:56:45:f9:b1:bd:4f:85:f8:ff:17:b0:7a:11:24:fc:10:14:
03:db:10:a7:d4:15:49:24:a9:4c:4a:38:9f:64:d2:82:61:a1:
a9:f7:8d:f9:38:f6:80:d0:d6:88:de:c2:cb:bc:11:71:cf:4d:
e6:2d:e5:c4:68:62:5e:83:f6:94:7e:82:ba:67:4a:2c:e3:9e:
c5:5a:a1:18:56:56:37:27:13:31:a0:2e:64:50:0a:bf:31:a2:
ad:1e:d5:36:c3:35:c6:89:73:bd:50:89:4f:26:f8:d5:f6:eb:
04:f7:99:bd:12:3b:5a:23:ea:bf:35:f6:aa:fa:ed:41:cf:77:
a9:a7:bb:ab:d4:c4:c4:eb:a0:ba:77:c8:37:63:e7:29:97:b8:
d8:c6:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:45 2026 by rpki-client