Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TByX31Daz46niXKAcThKkr5X83A.roa
File: TByX31Daz46niXKAcThKkr5X83A.roa (raw, json)
Hash identifier: f7kmdf1/bgubyczi5IuwQ+P1zdOY80Q341cyfTsZ8cM=
Subject key identifier: 4C:1C:97:DF:50:DA:CF:8E:A7:89:72:80:71:38:4A:92:BE:57:F3:70
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82E1730BB6A1F727042438C08F7DA4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TByX31Daz46niXKAcThKkr5X83A.roa
Signing time: Thu 26 Mar 2026 14:18:33 +0000
ROA not before: Thu 26 Mar 2026 14:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397212
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:e1:73:0b:b6:a1:f7:27:04:24:38:c0:8f:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c1c97df50dacf8ea789728071384a92be57f370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:b2:40:a7:02:aa:29:3f:ed:f4:5d:ea:33:
d3:f6:ae:e5:04:10:af:7d:9a:ef:58:c3:83:62:df:
01:d2:13:b8:ba:54:16:87:92:f4:62:c6:e5:7e:90:
0d:8c:fa:4e:f3:b0:dd:23:e9:79:05:20:f5:6a:78:
43:e1:cb:ee:de:c7:25:ad:e6:32:2f:b0:a5:3b:7e:
8c:c9:70:b0:44:65:65:6d:b3:1c:fe:75:ee:2f:5e:
46:1a:b8:63:68:97:d3:b3:70:e9:62:79:e5:6c:6e:
74:a9:91:84:61:f0:0c:12:63:79:aa:f2:0e:ac:2c:
87:aa:f8:1c:1c:36:1d:f1:85:ab:cf:8e:86:6a:97:
96:6e:7d:80:1b:88:56:57:f7:59:3f:7e:d3:3b:19:
24:06:ce:e0:46:84:13:0f:1f:e3:c8:38:c1:5d:6e:
f1:58:6a:ab:17:44:d4:64:31:d8:51:7e:2f:1c:77:
74:4d:75:7b:5a:ae:21:1a:de:61:c7:f8:c5:fc:5d:
b1:d3:de:c1:80:6e:eb:9f:10:dc:a4:8b:e3:e1:66:
92:93:84:c0:57:d9:b2:57:c8:7e:b2:64:a5:25:89:
1f:3b:4e:07:e2:aa:0a:5c:bb:4d:73:cb:df:5f:c2:
1b:80:76:b0:ad:43:32:6f:14:55:8a:e3:3e:1d:fb:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:97:DF:50:DA:CF:8E:A7:89:72:80:71:38:4A:92:BE:57:F3:70
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TByX31Daz46niXKAcThKkr5X83A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1e:40:88:38:90:60:53:87:9e:3c:74:2f:c4:36:d6:95:ce:
5a:5e:9b:c1:23:63:90:58:a4:9c:ef:0a:eb:53:9d:79:10:ab:
13:44:99:f2:2d:54:d1:8f:b4:ad:a5:e3:29:c2:e7:7d:c2:fb:
54:a6:b7:6d:f4:f5:68:c4:aa:9a:b3:16:f7:0f:0f:ae:9f:6d:
8c:0c:6d:28:81:87:e3:ac:01:c0:8c:5d:bc:ea:50:19:16:d1:
a4:48:7f:ea:56:25:81:ff:23:5d:62:b0:e8:58:67:e2:f3:a7:
64:ed:22:d9:aa:42:e7:36:cd:e2:c4:73:aa:65:45:3d:55:8a:
eb:8f:36:85:49:78:6e:38:85:7b:b4:36:92:d2:5e:69:36:7b:
a6:db:f4:8a:3f:f6:fe:6e:5d:64:6d:60:11:04:7e:f9:b0:e2:
41:8b:b6:b7:35:6c:f6:79:23:cf:66:55:ac:3a:44:fa:77:df:
4e:96:17:64:41:41:b2:03:bf:f5:94:19:28:26:9c:e2:d9:21:
2c:12:79:dc:03:26:d8:cd:80:88:11:63:45:a4:50:f7:49:42:
d0:43:1a:d3:29:9c:37:fd:af:d2:84:bb:d4:7f:62:09:cc:64:
e4:cf:95:4c:a6:b5:2f:a8:14:33:e5:bd:41:34:03:36:ce:ad:
7a:32:c1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:44 2026 by rpki-client