Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z232hqQzuV95s6L5vEErWoNnVuQ.roa
File: Z232hqQzuV95s6L5vEErWoNnVuQ.roa (raw, json)
Hash identifier: ldiIIG0bUz/G5PBMivoCAYAxI7T2iQgA32/e+4tFNtY=
Subject key identifier: 67:6D:F6:86:A4:33:B9:5F:79:B3:A2:F9:BC:41:2B:5A:83:67:56:E4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C641E4A01DA2C33EF946ACDDD2A8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z232hqQzuV95s6L5vEErWoNnVuQ.roa
Signing time: Thu 26 Mar 2026 14:18:26 +0000
ROA not before: Thu 26 Mar 2026 14:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396581
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c6:41:e4:a0:1d:a2:c3:3e:f9:46:ac:dd:d2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=676df686a433b95f79b3a2f9bc412b5a836756e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:cb:bf:cf:99:fa:52:da:3a:74:b4:77:87:
2f:13:e0:61:08:a1:1b:cf:59:af:dd:7f:77:c3:9f:
2c:a3:bf:8a:ed:41:a1:56:f0:95:91:62:e1:44:d6:
70:bb:42:f1:b6:92:47:b4:ec:ae:19:e3:f0:e9:99:
57:4c:37:e0:af:b6:8c:af:72:cc:fe:8c:9d:06:c0:
92:80:a9:19:dd:f5:34:b0:22:09:e5:5e:89:e8:97:
db:fc:ae:65:2d:fc:4d:3a:9c:b2:c3:77:4b:19:68:
16:78:61:71:72:b2:7b:52:40:1a:ba:f8:b8:9d:63:
eb:69:fc:b2:f2:98:01:60:bb:80:ca:ed:94:70:54:
b7:85:a0:e6:c3:ce:3b:ce:a6:13:70:32:38:75:5f:
60:2b:22:32:b0:37:f8:a8:3a:1f:52:dd:b8:50:d7:
08:fa:54:b4:22:32:82:d4:9b:12:14:66:96:bd:cf:
00:d1:a0:de:0f:d4:9c:41:fd:e2:db:4a:2a:cb:6f:
df:f5:fe:d4:c2:27:f9:90:01:df:be:18:50:84:f7:
e0:3b:29:72:c7:05:b6:53:4b:26:22:8d:65:b4:95:
4a:b7:8d:aa:3a:b9:79:33:27:fd:98:32:05:d1:e5:
49:0d:6d:60:2d:6a:76:fd:b3:e4:e9:7d:46:1d:b5:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:F6:86:A4:33:B9:5F:79:B3:A2:F9:BC:41:2B:5A:83:67:56:E4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z232hqQzuV95s6L5vEErWoNnVuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3a:2e:61:fe:fe:e0:b0:6b:5d:54:8c:55:29:08:9c:09:d9:
51:a6:a3:cf:f9:e9:2e:f2:e3:f9:bc:8d:cf:86:d3:07:0e:33:
cd:e3:10:fc:81:56:f6:c7:18:9e:67:6e:f8:9f:1d:11:84:26:
a0:ea:88:7f:85:cc:ea:91:93:db:c4:73:11:25:51:ef:a1:16:
97:97:18:ac:b6:ed:b0:93:4c:6f:24:bf:cc:1f:89:d7:55:86:
82:85:29:71:db:61:79:c1:c4:5c:1b:83:df:b4:e4:ae:1c:45:
08:5d:11:f9:dc:ea:7e:1b:bd:09:48:01:3f:45:29:9f:f9:6d:
ed:b1:82:93:e8:2e:b1:d4:e9:21:cb:e2:cd:0f:9f:61:6f:e3:
94:6d:f4:f4:5f:5d:2b:7c:9d:a0:56:d0:4e:f7:06:2b:94:ac:
c7:0a:16:f4:97:5f:14:a4:aa:2f:ef:9c:cc:0a:ae:73:74:0f:
7d:25:5c:1c:ff:6c:64:52:f9:57:53:90:38:82:62:94:ce:51:
09:69:6c:1f:df:2f:58:f8:08:62:53:7a:86:a5:ef:e4:28:c1:
95:9c:85:e3:b5:23:17:dd:33:62:5c:c4:d3:c3:e0:b6:0c:9c:
e4:5d:55:fd:9b:4c:b7:11:35:6e:ae:14:a5:7f:a6:e8:ae:f9:
1f:95:d3:cf
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgsZB5KAdosM++Uas3dKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzZkZjY4NmE0MzNiOTVmNzliM2EyZjliYzQxMmI1YTgzNjc1NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBvLv8+Z+lLaOnS0d4cvE+BhCKEb
z1mv3X93w58so7+K7UGhVvCVkWLhRNZwu0LxtpJHtOyuGePw6ZlXTDfgr7aMr3LM
/oydBsCSgKkZ3fU0sCIJ5V6J6Jfb/K5lLfxNOpyyw3dLGWgWeGFxcrJ7UkAauvi4
nWPrafyy8pgBYLuAyu2UcFS3haDmw847zqYTcDI4dV9gKyIysDf4qDofUt24UNcI
+lS0IjKC1JsSFGaWvc8A0aDeD9ScQf3i20oqy2/f9f7Uwif5kAHfvhhQhPfgOyly
xwW2U0smIo1ltJVKt42qOrl5Myf9mDIF0eVJDW1gLWp2/bPk6X1GHbXMhQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFGdt9oakM7lfebOi+bxBK1qDZ1bkMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWjIzMmhxUXp1Vjk1czZMNXZFRXJXb05uVnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAqzouYf7+4LBrXVSMVSkInAnZUaajz/np
LvLj+byNz4bTBw4zzeMQ/IFW9scYnmdu+J8dEYQmoOqIf4XM6pGT28RzESVR76EW
l5cYrLbtsJNMbyS/zB+J11WGgoUpcdthecHEXBuD37TkrhxFCF0R+dzqfhu9CUgB
P0Upn/lt7bGCk+gusdTpIcvizQ+fYW/jlG309F9dK3ydoFbQTvcGK5SsxwoW9Jdf
FKSqL++czAquc3QPfSVcHP9sZFL5V1OQOIJilM5RCWlsH98vWPgIYlN6hqXv5CjB
lZyF47UjF90zYlzE08Pgtgyc5F1V/ZtMtxE1bq4UpX+m6K75H5XTzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:44 2026 by rpki-client