Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/aGtGcYRau1Bmoj9TjRygcGAPajc.roa
File: aGtGcYRau1Bmoj9TjRygcGAPajc.roa (raw, json)
Hash identifier: X/NN+bieXCgwWlJA7IgA0UGgyayuU5w3FCfwJSzF5e8=
Subject key identifier: 68:6B:46:71:84:5A:BB:50:66:A2:3F:53:8D:1C:A0:70:60:0F:6A:37
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B3EA3ABA85351E8570126E1E6D6C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/aGtGcYRau1Bmoj9TjRygcGAPajc.roa
Signing time: Thu 26 Mar 2026 14:18:21 +0000
ROA not before: Thu 26 Mar 2026 14:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36630
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b3:ea:3a:ba:85:35:1e:85:70:12:6e:1e:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=686b4671845abb5066a23f538d1ca070600f6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:07:02:a5:b1:83:5a:96:9e:46:6b:80:f2:
22:63:59:68:27:95:e5:16:d0:6c:f7:32:f6:7c:70:
9b:88:09:fc:22:34:c4:8d:e0:46:41:2d:b9:0d:c6:
b9:0b:df:b8:3d:79:b1:ea:a9:a0:bc:5c:f0:7f:10:
31:e6:b0:b0:de:a3:ce:c0:c7:c5:0b:b8:40:88:ea:
de:f1:23:9c:1d:26:a9:d1:67:3e:02:75:b9:f8:2a:
21:4b:a7:67:88:c9:0a:22:bb:dd:d1:a4:9c:09:63:
a1:91:fc:88:08:1e:46:64:e4:75:f2:82:81:22:b1:
b4:93:bb:39:d2:83:ae:f1:a3:5b:d6:03:80:58:a5:
56:9c:43:2b:2f:5c:38:1c:55:61:ba:70:65:33:a4:
78:99:54:9d:c5:42:28:73:54:59:54:40:08:c1:53:
0d:54:6f:03:11:98:51:03:83:af:0b:b6:da:d1:c6:
a8:e6:bd:b2:53:ce:86:f2:72:3d:88:a6:2d:5e:7b:
0a:d1:2a:c0:f0:41:ad:16:17:0d:7b:9b:2c:ba:72:
af:90:08:76:e5:92:1a:4a:3f:12:95:5d:46:26:bc:
6e:54:7b:86:7d:c8:72:07:43:aa:5b:56:3b:fe:af:
9f:55:0d:b8:09:b8:7e:a8:32:51:75:19:3b:78:a4:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:46:71:84:5A:BB:50:66:A2:3F:53:8D:1C:A0:70:60:0F:6A:37
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/aGtGcYRau1Bmoj9TjRygcGAPajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
10:94:4b:36:e9:21:38:41:03:64:ae:ac:7c:6d:27:e3:ca:fa:
99:82:68:68:1f:37:6d:e8:1d:ba:94:ba:8f:24:2d:0e:4e:bc:
48:9a:45:c2:cf:1a:dc:47:da:34:b8:8e:b8:d8:55:8f:a7:08:
88:f9:01:9b:39:18:95:ab:51:04:74:89:42:64:58:8a:bb:a2:
56:07:41:81:fa:9e:91:2d:f0:84:91:b3:8a:f4:5d:97:64:09:
4b:2c:0b:fa:c2:da:39:ec:48:99:0e:b7:1a:47:4e:12:31:7c:
8c:2e:88:21:23:91:ea:78:0a:82:3d:72:ed:3b:70:d8:0a:84:
0f:97:09:fb:86:fd:60:cf:e9:8b:d8:e2:c8:f6:7e:73:b3:43:
f8:83:b6:6c:bb:19:7a:2c:9d:0a:24:8e:fd:01:05:24:9c:8e:
a2:05:dd:cb:90:6a:f9:9f:18:61:44:f7:01:c8:1e:db:7c:00:
1a:25:49:f5:e2:c2:43:8d:5c:94:bc:56:c0:e9:9c:8e:93:c7:
b2:76:8c:81:40:32:3d:9d:66:b3:b2:71:12:a1:b1:1d:01:b4:
df:81:60:45:f2:5a:d5:84:9d:12:ac:fc:36:db:34:5b:34:13:
7b:3b:e0:27:7d:0f:2a:7e:a3:02:5e:4c:25:32:53:68:e2:3c:
a7:6f:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:51 2026 by rpki-client