Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iE6SN1lA4IvD2W7XTWM46XGawew.roa
File: iE6SN1lA4IvD2W7XTWM46XGawew.roa (raw, json)
Hash identifier: PL9RFPM9ORbhN9yY4owbUcOd0KT6mk1XAHssk0+EaFg=
Subject key identifier: 88:4E:92:37:59:40:E0:8B:C3:D9:6E:D7:4D:63:38:E9:71:9A:C1:EC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B273A9212653851D64D18DEF26FB
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iE6SN1lA4IvD2W7XTWM46XGawew.roa
Signing time: Thu 26 Mar 2026 14:18:21 +0000
ROA not before: Thu 26 Mar 2026 14:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36627
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b2:73:a9:21:26:53:85:1d:64:d1:8d:ef:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=884e92375940e08bc3d96ed74d6338e9719ac1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:57:28:a8:87:57:4d:17:80:16:bf:eb:85:
3e:4c:97:df:ef:4c:f8:03:4c:91:63:28:de:49:7f:
31:34:9e:be:d6:ef:c9:fb:7b:2e:a6:bf:2f:50:b3:
24:be:cb:d3:7d:b7:de:1d:19:7b:d3:f9:bd:e5:eb:
07:fc:c7:05:02:44:53:ab:1e:48:2c:06:ab:45:85:
9f:8e:60:b4:d2:e8:f7:de:fb:7c:a8:d0:75:05:ae:
6d:60:a9:6e:dc:37:16:99:ee:32:a3:e6:36:1c:70:
0a:ce:ac:dd:42:aa:e3:48:69:4c:86:c9:55:b0:d2:
f1:43:67:52:55:e8:1a:db:2a:c7:c5:8f:ac:d0:93:
32:ee:3f:c4:2a:06:c6:cd:00:b8:93:91:e6:e7:2b:
d5:01:f0:bf:b0:d0:90:84:bd:ff:50:7a:c0:cf:a3:
60:d9:f6:cb:4a:1a:fe:09:41:b0:f3:90:07:9f:c8:
fa:c3:ec:e6:60:8a:1b:5e:be:3c:31:87:b6:0d:b6:
3b:92:ff:ea:af:73:a0:80:24:2f:2c:13:64:2f:aa:
6c:fb:14:d0:e0:78:18:40:18:24:67:39:c6:8f:22:
b9:22:82:af:3a:9c:6a:4e:23:17:fc:68:86:96:c8:
f5:ac:b1:5a:ec:cb:c5:9a:3f:68:f2:1b:9d:a9:8c:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4E:92:37:59:40:E0:8B:C3:D9:6E:D7:4D:63:38:E9:71:9A:C1:EC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iE6SN1lA4IvD2W7XTWM46XGawew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
89:47:5e:c6:5f:a3:b2:61:4f:b6:79:22:11:04:d5:40:ce:3b:
0e:c7:08:31:ac:48:8c:64:db:13:f3:01:ee:03:0e:3e:b9:06:
70:95:42:6b:ff:d3:7c:4f:78:db:94:84:ba:94:b0:6b:f4:35:
43:ea:1c:59:88:90:8d:11:65:1b:a6:bf:fc:bf:43:ec:8f:33:
33:82:ba:20:0b:e8:01:80:0b:ff:ed:47:60:97:66:43:ee:e6:
d6:ca:ed:d3:5e:bb:7e:7c:9c:4c:84:78:f9:d5:1f:bf:70:63:
7c:a8:ae:e8:eb:cb:ab:6a:f4:e1:88:2d:c1:e8:62:9b:64:aa:
7b:e3:f9:4e:95:85:af:96:28:e2:1c:c8:fd:d6:93:47:13:16:
85:54:34:1e:7a:b8:17:e3:00:97:7b:68:95:fa:b1:db:d7:67:
22:a2:b1:09:34:be:0d:c4:dc:b3:5d:6d:46:37:70:43:ca:e6:
8d:9c:bb:ab:d3:ae:17:e7:bf:40:ec:8b:76:d4:58:bd:bc:e4:
47:3c:ed:6d:aa:a8:93:3a:ec:0c:f1:72:d3:1e:56:f9:8b:e9:
ff:19:13:44:ff:64:6b:bf:57:bd:6f:76:c9:dd:46:ad:23:f1:
64:fe:bf:01:d5:2c:26:05:8a:78:35:ff:34:bb:c4:f3:4a:4a:
dd:54:ef:ac
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgrJzqSEmU4UdZNGN7yb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODRlOTIzNzU5NDBlMDhiYzNkOTZlZDc0ZDYzMzhlOTcxOWFjMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzixXKKiHV00XgBa/64U+TJff70z4
A0yRYyjeSX8xNJ6+1u/J+3supr8vULMkvsvTfbfeHRl70/m95esH/McFAkRTqx5I
LAarRYWfjmC00uj33vt8qNB1Ba5tYKlu3DcWme4yo+Y2HHAKzqzdQqrjSGlMhslV
sNLxQ2dSVega2yrHxY+s0JMy7j/EKgbGzQC4k5Hm5yvVAfC/sNCQhL3/UHrAz6Ng
2fbLShr+CUGw85AHn8j6w+zmYIobXr48MYe2DbY7kv/qr3OggCQvLBNkL6ps+xTQ
4HgYQBgkZznGjyK5IoKvOpxqTiMX/GiGlsj1rLFa7MvFmj9o8hudqYzByQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFIhOkjdZQOCLw9lu101jOOlxmsHsMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvaUU2U04xbEE0SXZEMlc3WFRXTTQ2WEdhd2V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAiUdexl+jsmFPtnkiEQTVQM47DscIMaxI
jGTbE/MB7gMOPrkGcJVCa//TfE9425SEupSwa/Q1Q+ocWYiQjRFlG6a//L9D7I8z
M4K6IAvoAYAL/+1HYJdmQ+7m1srt0167fnycTIR4+dUfv3BjfKiu6OvLq2r04Ygt
wehim2Sqe+P5TpWFr5Yo4hzI/daTRxMWhVQ0Hnq4F+MAl3tolfqx29dnIqKxCTS+
DcTcs11tRjdwQ8rmjZy7q9OuF+e/QOyLdtRYvbzkRzztbaqokzrsDPFy0x5W+Yvp
/xkTRP9ka79XvW92yd1GrSPxZP6/AdUsJgWKeDX/NLvE80pK3VTvrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:56 2026 by rpki-client