Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yDajd0-76cR9lGuP99ZxhIu_ECc.roa
File: yDajd0-76cR9lGuP99ZxhIu_ECc.roa (raw, json)
Hash identifier: HxXn0BIU1vdNINd0qBI07ZfG5t7CMzLZijYlYFU2gL8=
Subject key identifier: C8:36:A3:77:4F:BB:E9:C4:7D:94:6B:8F:F7:D6:71:84:8B:BF:10:27
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D7E27B81213AC849DACEF57B78E6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yDajd0-76cR9lGuP99ZxhIu_ECc.roa
Signing time: Thu 26 Mar 2026 14:18:31 +0000
ROA not before: Thu 26 Mar 2026 14:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396827
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d7:e2:7b:81:21:3a:c8:49:da:ce:f5:7b:78:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c836a3774fbbe9c47d946b8ff7d671848bbf1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:bd:ee:49:ba:62:8a:f9:55:53:f1:23:1d:
9f:95:b2:a1:cd:1c:1c:d7:6d:e8:ac:be:07:80:19:
c0:cb:c2:53:fa:91:ef:9a:9d:3f:bb:9b:dd:91:c9:
5b:22:d4:1e:ff:77:6a:c3:2d:e0:a3:b3:29:f1:06:
3d:12:a9:12:4c:b1:82:ae:9e:43:81:71:ca:b2:e3:
c6:c3:c5:aa:42:cd:8e:cb:5b:6e:b9:2a:c3:51:38:
68:b7:26:b9:61:c2:24:bb:40:0a:30:6a:0f:01:82:
64:fa:9b:af:18:b4:3a:30:62:d1:6e:ba:05:1c:ac:
c9:8b:4a:5a:93:d8:76:a6:a8:2d:49:eb:34:4c:85:
f0:37:45:58:bc:73:43:08:b1:5a:d8:9a:d2:08:d7:
03:cd:bf:a0:61:85:7b:28:aa:ba:d8:13:76:8d:9d:
40:a1:26:6a:f0:32:7b:ad:7d:6b:e4:ee:12:6f:dc:
ed:24:6f:d7:68:18:2d:67:11:da:d7:2e:a7:0d:26:
1d:d7:69:35:2b:66:67:17:1f:53:13:21:64:62:5f:
5b:2d:94:10:e0:d6:3d:fe:1f:1a:10:0d:6e:98:c0:
52:10:74:d3:49:7a:f7:77:70:2c:d2:fc:ec:e9:88:
75:89:a3:b7:b1:f0:bc:d0:35:c8:11:2d:4c:42:0f:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:A3:77:4F:BB:E9:C4:7D:94:6B:8F:F7:D6:71:84:8B:BF:10:27
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yDajd0-76cR9lGuP99ZxhIu_ECc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7f:d6:ff:10:ac:d0:e7:cc:2d:e6:ac:64:33:33:3f:8f:3f:
2a:a8:90:a6:c2:11:dd:cc:77:fa:11:bd:f6:fe:1e:1d:d0:70:
c3:49:07:ea:6a:0e:51:6b:1c:2f:23:e0:e0:d5:71:4e:64:71:
88:03:8f:97:96:d7:46:7c:b1:30:59:0f:c1:f1:8c:87:b9:c0:
8c:2e:ac:37:c7:a4:0f:2c:2c:7f:37:49:5b:d6:a6:83:b6:b1:
8c:53:01:40:9d:16:37:e4:09:f9:e4:bd:93:ab:67:a8:f9:55:
f0:83:1a:e2:2e:b5:e1:c3:fe:45:d6:c9:d6:55:aa:67:2d:94:
4a:74:20:c9:78:b8:7a:6a:63:91:6b:a5:28:a5:9c:59:79:8c:
4f:b6:62:53:5a:6f:02:30:89:bf:af:96:91:0e:ef:d0:e3:78:
ff:cb:98:ca:1d:09:c0:37:b2:c9:d8:d5:73:d7:f5:6b:66:81:
e0:5f:b1:18:1b:18:3f:f4:38:5c:39:2a:d9:d2:fb:14:c3:56:
c2:86:24:5b:42:be:30:ed:c5:77:2a:4c:63:4c:e3:57:0a:07:
cd:3d:66:44:45:d5:21:a0:a2:ae:64:8d:5b:da:6b:7e:49:6f:
3f:9b:bd:9e:4f:2d:9d:bf:61:19:c9:96:64:bb:c1:07:31:17:
5c:dc:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:53 2026 by rpki-client