Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/abhjbN7_uqeDte_b1_Tx8RaPU7U.roa
File: abhjbN7_uqeDte_b1_Tx8RaPU7U.roa (raw, json)
Hash identifier: wCCyrv51qEWkT7X1C8o/bMhmeOMuqdBQ8x5UMIJumMo=
Subject key identifier: 69:B8:63:6C:DE:FF:BA:A7:83:B5:EF:DB:D7:F4:F1:F1:16:8F:53:B5
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82CF7BCC2FBC919E45336AAAED416C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/abhjbN7_uqeDte_b1_Tx8RaPU7U.roa
Signing time: Thu 26 Mar 2026 14:18:29 +0000
ROA not before: Thu 26 Mar 2026 14:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396596
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:cf:7b:cc:2f:bc:91:9e:45:33:6a:aa:ed:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b8636cdeffbaa783b5efdbd7f4f1f1168f53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:79:45:a2:7c:82:bc:f9:99:74:04:51:a3:
38:85:6f:b4:bd:b0:c1:9c:1c:b8:a2:3c:72:29:1b:
d9:72:a2:04:96:1f:79:18:1b:ca:b6:2c:af:39:74:
ee:2b:ba:6f:1a:93:32:1d:20:70:2f:82:0c:c8:b3:
3c:5a:1b:12:cd:a3:85:eb:5f:5f:6f:83:31:fc:c1:
84:e2:b7:fd:21:ea:5d:9d:45:ee:72:ca:a5:ea:72:
6c:38:57:fa:7d:dc:8c:e6:2b:0c:cd:bf:e1:fe:6a:
56:3d:5a:fa:31:97:64:ad:38:ec:47:85:01:f1:e5:
b7:16:83:2d:c9:cd:65:77:1e:dd:4d:2f:16:3a:ca:
67:92:b1:52:e7:b2:3b:ed:92:8c:04:8d:43:83:43:
16:4c:9d:11:0a:9e:2c:2a:80:e5:14:24:27:6d:27:
fe:e0:1b:88:3c:bf:42:b2:9b:0f:64:ec:66:3d:92:
19:a7:d1:c0:73:b0:a3:86:f1:68:e7:f5:6e:9f:27:
3b:1c:24:6c:bf:d3:ac:e0:23:e0:4f:89:d8:f9:56:
60:24:44:d9:09:e5:56:e1:42:73:d2:1f:57:eb:53:
4f:61:75:cb:98:f8:6b:db:75:25:dd:0e:97:04:4d:
07:4d:f4:6c:1a:5a:12:13:3e:32:7f:e4:ac:b5:6a:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:63:6C:DE:FF:BA:A7:83:B5:EF:DB:D7:F4:F1:F1:16:8F:53:B5
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/abhjbN7_uqeDte_b1_Tx8RaPU7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:89:35:72:6c:ea:25:17:2a:ea:fe:f7:05:71:53:ab:a0:db:
32:03:f2:aa:a9:b3:62:db:06:1b:b7:66:75:67:a3:43:48:be:
02:67:8e:a1:52:4d:0e:ba:92:e2:60:12:1b:51:b6:63:be:8b:
74:e8:f9:89:ce:fe:89:80:1f:b5:61:b0:2a:2a:48:1a:64:97:
24:18:b9:f5:6a:5b:e6:f9:6e:be:73:a6:1e:d9:72:fe:ae:85:
0b:6c:a7:2a:a3:2a:4e:f0:9a:b4:ba:0f:93:4b:c0:8c:38:de:
b0:a7:df:3d:da:ba:82:7a:fd:af:0f:f7:d4:86:8e:19:50:0a:
38:cc:0c:2f:df:45:bc:0d:15:0f:32:cb:7e:9e:01:7c:76:fc:
55:19:3e:75:ae:86:c0:b8:a9:da:bf:ab:e4:83:3a:81:c2:fc:
ce:eb:37:2a:0a:8e:41:37:f6:f1:3d:65:a0:37:be:cb:43:41:
7d:cd:29:01:1f:e1:49:3d:a2:79:22:00:cd:6e:34:41:fb:f9:
c1:06:6c:ff:c7:62:d3:fa:12:67:1a:d8:bf:be:1d:a1:42:71:
7d:ee:71:92:b7:19:27:22:1c:0c:12:42:60:30:cc:fb:b7:4a:
04:79:5e:bc:f1:ab:be:d3:04:cb:ac:6d:b5:fd:80:8a:6c:bf:
2e:b8:0c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:52 2026 by rpki-client