Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iFaiu9yd7SCigOBwUDy8dhjiKp8.roa
File: iFaiu9yd7SCigOBwUDy8dhjiKp8.roa (raw, json)
Hash identifier: Mdc1s2jwfurW/IoRcK8My9N/4naqnkIGNPPtd7Jlz3M=
Subject key identifier: 88:56:A2:BB:DC:9D:ED:20:A2:80:E0:70:50:3C:BC:76:18:E2:2A:9F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C20054616376AB49A2A766A93BE4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iFaiu9yd7SCigOBwUDy8dhjiKp8.roa
Signing time: Thu 26 Mar 2026 14:18:25 +0000
ROA not before: Thu 26 Mar 2026 14:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396566
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c2:00:54:61:63:76:ab:49:a2:a7:66:a9:3b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8856a2bbdc9ded20a280e070503cbc7618e22a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:55:13:4c:00:b1:ee:cf:5c:20:b9:7a:5f:
7b:d2:b4:60:ac:ce:63:0a:9a:7a:29:94:17:27:df:
05:c9:d5:d6:9d:0b:a8:54:0c:73:d7:b8:eb:b9:34:
28:9f:2f:c6:15:62:d4:ea:9d:6f:bd:53:19:d6:1c:
80:52:0c:b4:e6:d8:21:69:27:e8:53:27:76:1d:11:
8c:94:b1:b1:95:ff:ff:d2:67:e9:0d:ce:76:9e:b4:
cc:06:03:a8:0e:ec:d0:56:01:57:c9:8b:a3:16:ec:
41:67:ed:a2:3d:57:f6:34:4b:7d:ad:e5:29:b6:88:
d8:60:93:14:b0:84:4b:fd:49:8c:cd:3b:f0:a8:97:
02:4a:f1:71:58:58:be:17:95:ea:1c:52:70:c7:3b:
8a:92:31:ee:fa:af:46:d6:d5:d8:8e:7e:61:b1:d0:
40:4d:50:e9:a7:8c:ac:06:2b:05:5c:a4:51:0c:e7:
72:bc:70:9b:27:7c:53:42:f0:ad:2b:83:f5:da:6e:
07:22:e4:32:8f:b6:cd:36:a0:d2:02:0f:75:1b:2f:
3d:06:3a:4d:20:43:2d:d5:ef:9c:8f:a7:1c:b0:36:
ce:9b:65:e5:79:b7:97:c4:61:be:e1:de:54:9f:0c:
56:6f:35:fb:79:3d:56:fc:b1:24:32:c3:d0:d8:2e:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:A2:BB:DC:9D:ED:20:A2:80:E0:70:50:3C:BC:76:18:E2:2A:9F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iFaiu9yd7SCigOBwUDy8dhjiKp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:96:ae:bb:21:b9:7a:86:c0:89:bc:54:d5:61:f0:e0:2e:76:
a7:21:61:88:9d:30:3b:63:08:86:9a:43:dc:9f:40:ea:32:a7:
8d:04:e5:a5:79:bf:da:41:cb:b8:9c:a4:ec:e2:7f:aa:29:38:
77:4e:e4:ce:d9:dc:e2:93:9f:1c:b3:ed:05:36:83:83:be:88:
8b:82:59:e9:66:ef:d1:d7:83:55:cb:21:af:3f:65:2a:9c:79:
31:66:01:53:f1:43:fc:55:bc:01:be:fa:13:93:c0:fb:d0:e9:
03:c4:60:aa:17:2b:37:49:8d:78:98:1a:ef:18:8e:34:55:78:
7f:ab:2f:36:9e:4b:e1:e7:27:a6:0f:bd:7f:ad:89:b6:63:42:
11:f4:de:ab:cc:0e:38:f7:57:d5:ee:f9:d0:a6:17:fb:5e:a8:
e9:cb:6d:79:87:b3:0b:70:ad:91:7c:89:4c:68:f5:3e:1a:ad:
1f:7d:5f:b6:40:12:ca:68:3d:4f:40:bc:15:eb:a7:de:31:0b:
59:f8:0d:49:93:2e:fc:f8:52:5f:95:12:2a:a1:5d:73:0c:92:
86:b9:f9:fb:c8:d4:55:6c:e2:e5:de:9a:12:b7:b7:e0:e9:f4:
46:83:b9:0b:b3:8d:7c:62:fb:f6:50:1d:0b:b6:65:d6:b9:b3:
1e:ae:27:58
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgsIAVGFjdqtJoqdmqTvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODU2YTJiYmRjOWRlZDIwYTI4MGUwNzA1MDNjYmM3NjE4ZTIyYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08BVE0wAse7PXCC5el970rRgrM5j
Cpp6KZQXJ98FydXWnQuoVAxz17jruTQony/GFWLU6p1vvVMZ1hyAUgy05tghaSfo
Uyd2HRGMlLGxlf//0mfpDc52nrTMBgOoDuzQVgFXyYujFuxBZ+2iPVf2NEt9reUp
tojYYJMUsIRL/UmMzTvwqJcCSvFxWFi+F5XqHFJwxzuKkjHu+q9G1tXYjn5hsdBA
TVDpp4ysBisFXKRRDOdyvHCbJ3xTQvCtK4P12m4HIuQyj7bNNqDSAg91Gy89BjpN
IEMt1e+cj6ccsDbOm2XlebeXxGG+4d5UnwxWbzX7eT1W/LEkMsPQ2C5G8wIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFIhWorvcne0gooDgcFA8vHYY4iqfMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvaUZhaXU5eWQ3U0NpZ09Cd1VEeThkaGppS3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAi5auuyG5eobAibxU1WHw4C52pyFhiJ0w
O2MIhppD3J9A6jKnjQTlpXm/2kHLuJyk7OJ/qik4d07kztnc4pOfHLPtBTaDg76I
i4JZ6Wbv0deDVcshrz9lKpx5MWYBU/FD/FW8Ab76E5PA+9DpA8RgqhcrN0mNeJga
7xiONFV4f6svNp5L4ecnpg+9f62JtmNCEfTeq8wOOPdX1e750KYX+16o6ctteYez
C3CtkXyJTGj1PhqtH31ftkASymg9T0C8Feun3jELWfgNSZMu/PhSX5USKqFdcwyS
hrn5+8jUVWzi5d6aEre34On0RoO5C7ONfGL79lAdC7Zl1rmzHq4nWA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:54 2026 by rpki-client