Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qZw4Sp0QogpBkpl0Pix6BT1nRCY.roa
File: qZw4Sp0QogpBkpl0Pix6BT1nRCY.roa (raw, json)
Hash identifier: BGD1gJjkYcOk7KqxUODeR8jlXS8N9vw+wAQjyap8Kd8=
Subject key identifier: A9:9C:38:4A:9D:10:A2:0A:41:92:99:74:3E:2C:7A:05:3D:67:44:26
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D1549F4D7BAB90F300F08FD75D43
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qZw4Sp0QogpBkpl0Pix6BT1nRCY.roa
Signing time: Thu 26 Mar 2026 14:18:29 +0000
ROA not before: Thu 26 Mar 2026 14:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396600
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d1:54:9f:4d:7b:ab:90:f3:00:f0:8f:d7:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a99c384a9d10a20a419299743e2c7a053d674426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:7b:ab:53:8e:82:b8:32:a3:7f:7a:1d:18:
ad:1a:0f:2d:a0:9b:bd:93:93:64:0b:4c:80:82:19:
22:14:9a:d7:d4:98:d3:8a:c2:c5:f9:2b:a4:8c:40:
11:63:e2:bb:1d:96:03:fb:14:61:f1:c4:f8:48:91:
63:c9:a8:e4:f8:87:ef:23:f5:34:af:67:86:bc:2c:
49:46:f0:c2:13:43:76:0a:1a:f3:b7:5d:fd:12:8e:
49:50:d6:a9:0f:3e:c3:b1:e0:82:7f:ef:e1:27:df:
30:3c:8d:7f:c2:d3:87:84:1b:45:da:75:6f:f3:08:
f6:6e:6d:b2:12:f9:bf:e9:e7:24:1b:7e:13:80:df:
4f:8e:4d:7a:77:5b:e8:f0:b9:9d:e3:80:9d:eb:2a:
d1:3b:02:5d:ec:32:96:51:c0:e0:28:cd:2f:f1:f4:
7f:70:39:cf:25:f3:c7:58:c1:d0:e2:15:fe:f1:42:
0c:04:33:d8:98:be:10:f6:9d:bb:05:2e:cc:55:a7:
dc:69:56:78:6d:ee:e2:6f:29:c1:17:63:2e:31:48:
3a:7e:3c:eb:55:b7:6c:dd:79:2b:ec:3f:99:82:c1:
18:d2:a8:90:6b:18:04:3c:e1:2e:68:4c:26:ae:9b:
26:d1:ab:f6:de:3a:c0:2e:76:2d:42:8e:f7:b8:f3:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:38:4A:9D:10:A2:0A:41:92:99:74:3E:2C:7A:05:3D:67:44:26
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qZw4Sp0QogpBkpl0Pix6BT1nRCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:61:e8:a0:9a:15:5c:a8:8a:54:2d:8d:b1:49:79:39:fd:f3:
18:b0:bb:58:cf:a8:41:24:a9:1f:80:7a:57:97:4f:7c:54:68:
80:1a:03:47:d2:f6:1b:b8:bd:d8:c0:7a:f7:8e:3b:64:17:88:
52:a7:5b:5c:35:c1:aa:86:f4:d2:cf:57:66:63:bb:7e:0c:66:
8e:ce:6d:e2:e3:0e:b1:f0:1d:af:f0:b1:4d:ef:a5:ce:16:e8:
2b:8f:09:b6:66:09:16:7b:87:50:d8:35:bf:15:15:c9:3f:69:
72:fe:a2:b0:d2:a1:59:24:5e:29:e8:20:23:20:3a:46:7c:3a:
4f:e1:38:2b:2b:a1:f2:91:bf:2e:23:7b:8c:25:94:15:bc:fb:
b4:74:8b:20:49:63:6c:2e:be:fa:ea:29:5e:92:1d:2f:10:87:
42:38:86:a9:1f:bb:3a:a0:90:62:03:6e:39:b4:ab:e7:58:e9:
ec:51:bf:3c:c0:6f:af:0e:b5:fd:5f:e0:ad:42:eb:fc:f9:02:
36:0e:37:06:ce:b4:cc:86:73:35:d6:6f:e5:57:f7:bc:3d:61:
93:85:1c:92:61:65:e2:ec:66:20:04:a3:d2:43:6c:b6:8e:ee:
31:29:90:af:bc:af:f7:10:13:2a:d7:97:59:3b:30:c1:5e:c9:
25:d5:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:51 2026 by rpki-client