Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YuYhBw-Odn71k1GNJ3n9fejmt_s.roa
File: YuYhBw-Odn71k1GNJ3n9fejmt_s.roa (raw, json)
Hash identifier: kJwpxTSwH0F8IyaXfK7mtbZgjNUh9d3i1NKPFFvqUII=
Subject key identifier: 62:E6:21:07:0F:8E:76:7E:F5:93:51:8D:27:79:FD:7D:E8:E6:B7:FB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B1BDD2B400EA0F623D6074183D77
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YuYhBw-Odn71k1GNJ3n9fejmt_s.roa
Signing time: Thu 26 Mar 2026 14:18:21 +0000
ROA not before: Thu 26 Mar 2026 14:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36625
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b1:bd:d2:b4:00:ea:0f:62:3d:60:74:18:3d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62e621070f8e767ef593518d2779fd7de8e6b7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:8a:55:a3:2b:d4:43:e3:0c:94:97:16:66:
26:e7:e8:07:86:9f:12:f9:e5:40:24:b3:b9:1a:06:
35:20:d5:fc:52:52:bf:d9:fd:fc:0d:a4:5a:36:48:
c2:e0:b6:c2:95:5d:1a:de:5a:fb:f7:1d:63:a3:b3:
3a:d6:08:24:52:87:b7:be:42:34:49:f2:9e:7c:d4:
cd:67:80:7d:33:b0:e5:be:37:fa:19:70:ba:dc:e2:
0d:c5:43:2d:cf:87:ce:db:86:4f:bc:8f:16:9b:7b:
7f:5b:09:40:e1:ce:22:b7:c6:23:e2:02:e2:70:10:
83:4d:37:8c:d7:f0:b4:a2:dd:39:2a:b3:95:53:6b:
a3:04:92:0a:01:56:b0:be:c9:9d:0a:29:02:07:f0:
43:fd:ef:9c:32:fb:33:0a:e1:d8:66:04:ea:20:dd:
d4:10:9f:3c:61:09:fd:02:5d:c3:b7:3b:c1:02:7d:
30:6f:48:96:c7:5b:fd:65:1e:b5:fa:de:06:cc:c7:
72:d6:77:0a:86:17:ef:ca:90:60:c1:44:55:b3:60:
5b:6f:70:77:80:72:7e:79:43:e1:18:10:9a:80:b8:
45:f6:7a:b0:93:88:c1:2e:43:d1:26:a9:67:1c:59:
a6:2c:72:5f:aa:c5:9d:51:2f:a3:ab:ba:1e:ef:50:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E6:21:07:0F:8E:76:7E:F5:93:51:8D:27:79:FD:7D:E8:E6:B7:FB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YuYhBw-Odn71k1GNJ3n9fejmt_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
af:dd:1a:4e:49:ec:6c:7a:65:66:4c:10:3d:86:1f:28:f6:53:
64:d5:15:7d:71:57:fd:ae:2d:fb:17:44:5e:b1:e0:f7:9f:e9:
cb:ec:1a:34:88:b0:3a:bc:6c:89:5e:bc:1f:89:13:fd:a3:0d:
9c:79:0a:d9:54:45:55:ed:df:e0:45:21:c2:ba:19:ee:2a:50:
05:f7:bc:b9:cb:f1:34:05:5e:00:61:4b:52:ea:09:fe:51:c3:
f0:38:c9:2f:58:db:1c:0a:35:eb:15:8b:ba:78:f5:46:dd:c8:
15:b9:7a:86:f8:e0:22:b1:47:7f:1b:ff:c8:97:06:89:7c:6d:
53:46:e4:23:32:ea:96:7e:e4:fe:cd:c8:12:72:e3:23:22:58:
8f:96:11:ea:26:98:e1:b5:ba:f3:73:16:10:e2:d3:61:46:70:
e5:37:97:17:c5:a2:51:ab:50:95:5b:37:ad:83:c1:86:bf:b1:
46:26:02:df:71:a3:1c:65:2e:11:d0:b4:c2:e2:97:4d:22:b4:
09:ad:41:8d:c5:fe:55:2f:cf:9b:21:26:c6:72:a1:46:10:02:
1e:e6:bf:9c:15:f4:36:75:41:d7:2e:72:01:59:1d:e1:35:7d:
bd:73:c1:4c:a7:83:26:4b:18:38:7d:68:f2:66:59:93:a6:e4:
59:b8:64:0c
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgrG90rQA6g9iPWB0GD13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmU2MjEwNzBmOGU3NjdlZjU5MzUxOGQyNzc5ZmQ3ZGU4ZTZiN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5eKVaMr1EPjDJSXFmYm5+gHhp8S
+eVAJLO5GgY1INX8UlK/2f38DaRaNkjC4LbClV0a3lr79x1jo7M61ggkUoe3vkI0
SfKefNTNZ4B9M7Dlvjf6GXC63OINxUMtz4fO24ZPvI8Wm3t/WwlA4c4it8Yj4gLi
cBCDTTeM1/C0ot05KrOVU2ujBJIKAVawvsmdCikCB/BD/e+cMvszCuHYZgTqIN3U
EJ88YQn9Al3DtzvBAn0wb0iWx1v9ZR61+t4GzMdy1ncKhhfvypBgwURVs2Bbb3B3
gHJ+eUPhGBCagLhF9nqwk4jBLkPRJqlnHFmmLHJfqsWdUS+jq7oe71DDCQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFGLmIQcPjnZ+9ZNRjSd5/X3o5rf7MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWXVZaEJ3LU9kbjcxazFHTkozbjlmZWptdF9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAr90aTknsbHplZkwQPYYfKPZTZNUVfXFX
/a4t+xdEXrHg95/py+waNIiwOrxsiV68H4kT/aMNnHkK2VRFVe3f4EUhwroZ7ipQ
Bfe8ucvxNAVeAGFLUuoJ/lHD8DjJL1jbHAo16xWLunj1Rt3IFbl6hvjgIrFHfxv/
yJcGiXxtU0bkIzLqln7k/s3IEnLjIyJYj5YR6iaY4bW683MWEOLTYUZw5TeXF8Wi
UatQlVs3rYPBhr+xRiYC33GjHGUuEdC0wuKXTSK0Ca1BjcX+VS/PmyEmxnKhRhAC
Hua/nBX0NnVB1y5yAVkd4TV9vXPBTKeDJksYOH1o8mZZk6bkWbhkDA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:51 2026 by rpki-client