Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_bFP_oWsQ3VEj3UBwCP6Op48J-8.roa
File: _bFP_oWsQ3VEj3UBwCP6Op48J-8.roa (raw, json)
Hash identifier: 5/wpJYtB80wbbDf/EaDzcwPkAeuXns9lZHMpTO2D9aU=
Subject key identifier: FD:B1:4F:FE:85:AC:43:75:44:8F:75:01:C0:23:FA:3A:9E:3C:27:EF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82AA11B796E3B389C7CFB4FB4CAEF4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_bFP_oWsQ3VEj3UBwCP6Op48J-8.roa
Signing time: Thu 26 Mar 2026 14:18:19 +0000
ROA not before: Thu 26 Mar 2026 14:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21313
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:aa:11:b7:96:e3:b3:89:c7:cf:b4:fb:4c:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdb14ffe85ac4375448f7501c023fa3a9e3c27ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:90:6a:d7:da:a8:7f:a8:f5:27:5e:f7:70:
be:07:20:99:fc:d1:2e:06:50:80:03:e2:08:07:66:
7e:fe:6a:d9:0b:2e:b7:63:56:5e:74:75:82:fb:51:
92:67:58:ea:ef:96:53:2c:82:18:13:1e:7f:1c:44:
da:3e:1a:ca:f9:42:dc:19:48:02:c0:7c:d7:75:d0:
30:d0:01:14:5e:1f:08:c1:4a:8f:1b:00:ef:aa:a9:
bc:24:16:38:7b:35:00:0f:32:69:e8:36:9a:91:4c:
0a:ff:1e:60:5b:c0:ba:5c:87:f7:7e:3f:46:f5:3d:
66:8a:41:eb:8c:34:c2:12:d2:2b:bf:ea:a1:b0:a1:
8b:0a:28:82:2f:28:d4:00:68:10:c1:cf:09:ee:8c:
03:8d:aa:86:a3:62:11:cd:04:c3:8f:fc:ee:5b:a9:
e9:ec:a7:17:05:a2:76:7c:d7:09:dd:61:47:c8:d2:
11:db:6b:89:e9:ca:38:71:37:b8:83:17:a9:85:2f:
0b:c1:45:11:0d:eb:7b:6f:80:5d:cd:23:ea:be:8c:
42:f4:57:ea:fb:aa:00:35:8d:95:93:c8:2f:9a:0b:
8c:57:fb:3e:51:fe:2a:6b:c0:6c:0b:f6:0a:ef:28:
9a:24:ad:a4:9a:81:c3:8d:d8:f9:ba:1f:7e:a5:f3:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B1:4F:FE:85:AC:43:75:44:8F:75:01:C0:23:FA:3A:9E:3C:27:EF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_bFP_oWsQ3VEj3UBwCP6Op48J-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
13:76:11:5b:f7:53:a2:dc:4b:b4:13:a3:3e:e3:ba:6c:8e:25:
60:4b:6c:6f:00:bb:36:de:16:ac:50:b5:91:39:e7:3a:58:1a:
59:6a:ac:38:f0:b0:30:a3:a2:54:f7:c9:b8:5a:de:36:d5:20:
70:e7:3b:54:0f:11:85:32:3c:2b:ab:25:9c:c4:c6:16:ec:b7:
ec:6f:98:a9:c3:72:0b:ab:2d:f0:de:3c:87:c8:ec:4a:d5:b3:
5f:9f:a6:ff:ea:8d:07:3d:a0:de:23:f9:59:ea:a3:8f:93:8b:
be:2d:f7:67:3c:53:30:77:f9:2c:c7:85:df:b2:a5:ed:24:16:
b8:47:4a:f8:34:8a:2c:7b:d6:97:89:6e:55:f7:d0:4c:42:fe:
fc:6f:52:fe:34:65:b1:5b:9e:9e:93:fd:5d:36:b3:4e:eb:bd:
05:c8:f8:a4:8d:eb:ad:ae:ea:4c:a5:af:fc:30:0d:57:05:ea:
b3:ee:41:b6:16:f0:3e:d0:4f:16:fe:a0:fe:5b:f7:de:b3:1e:
c7:3c:6d:8f:41:30:c5:cc:fc:2a:ff:a9:22:c7:d6:57:88:b1:
bf:a9:59:0e:1b:0e:8c:70:4d:4a:6a:7e:df:5d:11:eb:b1:67:
a0:20:be:0a:dc:a6:7f:8b:5b:65:1e:bc:07:3e:d0:e2:8a:1c:
cb:fa:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:57 2026 by rpki-client