Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i3DP-p7utUzswSGZ3tPXy_Wd4Rc.roa
File: i3DP-p7utUzswSGZ3tPXy_Wd4Rc.roa (raw, json)
Hash identifier: xB/lOHr6K4OUbAIeDSAcU4cxSpp7Rjt9rlS2ux0X9tY=
Subject key identifier: 8B:70:CF:FA:9E:EE:B5:4C:EC:C1:21:99:DE:D3:D7:CB:F5:9D:E1:17
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C39E23B2198E169BFBE65550E0DB
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i3DP-p7utUzswSGZ3tPXy_Wd4Rc.roa
Signing time: Thu 26 Mar 2026 14:18:25 +0000
ROA not before: Thu 26 Mar 2026 14:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396573
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c3:9e:23:b2:19:8e:16:9b:fb:e6:55:50:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b70cffa9eeeb54cecc12199ded3d7cbf59de117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:c7:63:c0:f4:82:ce:f2:9b:98:49:c0:a2:
5e:b3:29:73:23:c5:2a:68:a4:a1:17:fe:cb:c2:f1:
3b:08:08:54:7b:de:2f:bc:b6:02:48:1b:8f:5b:63:
37:b3:69:90:a7:cd:15:fc:31:1a:97:88:3b:06:ff:
99:8b:5a:7a:7a:68:11:8f:e8:72:eb:b5:73:8d:bb:
fc:2e:38:92:c3:30:dc:22:ac:34:fd:7f:bc:84:c5:
a8:2c:23:5a:3d:60:7c:45:2d:7b:9f:4b:e3:8e:43:
cb:6a:1d:d5:71:ad:be:bd:12:d0:10:6a:b5:a8:c8:
91:3f:4b:f8:ed:95:d3:50:b0:c9:42:74:17:2a:39:
0c:11:42:f3:bd:d2:73:bc:08:43:c6:a3:c9:96:90:
04:2a:0e:0e:4c:7f:57:5a:c3:58:f0:92:5b:4d:c5:
d2:f7:11:c7:3b:dc:db:e1:4f:87:8b:44:be:6e:37:
d1:3e:43:b9:de:cf:5a:11:1b:9b:29:38:70:e4:77:
8a:eb:92:1b:bc:3a:76:e2:c0:fa:47:52:10:14:a7:
4b:d9:25:36:06:7d:17:51:d8:d7:de:39:f5:86:63:
b2:62:70:24:ce:81:63:a7:c8:59:d3:61:37:e1:5a:
91:36:b6:f4:eb:aa:e6:90:b3:c9:0e:6a:72:c2:9a:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:CF:FA:9E:EE:B5:4C:EC:C1:21:99:DE:D3:D7:CB:F5:9D:E1:17
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i3DP-p7utUzswSGZ3tPXy_Wd4Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1b:85:06:21:ac:c7:14:6d:8f:24:7c:92:f5:4e:3c:6d:19:
75:53:3f:ef:5c:03:4b:fb:a8:68:af:49:7d:e9:db:6a:92:55:
b4:10:3b:ef:96:dd:bd:30:a5:83:7d:10:2d:af:fe:17:fd:dc:
8b:33:e1:23:b3:0f:10:91:9c:35:85:d5:81:14:59:f2:37:22:
21:f8:c3:6a:3a:46:89:19:d7:c6:55:d6:e3:20:7e:24:d1:96:
af:db:de:30:d8:ec:50:97:5f:24:87:d6:bc:1c:3b:58:09:ef:
31:57:39:49:d2:7b:f4:3c:40:f8:cb:3d:eb:f9:9c:e1:51:40:
b6:eb:52:03:4c:3c:61:6f:84:fd:67:e1:2d:29:7b:7b:08:48:
4d:3e:7a:30:14:08:9b:93:af:0b:56:5e:39:27:84:69:84:71:
6d:e3:ff:1b:2b:b8:f1:7b:e4:91:8f:ec:cd:e7:20:91:4a:22:
91:f7:8f:e1:a6:34:69:4c:d8:5a:ad:69:c3:02:ce:69:46:38:
01:6a:df:6a:a4:d6:2d:9b:22:20:96:e5:12:bd:e4:fe:72:3b:
26:e4:98:17:46:e5:6c:e2:d0:e8:bf:ab:3f:54:e8:30:4a:80:
e3:85:d8:aa:63:da:66:da:16:54:0c:3d:83:c4:01:95:11:84:
29:21:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:49 2026 by rpki-client