Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cFmZMUJl6aIB5sHSnz3oZnAGAS8.roa
File: cFmZMUJl6aIB5sHSnz3oZnAGAS8.roa (raw, json)
Hash identifier: 9NU6kwY/0fWN0hb+i4y4RTMB8O6WH6h51IcMZRPboGQ=
Subject key identifier: 70:59:99:31:42:65:E9:A2:01:E6:C1:D2:9F:3D:E8:66:70:06:01:2F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D536D55F5B722E1BBDD63DE9AA1B
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cFmZMUJl6aIB5sHSnz3oZnAGAS8.roa
Signing time: Thu 26 Mar 2026 14:18:30 +0000
ROA not before: Thu 26 Mar 2026 14:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396612
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d5:36:d5:5f:5b:72:2e:1b:bd:d6:3d:e9:aa:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=705999314265e9a201e6c1d29f3de8667006012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:98:4e:a1:bb:bf:d0:0b:4a:c6:f6:64:a8:
f0:c1:0b:ce:ec:17:a4:e4:ba:fa:15:5f:c6:ea:dc:
1d:65:b7:6a:90:9d:d6:6e:a8:33:eb:4b:94:d4:38:
26:d8:e0:ff:1f:82:5e:cc:e7:8f:6f:e6:ae:b3:6b:
b9:b5:57:2c:a4:ea:97:13:a7:7a:fb:8e:6e:60:35:
cf:ac:87:98:ed:4c:b1:7b:c2:4a:d3:92:bb:a0:e6:
3a:61:2f:da:53:b4:06:5d:ec:18:a8:78:ac:70:5d:
39:95:44:47:8a:d0:51:48:a0:cf:c1:54:03:3c:56:
1d:df:51:16:83:a3:43:e7:f5:16:0a:85:16:8e:28:
b9:21:c1:38:db:f3:3f:c2:39:c8:f0:ba:b9:d3:7a:
1c:86:44:ea:92:44:56:9a:a0:f6:a5:3d:47:4e:5d:
5a:92:11:40:22:5d:3b:67:99:9b:e6:79:7a:81:b4:
82:b1:37:b7:96:99:23:38:1f:b8:cb:ad:df:0b:2e:
dc:c0:fd:6b:2e:f5:31:23:7e:95:f9:85:da:d6:da:
6c:56:c4:93:7a:60:4a:6e:66:8e:9f:dc:c6:25:ae:
73:a9:59:9d:18:a4:cf:a4:28:4d:ff:f9:04:c8:ba:
e4:5d:ce:04:36:40:a8:9a:27:da:6e:35:6d:9f:97:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:99:31:42:65:E9:A2:01:E6:C1:D2:9F:3D:E8:66:70:06:01:2F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cFmZMUJl6aIB5sHSnz3oZnAGAS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ba:30:1b:cb:96:c9:16:39:85:76:b3:45:5d:89:3c:0b:1e:
dc:83:38:b7:07:df:11:1e:74:16:02:b8:a4:e2:67:d2:a1:49:
93:2f:47:f1:85:13:07:d2:73:c0:a3:84:1b:21:a0:c8:cf:22:
da:a4:3c:64:54:d0:bc:9e:10:20:bf:36:96:9c:fc:4c:18:a8:
6b:d8:3a:b9:62:2f:52:d2:a3:96:00:2e:37:21:e7:7f:fc:b1:
32:51:75:5f:a3:09:5f:07:77:5e:6f:5a:6f:5a:89:28:75:fa:
1c:e1:27:fd:50:46:2e:35:da:28:67:fa:5c:df:17:c5:0c:1e:
b1:c3:a8:93:f1:b7:91:94:60:6f:de:68:7b:0e:cb:34:56:14:
2b:21:fe:f3:c4:89:eb:e2:a8:e5:01:5b:e7:55:69:66:0b:36:
6e:f1:f0:45:a1:3b:4a:eb:16:0a:0a:c6:0c:50:bd:dc:d2:96:
31:2e:4e:1c:03:78:2d:bb:29:fd:75:12:16:57:3e:b0:e0:70:
e7:91:d4:82:ea:aa:0c:71:03:9f:2a:00:ec:18:89:4f:5c:b9:
8c:81:bb:58:96:af:53:c1:d4:14:8a:e9:cc:44:07:fe:7e:1a:
6a:31:bf:6c:d9:d4:03:fc:24:90:35:68:cd:68:f5:f7:78:6a:
e7:4a:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:54 2026 by rpki-client