Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m2kol5Kz02Vl2p3hdEAVLC6s2mo.roa
File: m2kol5Kz02Vl2p3hdEAVLC6s2mo.roa (raw, json)
Hash identifier: +9lhUSIYD7cr/CTf1qY9aW/YaAVhddyCHmQorlwofGc=
Subject key identifier: 9B:69:28:97:92:B3:D3:65:65:DA:9D:E1:74:40:15:2C:2E:AC:DA:6A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82A7C24DEE3DF928DCF0600B4F612E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m2kol5Kz02Vl2p3hdEAVLC6s2mo.roa
Signing time: Thu 26 Mar 2026 14:18:18 +0000
ROA not before: Thu 26 Mar 2026 14:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10515
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:a7:c2:4d:ee:3d:f9:28:dc:f0:60:0b:4f:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b69289792b3d36565da9de17440152c2eacda6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:0d:ea:44:a5:9c:6b:a6:2b:29:98:ff:09:
d8:1f:87:52:5e:91:d1:85:4b:e9:92:77:b7:ea:b3:
29:75:5d:b1:7f:af:9a:82:7c:de:77:ee:95:35:7a:
9e:a2:7e:cc:0f:e2:1c:91:a3:e3:6d:87:d0:13:3e:
20:a9:1d:9c:fc:57:97:17:d6:94:71:64:3b:02:15:
5f:db:ee:8e:37:27:3b:69:69:ff:8a:dd:d4:22:2c:
e2:9c:8c:f3:90:42:98:9b:e9:fb:ed:6e:b7:7d:bb:
91:d4:11:41:bf:29:42:41:c0:94:22:93:3b:5b:ef:
0d:7a:1e:2f:8c:a9:87:e5:ce:3b:d0:f2:e9:60:d8:
d4:37:95:a7:97:df:b1:e0:41:e3:20:c5:24:65:ec:
10:ab:cb:fd:df:31:17:ae:c3:f0:9a:47:2f:d2:7a:
9e:d0:9f:95:de:09:d8:29:2f:98:ae:60:84:ea:8e:
31:b2:bf:8d:02:50:e9:3e:82:7c:1b:07:1b:89:49:
2e:aa:65:8e:8b:9e:34:eb:e8:0f:d6:42:bc:f6:e6:
f7:c5:9d:3b:3b:06:8a:0b:b1:bc:28:4e:3f:b0:c7:
ab:c5:47:dc:04:6b:e1:55:06:6e:01:66:52:1b:b7:
dd:0f:95:e3:4b:15:aa:bb:c9:d2:ab:4c:3a:98:cc:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:69:28:97:92:B3:D3:65:65:DA:9D:E1:74:40:15:2C:2E:AC:DA:6A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m2kol5Kz02Vl2p3hdEAVLC6s2mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a6:8c:15:3f:a8:1f:44:6f:77:25:2a:f2:15:e8:6c:86:31:
3b:09:2e:77:5d:7c:9d:63:36:2b:42:b4:e0:24:d5:93:52:fd:
20:fa:41:4d:dd:37:66:fd:12:5d:f4:af:9b:4d:39:f5:6b:ab:
12:30:91:19:8b:52:e4:c0:19:90:45:17:d3:24:ac:3e:31:3d:
aa:9f:d1:b1:f1:55:fe:db:40:ee:af:a5:0d:8a:b9:e5:bd:1d:
cb:a3:6f:9c:ec:d3:35:84:6c:75:47:be:3a:12:ab:a4:c5:8d:
04:76:d3:be:57:b8:72:69:72:6b:80:f8:de:69:8e:95:7b:9d:
f9:fb:4b:a6:5f:e8:2e:e1:c7:34:99:1c:39:a4:44:54:d3:68:
7d:74:11:e7:30:85:04:59:ac:21:49:34:e2:ff:24:c2:e0:53:
16:b7:52:47:bb:0c:9c:dc:ea:2f:e3:1e:0d:48:dc:ba:58:ae:
65:f0:5f:21:e1:42:90:be:60:2d:d6:86:35:fa:d7:1b:e2:a8:
e3:61:b8:83:01:42:c8:c1:f9:ea:0d:d6:e6:94:04:70:d1:c2:
14:b4:bc:1a:36:39:78:62:4e:bd:9b:a9:6e:be:34:a6:7d:b9:
ce:4e:89:18:1b:a4:31:8c:9f:04:a0:45:e1:6e:02:37:62:01:
09:83:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:56 2026 by rpki-client