Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tGy6dTpn-X3KbN_mew1MkY1hiUQ.roa
File: tGy6dTpn-X3KbN_mew1MkY1hiUQ.roa (raw, json)
Hash identifier: BZT2NlUVKc+PlkxYlOF7D4whViwUpAURBuVZHDlSBaA=
Subject key identifier: B4:6C:BA:75:3A:67:F9:7D:CA:6C:DF:E6:7B:0D:4C:91:8D:61:89:44
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82CF0DF49D4979B16A4E35E975BB73
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tGy6dTpn-X3KbN_mew1MkY1hiUQ.roa
Signing time: Thu 26 Mar 2026 14:18:28 +0000
ROA not before: Thu 26 Mar 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396595
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:cf:0d:f4:9d:49:79:b1:6a:4e:35:e9:75:bb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b46cba753a67f97dca6cdfe67b0d4c918d618944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:1e:f9:85:80:bf:35:e7:11:86:43:b0:05:
82:3a:b2:e8:d3:d4:16:9f:4c:f2:fa:56:1f:a8:de:
53:62:f2:91:56:06:07:16:50:ea:26:bd:d0:2f:78:
88:26:88:2b:5c:d6:48:73:2e:f6:4b:26:42:6d:99:
e3:4a:40:92:09:b0:0d:93:03:d8:3f:55:de:78:52:
1b:04:4b:a1:52:69:0a:b2:24:08:6d:64:61:1d:ff:
e5:be:01:25:b1:f8:61:88:33:27:a8:91:00:82:58:
ed:fa:65:59:50:0a:38:27:aa:df:98:6c:6f:48:21:
08:93:44:17:f1:90:f3:f6:1d:3a:07:34:b4:9e:db:
a8:0b:ce:05:c5:13:a6:fa:5d:88:62:4f:ba:9d:8b:
a8:6c:49:74:6f:46:99:29:72:b8:9d:b0:83:22:d4:
2d:e0:95:63:f7:f2:18:48:7e:81:97:5b:56:b9:7d:
66:e8:3c:11:ba:5d:a4:61:85:a5:98:44:77:7d:d3:
c4:05:1f:cc:61:d2:45:48:be:53:44:c5:73:92:cb:
53:ee:0d:35:af:b9:51:26:6b:83:17:37:93:53:36:
03:a1:c8:a2:47:a9:25:55:55:a7:34:09:2c:27:6a:
eb:bf:31:a8:81:af:4c:c3:08:ca:11:8e:9f:8d:2d:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6C:BA:75:3A:67:F9:7D:CA:6C:DF:E6:7B:0D:4C:91:8D:61:89:44
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tGy6dTpn-X3KbN_mew1MkY1hiUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e0:bf:90:6a:ae:ee:99:c9:6b:1a:d9:1f:32:eb:9e:0b:90:
0d:12:4c:7f:75:bf:7e:9c:b3:fc:3d:ac:ac:2e:a5:f9:89:89:
c8:49:f0:60:50:fe:a0:06:2a:c0:81:6f:5e:a2:cd:82:80:21:
3d:f4:a1:78:2d:31:f1:9e:69:7a:7a:5a:db:3b:19:20:72:d6:
a1:ad:ec:2f:b2:81:4b:06:99:6e:c7:d4:a9:f7:1d:fc:e1:02:
b5:1d:a9:d1:1e:f5:1d:a6:76:bc:16:d3:20:20:c4:12:ee:94:
42:64:e3:18:55:9a:80:08:fd:95:f6:69:93:1b:15:9d:9d:d6:
4c:d0:aa:de:39:33:93:63:7b:74:aa:60:68:8e:76:9c:05:4b:
b5:70:f7:95:d5:4e:6e:46:0a:09:e5:56:7a:fa:12:5d:cc:ae:
32:51:a3:c6:96:c7:ff:ec:0f:3a:3a:14:30:1b:0c:cc:b0:8c:
d7:f2:8b:13:90:dd:26:77:e4:95:08:b0:29:03:81:f5:33:eb:
c5:69:cb:a3:11:f5:c3:96:83:1b:79:15:2d:50:6b:40:7c:a7:
2a:a0:b5:14:0a:5b:b4:73:c7:36:0a:36:e3:22:f3:73:b2:ca:
fb:a1:c8:7f:4d:91:88:00:17:a7:15:b8:a9:f8:7f:d1:58:1d:
a8:23:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:47 2026 by rpki-client