Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rAexfK0xznsmO77NcpY4SyWKybg.roa
File: rAexfK0xznsmO77NcpY4SyWKybg.roa (raw, json)
Hash identifier: NCuurUC4yJoVGLH37+NX95ZsjRRzWBzQJw1PiHD0Bto=
Subject key identifier: AC:07:B1:7C:AD:31:CE:7B:26:3B:BE:CD:72:96:38:4B:25:8A:C9:B8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82CDE968576393C95481F11A78FFDB
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rAexfK0xznsmO77NcpY4SyWKybg.roa
Signing time: Thu 26 Mar 2026 14:18:28 +0000
ROA not before: Thu 26 Mar 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396593
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:cd:e9:68:57:63:93:c9:54:81:f1:1a:78:ff:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac07b17cad31ce7b263bbecd7296384b258ac9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:22:fe:87:6a:69:c1:39:e7:98:7d:27:9a:
be:04:20:13:c9:b5:58:df:e2:d4:f1:cd:8d:8f:1c:
e2:dd:8f:52:d9:52:1d:32:16:66:4d:87:d8:92:d4:
85:ad:e6:47:d2:7a:bc:e5:05:ec:f0:02:77:03:b8:
0b:dd:92:90:1f:54:83:5b:d0:04:40:6e:1a:61:6a:
c8:0d:26:bb:b3:bd:34:90:f2:58:b3:92:48:5c:65:
6f:dd:6c:11:e0:e3:d8:5c:41:a1:87:9b:66:b7:f0:
1c:4c:3c:98:a5:e0:0a:39:52:89:68:ba:8c:e1:15:
8b:ce:cb:fc:12:5d:dd:31:c2:37:1b:b8:6f:fe:14:
e3:c6:53:0a:bd:2a:a8:2b:8c:1b:f5:f4:86:fa:73:
05:a3:14:ed:ce:c3:b1:02:af:05:de:f9:45:ca:c5:
86:4d:6a:c9:14:4c:be:fa:33:45:8b:6e:36:2d:b8:
62:c6:9e:67:0e:8f:de:8b:bc:13:5c:9f:95:15:21:
0d:d2:1c:36:8b:fa:f2:fb:df:e4:e5:c7:a2:2f:b8:
50:1d:68:37:48:16:1b:5a:6f:36:74:45:0f:c7:ba:
27:1a:f5:5a:95:d6:56:e3:17:65:28:49:83:1c:59:
62:b1:06:3a:3c:5f:96:4d:6b:25:1d:eb:e8:26:95:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:07:B1:7C:AD:31:CE:7B:26:3B:BE:CD:72:96:38:4B:25:8A:C9:B8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rAexfK0xznsmO77NcpY4SyWKybg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
87:49:fc:b5:2f:66:d8:0e:cc:d7:57:3b:a1:c0:86:88:38:1c:
d4:51:e9:33:94:d5:05:00:56:68:77:6a:74:b3:ec:5c:7d:06:
8e:48:08:4b:12:78:ba:15:81:7c:c8:23:e1:48:d2:e6:d0:c2:
5b:ea:4e:12:fd:8c:6e:fd:93:11:5d:eb:06:2c:87:20:19:6a:
79:e5:6c:05:7e:61:2e:e3:ba:3a:b8:44:45:e8:18:58:6e:06:
1d:b9:a4:a9:88:84:5c:e0:7c:e9:60:1a:ce:0c:44:f1:c6:ce:
93:a7:a5:0d:26:1a:25:e0:b8:19:7d:43:aa:b0:3a:d8:60:16:
ef:27:65:e1:d5:a6:93:e1:01:ad:ca:c7:a5:cf:21:92:b8:1f:
1b:09:74:f2:9e:d6:9f:db:56:02:1e:c3:72:36:ca:89:3e:4e:
00:19:eb:a3:0a:1c:db:28:1b:e9:a6:2b:46:9b:de:0a:55:55:
9c:3a:41:28:d1:b6:e7:ce:0f:3c:2b:21:2e:df:67:6d:8e:ef:
92:2a:bd:33:ac:23:ab:6b:2f:84:5a:93:c1:09:f4:46:fa:02:
0c:aa:90:e0:1f:48:c0:6e:fb:fb:99:1c:5e:c4:48:e4:b5:b5:
07:0e:ab:6c:a9:9e:e5:f8:c9:78:1d:49:3d:ab:4a:63:e7:ba:
ab:31:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:55 2026 by rpki-client