Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cWdHH5AqiCGzDUP_lIbGv0-YZMw.roa
File: cWdHH5AqiCGzDUP_lIbGv0-YZMw.roa (raw, json)
Hash identifier: Erh6L+DvptiCWtnuh5bPfJmPSgREdNZK5rcuqkib5m0=
Subject key identifier: 71:67:47:1F:90:2A:88:21:B3:0D:43:FF:94:86:C6:BF:4F:98:64:CC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C0121F654A101885D402EC59B1EC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cWdHH5AqiCGzDUP_lIbGv0-YZMw.roa
Signing time: Thu 26 Mar 2026 14:18:25 +0000
ROA not before: Thu 26 Mar 2026 14:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396563
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c0:12:1f:65:4a:10:18:85:d4:02:ec:59:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7167471f902a8821b30d43ff9486c6bf4f9864cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:89:ea:1d:a1:85:b1:e0:56:9d:23:87:b7:
8a:99:49:88:35:0f:b0:08:f3:f4:6e:28:c6:13:52:
29:9a:25:30:e4:08:e9:f8:96:97:63:57:a1:2b:14:
b7:bb:90:57:e1:fb:4c:84:a9:b5:73:12:01:6a:fe:
42:2e:21:3f:a5:23:3a:ba:df:0c:95:13:23:86:cd:
87:b0:8e:ec:70:d8:af:b2:9f:77:b0:e0:fc:cb:b0:
f3:57:df:c3:e9:9a:62:d6:1c:9c:8d:f0:67:0e:9f:
83:ab:83:c9:ab:0b:d3:29:f2:e2:44:43:63:fa:46:
41:13:f0:e3:f7:79:12:14:a1:7b:7a:e9:7c:5a:bf:
67:ed:bc:1a:a8:6e:10:18:f3:d3:78:b6:48:31:68:
3b:70:ae:b2:aa:85:29:af:47:85:01:f9:0a:33:30:
bf:45:47:50:02:aa:e1:5a:f9:ee:b0:54:9d:eb:c0:
6d:1a:3c:e5:b8:20:26:40:e0:8b:02:70:17:21:a8:
e7:30:6c:80:a9:99:1f:70:3f:6f:8d:69:b7:c3:4f:
41:e5:14:cd:75:c6:29:cb:40:c0:d3:24:55:ef:c9:
06:e0:4c:e0:13:bf:57:f7:32:9f:dc:a5:d8:7c:2b:
e9:24:2d:a3:77:e5:74:de:b9:67:37:91:38:1f:e8:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:67:47:1F:90:2A:88:21:B3:0D:43:FF:94:86:C6:BF:4F:98:64:CC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cWdHH5AqiCGzDUP_lIbGv0-YZMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e3:54:0e:40:ff:67:0b:ff:9d:4b:7a:75:7e:be:f2:b8:3a:
d6:42:dc:06:9f:7f:42:65:27:c4:0a:67:64:63:97:9e:3c:b5:
8a:47:e6:c1:5c:2e:73:e1:f8:d6:ed:3a:40:74:86:1e:e5:45:
03:e3:c1:c7:bb:a3:38:1b:fc:ff:ed:88:70:15:0c:42:17:c9:
56:b1:49:7f:3d:ed:38:a7:04:68:c2:86:ac:1b:31:a6:e7:dc:
76:91:5e:58:80:19:91:5b:2f:b1:d6:ec:43:07:6c:90:ef:bc:
9e:fc:e6:57:03:6a:60:53:50:e1:c4:f0:56:fe:82:e2:38:51:
ee:d2:04:a5:cb:fa:03:70:a1:44:75:6b:9d:0d:5b:86:26:37:
98:e3:31:1b:76:ea:de:f3:d0:37:98:68:21:ed:d8:72:af:86:
c2:be:a0:db:eb:5c:fa:0d:60:22:f1:c3:00:9f:7e:89:f3:2a:
8a:85:f1:b7:75:25:a0:32:e9:77:c5:89:84:fc:c6:7f:8b:f0:
98:2a:cb:9a:9f:09:ef:bb:d6:b0:63:3e:91:89:69:12:c3:27:
bd:c2:cc:91:18:50:03:2e:a6:f4:d0:75:18:fa:63:70:13:79:
71:25:e8:65:83:8d:54:3a:3d:af:ab:cd:ba:0e:c5:aa:28:d0:
ee:10:7d:91
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgsASH2VKEBiF1ALsWbHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTY3NDcxZjkwMmE4ODIxYjMwZDQzZmY5NDg2YzZiZjRmOTg2NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N+J6h2hhbHgVp0jh7eKmUmINQ+w
CPP0bijGE1IpmiUw5Ajp+JaXY1ehKxS3u5BX4ftMhKm1cxIBav5CLiE/pSM6ut8M
lRMjhs2HsI7scNivsp93sOD8y7DzV9/D6Zpi1hycjfBnDp+Dq4PJqwvTKfLiRENj
+kZBE/Dj93kSFKF7eul8Wr9n7bwaqG4QGPPTeLZIMWg7cK6yqoUpr0eFAfkKMzC/
RUdQAqrhWvnusFSd68BtGjzluCAmQOCLAnAXIajnMGyAqZkfcD9vjWm3w09B5RTN
dcYpy0DA0yRV78kG4EzgE79X9zKf3KXYfCvpJC2jd+V03rlnN5E4H+jZiQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFHFnRx+QKoghsw1D/5SGxr9PmGTMMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvY1dkSEg1QXFpQ0d6RFVQX2xJYkd2MC1ZWk13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAcONUDkD/Zwv/nUt6dX6+8rg61kLcBp9/
QmUnxApnZGOXnjy1ikfmwVwuc+H41u06QHSGHuVFA+PBx7ujOBv8/+2IcBUMQhfJ
VrFJfz3tOKcEaMKGrBsxpufcdpFeWIAZkVsvsdbsQwdskO+8nvzmVwNqYFNQ4cTw
Vv6C4jhR7tIEpcv6A3ChRHVrnQ1bhiY3mOMxG3bq3vPQN5hoIe3Ycq+Gwr6g2+tc
+g1gIvHDAJ9+ifMqioXxt3UloDLpd8WJhPzGf4vwmCrLmp8J77vWsGM+kYlpEsMn
vcLMkRhQAy6m9NB1GPpjcBN5cSXoZYONVDo9r6vNug7FqijQ7hB9kQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:50 2026 by rpki-client