Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z6i59xz1TaniX_FlpLf_iAq5SJE.roa
File: Z6i59xz1TaniX_FlpLf_iAq5SJE.roa (raw, json)
Hash identifier: pXVFzgfFzoLHsmE2EKgPclg/0JQzQSDk6e6OSI5MAlA=
Subject key identifier: 67:A8:B9:F7:1C:F5:4D:A9:E2:5F:F1:65:A4:B7:FF:88:0A:B9:48:91
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82DC2A395F2186FC020109D3BB1045
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z6i59xz1TaniX_FlpLf_iAq5SJE.roa
Signing time: Thu 26 Mar 2026 14:18:32 +0000
ROA not before: Thu 26 Mar 2026 14:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397202
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:dc:2a:39:5f:21:86:fc:02:01:09:d3:bb:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67a8b9f71cf54da9e25ff165a4b7ff880ab94891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:df:57:1f:73:e0:ea:51:df:80:c2:31:ab:
ec:48:28:40:ce:18:b0:8c:e4:4d:85:c6:fb:36:ad:
5a:e8:5f:85:3d:a4:1f:07:9e:2a:6e:21:3a:09:fc:
37:49:91:da:32:a8:d0:54:8a:4d:08:37:e0:6e:34:
14:b1:6a:fe:97:1e:75:04:57:6a:d6:2d:3a:d3:f0:
0e:21:21:fb:ea:b2:78:a9:5d:3f:46:3f:f9:37:13:
fc:91:de:b7:7c:ea:2b:26:f3:bf:7f:90:1b:ac:86:
a6:36:9a:59:c0:20:46:df:88:5c:15:bb:de:76:82:
98:f6:a5:f9:6d:bc:80:ca:9a:40:e7:bc:29:f7:98:
ed:14:db:f5:b4:b4:0d:84:6b:20:46:7f:3a:fb:5b:
e0:4f:a1:30:ba:1e:58:ff:e6:67:8b:71:58:b8:2e:
6c:03:ad:55:9e:c4:52:ef:2a:8c:8f:39:d0:b3:b4:
75:39:41:40:3a:cd:f7:60:1b:3d:2a:14:4a:bf:f3:
0e:6d:c1:10:23:84:14:68:5a:69:e9:e5:9f:36:3b:
45:15:86:9d:2c:24:1a:ec:e5:aa:be:36:0c:0d:29:
88:94:ee:10:d4:8e:b9:36:b5:73:0e:b9:6f:68:c3:
45:40:03:a9:bc:99:66:54:8f:a4:1f:81:f4:a7:94:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:B9:F7:1C:F5:4D:A9:E2:5F:F1:65:A4:B7:FF:88:0A:B9:48:91
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Z6i59xz1TaniX_FlpLf_iAq5SJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e2:7b:5d:76:9a:ae:b2:41:ce:34:7c:a1:3c:9d:04:04:c7:
b4:1d:4a:1b:0c:fe:a4:ed:b3:b5:b8:ce:ee:fb:ab:27:8b:80:
3b:9d:7e:4a:ec:10:27:ac:19:2d:05:33:1c:c3:ae:bb:53:6c:
fc:59:49:0b:0c:eb:26:03:c9:8a:ee:a1:f0:68:20:9c:75:88:
79:d8:a1:27:8b:ce:e6:89:a4:cb:36:2b:f1:f5:3e:32:86:6d:
f5:7a:68:28:25:e8:20:9f:0f:0f:93:ee:f5:a1:ad:75:62:96:
87:a7:d7:ba:24:54:2c:b9:83:2f:af:7e:be:d1:16:58:ba:0d:
0a:28:61:7c:88:c1:04:f0:91:cc:61:24:f6:b7:11:7b:17:af:
5c:78:d1:18:e2:04:e6:55:6d:09:b6:53:5f:d7:ad:ed:98:39:
f4:07:f1:a4:56:03:99:07:38:8f:ee:8b:3d:b5:85:f8:6b:46:
1c:fc:fc:57:63:49:db:e3:d0:90:ca:14:d8:ed:08:5c:59:df:
f4:3d:35:2c:47:25:32:40:eb:60:d3:88:12:01:91:3a:68:00:
01:a2:85:a7:5d:34:a1:77:9a:db:ff:02:78:c8:82:7d:cb:33:
a8:a6:90:89:cc:e5:0b:34:d2:5e:c4:e1:11:c5:f6:de:0e:a8:
8e:9e:01:c8
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgtwqOV8hhvwCAQnTuxBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2E4YjlmNzFjZjU0ZGE5ZTI1ZmYxNjVhNGI3ZmY4ODBhYjk0ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U/fVx9z4OpR34DCMavsSChAzhiw
jORNhcb7Nq1a6F+FPaQfB54qbiE6Cfw3SZHaMqjQVIpNCDfgbjQUsWr+lx51BFdq
1i060/AOISH76rJ4qV0/Rj/5NxP8kd63fOorJvO/f5AbrIamNppZwCBG34hcFbve
doKY9qX5bbyAyppA57wp95jtFNv1tLQNhGsgRn86+1vgT6Ewuh5Y/+Zni3FYuC5s
A61VnsRS7yqMjznQs7R1OUFAOs33YBs9KhRKv/MObcEQI4QUaFpp6eWfNjtFFYad
LCQa7OWqvjYMDSmIlO4Q1I65NrVzDrlvaMNFQAOpvJlmVI+kH4H0p5QPMwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFGeoufcc9U2p4l/xZaS3/4gKuUiRMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWjZpNTl4ejFUYW5pWF9GbHBMZl9pQXE1U0pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAROJ7XXaarrJBzjR8oTydBATHtB1KGwz+
pO2ztbjO7vurJ4uAO51+SuwQJ6wZLQUzHMOuu1Ns/FlJCwzrJgPJiu6h8GggnHWI
edihJ4vO5omkyzYr8fU+MoZt9XpoKCXoIJ8PD5Pu9aGtdWKWh6fXuiRULLmDL69+
vtEWWLoNCihhfIjBBPCRzGEk9rcRexevXHjRGOIE5lVtCbZTX9et7Zg59AfxpFYD
mQc4j+6LPbWF+GtGHPz8V2NJ2+PQkMoU2O0IXFnf9D01LEclMkDrYNOIEgGROmgA
AaKFp100oXea2/8CeMiCfcszqKaQiczlCzTSXsThEcX23g6ojp4ByA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:46 2026 by rpki-client