Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fH_64Fjtlh4BhqQLgxxRbZevtZM.roa
File: fH_64Fjtlh4BhqQLgxxRbZevtZM.roa (raw, json)
Hash identifier: sQs5pODS0qs9UbXwhqZJKREWYHKGR/oWOMQqg/fbr+c=
Subject key identifier: 7C:7F:FA:E0:58:ED:96:1E:01:86:A4:0B:83:1C:51:6D:97:AF:B5:93
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82E1196C2F7B33476832C01F7DEFA3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fH_64Fjtlh4BhqQLgxxRbZevtZM.roa
Signing time: Thu 26 Mar 2026 14:18:33 +0000
ROA not before: Thu 26 Mar 2026 14:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397211
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:e1:19:6c:2f:7b:33:47:68:32:c0:1f:7d:ef:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c7ffae058ed961e0186a40b831c516d97afb593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:4b:38:24:1d:77:df:5d:50:fd:dd:9b:3e:
b6:c9:1a:d3:99:96:87:12:d8:7d:2b:b6:a6:db:db:
a3:51:58:e5:c3:f3:cb:c7:33:a0:a6:7d:5b:a1:34:
bd:fa:74:59:bc:a9:11:e7:6d:24:3e:07:ef:6d:0f:
3d:6b:48:19:4c:3f:77:77:f2:21:18:25:1c:90:86:
5c:ef:c9:76:48:c3:62:c7:13:bc:6d:14:4e:c7:42:
20:ae:ba:c4:b6:61:37:08:72:0f:e9:7a:91:06:84:
18:1d:38:8e:66:69:6a:1c:e6:a1:01:02:39:f6:c8:
cf:76:71:d5:ed:22:55:d7:7e:e6:26:63:55:39:3e:
a5:ec:d5:79:8e:a3:35:e2:0e:fd:24:c3:6b:d5:7a:
4f:04:de:a7:94:43:c2:bb:0d:4a:40:8b:2e:e6:97:
bc:99:3e:4e:cc:d5:03:22:0a:9e:46:48:43:dd:5b:
9a:d7:7d:1b:8e:b0:26:cd:94:49:44:01:60:45:91:
55:f6:a9:85:c7:40:9a:2a:dd:b9:e4:77:97:73:a6:
61:4c:5a:bd:cb:b9:3f:4c:1e:80:9b:2b:da:d1:9f:
d1:1b:ed:d5:96:33:ee:9d:72:cc:a7:dd:ec:e6:59:
b2:fc:5f:99:07:83:a4:df:ad:94:90:69:9f:cb:f2:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:FA:E0:58:ED:96:1E:01:86:A4:0B:83:1C:51:6D:97:AF:B5:93
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fH_64Fjtlh4BhqQLgxxRbZevtZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2a:60:98:83:2a:d4:86:30:10:28:07:ca:0e:01:51:9d:78:
7a:77:b9:33:2b:53:50:ab:34:7a:6b:eb:3b:88:34:42:85:94:
e3:b4:85:a3:7c:ec:48:aa:64:42:f3:c4:83:5c:b1:48:9a:ad:
06:20:12:2a:02:45:3e:e3:1a:35:21:c2:70:bf:c4:2d:95:62:
83:e9:32:be:a5:7d:ea:eb:90:08:9a:7f:d5:4e:af:64:13:97:
4b:ff:8a:bc:bb:a0:0e:c8:c9:5e:7e:32:f9:0f:f7:2d:de:13:
45:54:ac:9c:09:cb:72:23:bb:1e:0f:da:53:b1:c6:e2:52:59:
ed:d9:b3:6a:31:b4:09:7d:9c:66:d2:cc:eb:e3:7c:e6:9e:29:
ea:b3:b8:0b:49:1d:64:5f:66:63:13:ba:e8:3c:09:57:42:e4:
67:76:29:38:e3:21:ab:98:f0:15:1e:7a:29:45:ea:72:aa:ae:
72:fd:2b:5b:b8:c0:79:76:9e:8e:60:c9:27:9b:23:b0:10:d0:
f3:b8:e5:b7:69:00:38:69:0f:bb:e5:65:1b:85:c2:e1:ea:1b:
9a:07:82:e3:4d:62:93:94:22:6b:76:3c:c3:53:4f:d5:17:29:
cc:ce:82:9a:52:dd:81:e5:96:68:34:6a:74:91:85:35:a5:d4:
7f:87:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:51 2026 by rpki-client