Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gCVfeULPnRJX1IVj2Gsm9yenpL8.roa
File: gCVfeULPnRJX1IVj2Gsm9yenpL8.roa (raw, json)
Hash identifier: FEqHN5go+b3rAYoh5n8AwoJhHZjufG2LPeRmKcRr9gE=
Subject key identifier: 80:25:5F:79:42:CF:9D:12:57:D4:85:63:D8:6B:26:F7:27:A7:A4:BF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C4ADFE9F521A3B6B840CE323697E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gCVfeULPnRJX1IVj2Gsm9yenpL8.roa
Signing time: Thu 26 Mar 2026 14:18:26 +0000
ROA not before: Thu 26 Mar 2026 14:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396575
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c4:ad:fe:9f:52:1a:3b:6b:84:0c:e3:23:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80255f7942cf9d1257d48563d86b26f727a7a4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:d4:d4:c6:0f:e2:b4:9c:8d:04:5f:ce:2c:
29:aa:6e:41:68:a3:46:11:85:d5:ec:c9:37:43:16:
c4:f0:31:0f:63:c0:85:5a:51:d7:c1:d3:ae:94:fc:
a4:99:6c:54:5c:86:c5:54:87:a6:c3:c9:84:0d:57:
de:dc:2a:b0:f3:88:25:55:be:e9:e0:10:a1:47:8f:
b7:e3:f4:ff:3a:67:91:13:cb:b0:0b:1c:c8:47:ef:
90:e2:49:44:a5:12:43:99:c9:42:49:11:54:fb:9c:
3d:5f:41:a2:b3:d9:d4:cc:10:9d:67:3f:ab:1b:13:
b8:30:55:e2:37:0a:36:50:27:32:da:1a:21:ac:98:
36:a0:87:9e:a4:5c:a6:ae:bd:6e:3d:36:20:23:8e:
d3:f0:ef:2a:7d:cf:bc:dd:8e:dc:1d:c6:41:47:b1:
c4:e8:91:8a:3b:78:85:c1:79:76:d8:3e:a1:a3:a6:
41:14:15:1d:e4:82:41:c1:9d:34:31:ac:6e:9c:2b:
dd:ab:43:2e:8a:aa:75:bd:c3:4f:36:e7:94:34:26:
e4:b0:37:cc:84:16:21:fa:c8:1e:fe:2c:f1:0e:3b:
9c:96:20:31:48:e0:54:ab:24:a3:b3:ca:a4:30:b9:
ca:b4:b3:19:09:bd:a8:7e:c7:31:9c:ab:53:2c:ed:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:25:5F:79:42:CF:9D:12:57:D4:85:63:D8:6B:26:F7:27:A7:A4:BF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gCVfeULPnRJX1IVj2Gsm9yenpL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b7:74:5a:44:80:79:3b:4b:cd:51:32:7a:6a:b1:fc:66:6c:
ce:f0:86:d0:82:7a:97:26:cb:da:06:7c:b8:d7:97:94:79:4c:
12:9c:3d:61:69:77:27:b9:87:be:02:90:b5:ad:79:37:6f:36:
5d:0c:f8:12:a0:20:49:01:c6:bd:1d:9b:96:71:4c:43:11:e2:
12:77:4a:18:ae:56:75:b9:9b:d7:a4:4b:3f:69:da:7e:ed:05:
9d:80:fb:3e:c6:db:5c:d0:7b:d7:4c:98:64:85:f8:9b:15:fc:
c4:fc:a3:66:8a:d0:b4:44:b7:6b:3d:89:b5:2f:fa:70:be:33:
6b:ab:03:c9:88:df:bd:11:07:9f:8e:b4:49:4c:da:3f:7e:89:
3e:9e:30:ee:9f:72:ba:d5:c2:f9:75:46:15:aa:82:c0:68:0e:
0c:6c:2b:32:66:4d:2e:c8:5c:84:fc:80:b0:f0:07:c7:fe:b9:
ed:4d:93:e5:a1:8b:2f:68:f2:fd:15:8a:d2:8d:6a:fc:e3:88:
8d:d9:a2:d7:ee:9e:2e:53:f1:75:5d:de:f4:57:df:da:5a:db:
e6:3a:07:d0:71:06:57:56:e1:f9:79:92:83:e8:b6:7f:3e:54:
64:67:62:a1:fa:0f:5b:5e:44:17:bf:aa:3e:7f:3a:44:f7:ce:
ce:95:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:49 2026 by rpki-client