Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XvmartKGwd1x0W154sF1cgth4ZI.roa
File: XvmartKGwd1x0W154sF1cgth4ZI.roa (raw, json)
Hash identifier: 4q/V4U1wRJOJNpBdoAcgkfXpqNmW4nTwE383+kVzBVw=
Subject key identifier: 5E:F9:9A:AE:D2:86:C1:DD:71:D1:6D:79:E2:C1:75:72:0B:61:E1:92
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C17231B569DFAD0801BD8D3B53A4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XvmartKGwd1x0W154sF1cgth4ZI.roa
Signing time: Thu 26 Mar 2026 14:18:25 +0000
ROA not before: Thu 26 Mar 2026 14:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396565
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c1:72:31:b5:69:df:ad:08:01:bd:8d:3b:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ef99aaed286c1dd71d16d79e2c175720b61e192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:3a:77:f2:f2:f5:7e:fa:a6:2d:0d:22:18:
5a:a4:33:0d:41:7b:b3:63:f8:23:87:55:52:39:6d:
ba:fe:d6:59:a7:63:bd:60:bc:0c:1e:93:5a:7b:75:
3e:9d:31:3f:59:ca:54:62:33:ea:a9:6d:2f:b0:35:
b9:e6:f4:f2:83:07:de:50:cc:8e:10:fc:9f:4c:c6:
84:e8:7e:01:6d:4e:98:dd:2c:39:a9:94:51:b0:85:
d8:d7:8b:c5:12:01:83:7d:97:71:9e:9f:35:7c:ae:
46:20:80:50:a8:d3:01:e0:9e:59:13:6d:b4:5c:41:
3c:7c:1f:49:d6:91:5c:02:ad:f9:d7:62:7b:19:2b:
88:ac:5c:d9:fb:dc:34:da:ef:cd:aa:db:7a:b5:9c:
aa:77:c1:0e:1e:84:4b:5c:2c:e7:93:6b:bf:7f:a3:
af:3e:88:20:cd:ee:0b:22:19:c8:ce:18:9f:cc:db:
8c:f2:d3:d4:aa:23:01:18:55:ea:1a:92:3a:12:14:
58:b4:a9:a5:f1:64:1b:dd:5b:7b:76:95:e7:f6:9f:
da:59:b8:e7:7a:49:18:aa:7c:b2:8f:e3:13:13:b8:
67:8d:3d:bc:4a:14:ad:99:83:c5:79:2d:51:8a:77:
39:d8:70:17:7e:19:24:76:d1:87:05:70:48:81:88:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:9A:AE:D2:86:C1:DD:71:D1:6D:79:E2:C1:75:72:0B:61:E1:92
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XvmartKGwd1x0W154sF1cgth4ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b3:f1:07:5d:ed:d4:39:df:ae:49:be:c3:5e:6f:25:44:8f:
92:f9:f4:ba:15:52:51:e9:12:34:4a:8f:22:aa:d2:db:44:6e:
e9:95:74:32:c1:c6:5c:ea:d4:44:d2:c4:a0:c6:ac:5d:3b:14:
a5:80:e3:4f:8c:e1:88:c7:13:2a:74:e8:6b:48:2e:72:47:82:
ac:fa:f8:1a:5b:f6:a6:ff:e0:83:f0:5f:18:71:1a:7c:85:de:
0c:00:2d:b5:69:e9:5e:ca:a6:4a:ff:84:4d:49:cb:d8:ea:96:
72:61:3e:62:94:62:8c:c3:ca:d1:20:83:6c:84:a9:d3:7f:24:
62:f3:05:dc:8a:c3:a4:29:d1:78:7a:bf:35:8d:d8:54:39:6d:
86:d7:d2:49:80:d2:e1:2e:62:c0:d7:92:e2:08:b6:84:1e:19:
5b:d9:11:4d:71:56:90:80:b7:50:65:34:a9:87:0a:46:7e:24:
c1:17:01:6b:c2:fa:66:0a:fc:fe:6a:36:13:ed:17:ff:50:d4:
4c:87:eb:83:bd:62:47:62:90:b3:37:83:5d:cf:63:36:07:fe:
5f:4b:d8:51:1c:10:27:c9:46:c4:83:ab:a5:51:81:77:16:57:
e5:e1:d3:ce:32:57:6a:0c:fd:ee:9f:39:10:9b:1b:66:ef:4b:
d6:83:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:50 2026 by rpki-client