Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/StohL985w2Y5P3M_BxAzG0zx4nM.roa
File: StohL985w2Y5P3M_BxAzG0zx4nM.roa (raw, json)
Hash identifier: UGsI5riIg2hW6jg3cx1/keskwPISklhHsQ4FRZzEKik=
Subject key identifier: 4A:DA:21:2F:DF:39:C3:66:39:3F:73:3F:07:10:33:1B:4C:F1:E2:73
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C7F82E279D4113A8424FA1585E5C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/StohL985w2Y5P3M_BxAzG0zx4nM.roa
Signing time: Thu 26 Mar 2026 14:18:27 +0000
ROA not before: Thu 26 Mar 2026 14:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396583
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c7:f8:2e:27:9d:41:13:a8:42:4f:a1:58:5e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ada212fdf39c366393f733f0710331b4cf1e273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:a4:13:2d:4b:7b:02:3d:cb:c9:74:74:a1:
b9:0b:d6:64:90:2a:47:0f:fe:6c:a1:f5:22:e7:00:
43:b5:be:45:22:c4:5e:45:1b:ef:49:45:42:f5:de:
21:37:88:ca:ef:6e:f0:d2:6a:87:47:5d:b3:eb:f2:
8e:99:20:c0:cb:69:32:9b:93:61:63:dc:ef:a4:2a:
dc:8b:1b:4d:32:ae:2c:53:d6:f4:c2:fc:c9:f8:ba:
6f:f8:60:be:09:57:65:72:18:c0:f0:28:a6:0d:94:
71:6b:d2:5c:96:4b:8a:90:7e:f4:d2:15:be:03:b1:
4b:66:d2:e9:76:5d:85:b2:c9:f0:10:c3:5a:e3:51:
39:68:78:48:2b:b0:ab:99:72:cc:fe:37:df:03:52:
83:22:04:ed:5c:dd:63:7b:24:5a:40:d4:bf:a4:ba:
5e:78:37:4b:89:42:d2:b6:db:e4:53:fb:15:3a:01:
ca:20:1b:bb:fe:df:c9:14:a2:1f:de:a9:cb:a2:1a:
68:0b:fc:ab:b5:2a:0f:ee:55:5b:6c:ed:bc:3b:c4:
8b:d1:56:f9:ad:ba:b0:07:f4:3d:c7:79:f3:f7:93:
a5:41:04:bf:71:2f:52:fa:49:7a:68:f2:99:ff:1d:
e2:3f:a3:32:ef:ef:43:fe:66:d6:e4:23:57:b8:d4:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:21:2F:DF:39:C3:66:39:3F:73:3F:07:10:33:1B:4C:F1:E2:73
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/StohL985w2Y5P3M_BxAzG0zx4nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:45:56:b2:a2:ba:47:97:e2:ef:6b:d3:d5:6b:68:92:d9:a7:
48:8d:e6:6a:4d:54:d3:0f:1f:55:eb:57:eb:72:a7:58:ba:13:
96:52:83:ac:9d:52:92:a2:6f:07:58:41:8e:da:ec:54:48:0a:
a7:35:f1:06:ce:8f:78:7e:31:a0:a8:7a:52:b8:a7:f1:55:53:
f9:ee:68:fe:8d:3d:4f:08:7c:6c:1b:44:e9:72:d1:7c:52:e9:
f1:01:ea:6c:fe:fa:5e:8a:84:52:e2:38:a1:44:de:0f:3b:d1:
e5:d2:56:67:27:d4:37:f6:78:c9:ae:4f:62:f8:a8:18:72:1a:
0c:dc:94:f2:69:07:48:a0:0f:e4:76:16:16:39:f6:09:61:29:
f8:56:de:12:f4:8c:5d:f1:ff:e8:83:1d:2c:49:16:bb:20:f5:
50:e9:02:42:b6:a6:82:54:c3:eb:e9:ee:b3:46:1e:24:6a:d6:
d3:28:50:a7:ab:13:97:aa:2a:1e:93:db:22:94:89:98:19:2d:
d2:bf:5e:a0:1d:3b:4d:3f:8c:66:16:3b:28:17:5f:41:e1:a0:
42:21:fb:6f:5d:78:54:d9:eb:3d:05:fb:42:fb:d8:b0:ab:e8:
10:46:48:24:52:15:99:51:de:a5:c8:59:3d:91:d7:29:cb:6a:
cc:bd:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:56 2026 by rpki-client