Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YGC4aoeMWdVGNM2tCVMqzW2yupA.roa
File: YGC4aoeMWdVGNM2tCVMqzW2yupA.roa (raw, json)
Hash identifier: oDNRKgtDGXsGW3sJd2gWZilBLL9yqPv8o7IYxCSx9vY=
Subject key identifier: 60:60:B8:6A:87:8C:59:D5:46:34:CD:AD:09:53:2A:CD:6D:B2:BA:90
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82DA70AD87785A9106F5769D3DCB33
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YGC4aoeMWdVGNM2tCVMqzW2yupA.roa
Signing time: Thu 26 Mar 2026 14:18:31 +0000
ROA not before: Thu 26 Mar 2026 14:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397198
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:da:70:ad:87:78:5a:91:06:f5:76:9d:3d:cb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6060b86a878c59d54634cdad09532acd6db2ba90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:44:03:7e:a2:68:ff:57:f1:fc:f0:5d:84:
fe:31:71:48:d8:6f:49:71:e9:05:7e:fc:c3:b9:67:
88:86:c3:e7:b8:e9:d4:fe:40:e3:7b:22:9f:8d:13:
a6:0f:3f:05:f3:89:02:96:93:0d:31:03:2e:4c:88:
a8:31:5b:a4:60:5e:ec:bc:34:95:a5:e9:8d:cd:69:
6f:47:03:c2:26:c3:29:4e:84:80:f9:2b:86:db:a5:
19:60:aa:c4:98:2a:b3:e3:55:16:96:11:1f:e2:b9:
c1:f0:ee:f0:03:10:6c:e2:d0:65:de:de:18:1d:1e:
da:dd:87:4f:2d:f8:a4:a2:eb:f4:40:fc:fd:b3:7a:
f0:62:17:28:53:42:a1:fd:13:28:50:66:03:83:ed:
4b:35:29:ad:1a:69:20:57:21:78:c5:f8:c3:c3:80:
7d:3b:9a:53:9d:28:23:5c:d9:7d:d7:fe:ec:0b:38:
c0:30:7e:f3:f7:d1:75:a2:05:cb:e7:12:7a:36:00:
77:b4:93:99:30:6a:ab:d4:07:02:09:cc:ac:48:2c:
38:1b:01:67:b5:c7:32:38:5e:32:34:f1:1d:31:ff:
71:0f:d6:b8:20:54:9d:b8:e7:72:61:00:45:dc:b4:
66:c5:a2:8a:9b:0f:96:c5:25:e8:de:1b:b8:5f:e9:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:60:B8:6A:87:8C:59:D5:46:34:CD:AD:09:53:2A:CD:6D:B2:BA:90
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YGC4aoeMWdVGNM2tCVMqzW2yupA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
24:af:31:78:d3:f2:a7:9e:bc:33:39:08:98:69:cd:69:b6:2a:
0e:0b:6d:ed:eb:c2:4a:b8:3f:42:46:b9:d9:76:c6:b0:9e:5a:
16:60:58:00:b3:13:03:e3:06:0f:00:f4:70:2c:7a:48:3b:91:
c2:b1:68:91:97:bc:3c:58:ae:b5:10:ce:f6:89:c8:cd:09:17:
99:8d:e1:92:ef:d4:42:68:7e:16:e4:ce:31:9a:8f:db:77:92:
23:84:aa:d5:a3:e7:d1:e1:23:47:40:3a:1c:fa:f4:1d:af:4a:
fd:d6:d4:dc:46:9a:29:75:79:3c:e3:7b:65:46:c8:4a:1b:28:
64:31:3e:aa:50:f6:e9:d8:5c:b2:79:cf:c8:fb:90:9e:3e:04:
ce:72:0e:3d:e9:9e:63:83:c1:ba:b7:e3:2a:45:59:a9:a4:59:
61:1d:30:9a:ca:99:74:0a:90:a1:7a:aa:36:62:ba:24:b0:27:
1b:3e:0e:7c:90:3f:e6:ef:b9:ee:95:e7:57:c9:8b:94:44:a6:
a6:c1:3f:0d:5b:25:35:a2:c1:ce:74:2d:aa:d4:3e:3f:20:b6:
6a:50:32:9d:c1:70:f7:ec:fa:28:e5:c1:aa:be:fe:75:e5:ff:
df:f4:d1:46:33:65:77:a6:76:89:70:2d:6e:00:b5:2c:40:95:
47:bf:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:55 2026 by rpki-client