Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3CkygDPD0ckxoLKeckn5R5vZ1Ug.roa
File: 3CkygDPD0ckxoLKeckn5R5vZ1Ug.roa (raw, json)
Hash identifier: rExQqke+dWh2+5hHvhw/dcphzA+ftYi82PuxvPUxvN0=
Subject key identifier: DC:29:32:80:33:C3:D1:C9:31:A0:B2:9E:72:49:F9:47:9B:D9:D5:48
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C31DBA46ACA9FF284D08FA07540C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3CkygDPD0ckxoLKeckn5R5vZ1Ug.roa
Signing time: Thu 26 Mar 2026 14:18:25 +0000
ROA not before: Thu 26 Mar 2026 14:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396572
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c3:1d:ba:46:ac:a9:ff:28:4d:08:fa:07:54:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc29328033c3d1c931a0b29e7249f9479bd9d548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:16:2e:b2:b0:6b:41:13:e6:b5:17:0d:9b:
3c:d9:5d:a6:fd:60:f5:2c:e3:8d:e1:aa:e3:80:f3:
05:85:9f:64:f8:68:91:65:af:b4:d4:eb:c6:ba:51:
a2:60:38:c1:a2:47:f0:d4:d7:43:80:fc:4c:fa:f8:
78:51:d9:b4:3c:d6:33:09:d2:86:37:29:a2:e6:07:
98:07:c4:e0:ae:84:20:d5:85:bf:a1:03:39:0c:99:
e3:56:69:91:ef:7f:68:62:6a:5e:2d:b7:df:0b:5c:
8f:4b:74:1d:d3:e1:f8:40:28:bb:77:04:fc:3f:1a:
56:1b:f3:50:30:12:8b:97:1b:0d:80:57:d6:51:53:
c3:a7:d7:4c:ed:05:38:a1:18:4c:20:03:6f:90:a6:
6b:36:cb:ca:3b:eb:6b:34:fb:83:7a:7b:a1:62:36:
7d:a8:fe:0f:47:59:e3:af:a2:69:bb:c6:0b:f1:5f:
78:48:62:ee:5a:44:59:87:54:d5:6a:9b:0f:26:2a:
1a:49:3b:df:55:a3:9e:cd:47:7c:67:2d:5d:81:e9:
3a:f5:b1:64:23:a7:8d:ff:53:cc:87:c5:d5:ac:c1:
46:d7:fb:56:41:95:3b:fd:f4:ad:c5:c3:d3:c5:8e:
a5:04:ac:36:84:a0:4f:15:28:bb:9c:53:26:07:82:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:32:80:33:C3:D1:C9:31:A0:B2:9E:72:49:F9:47:9B:D9:D5:48
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/3CkygDPD0ckxoLKeckn5R5vZ1Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ff:31:2f:ec:dc:9a:38:74:a0:b0:c3:e7:bc:92:b0:3d:3c:
1a:7b:0d:65:e6:ed:1e:38:b0:9f:1e:dc:fa:99:b5:d0:5d:54:
06:a6:20:c9:51:f8:67:3e:86:08:1a:37:4a:ba:ba:77:f6:ea:
de:b5:eb:e3:4b:a4:be:ae:bb:9e:4c:76:9c:f9:74:02:ca:56:
84:08:f9:0f:1a:f6:41:4b:3b:af:83:14:9f:3d:69:66:4f:f9:
d7:e0:8a:ac:19:81:a4:bf:24:0f:ef:d3:39:a7:e2:b7:81:c5:
26:64:e5:8b:c2:1b:69:df:3b:a1:87:34:00:cb:d9:39:3d:40:
47:9d:77:e2:55:b8:71:5a:11:39:39:60:be:17:9e:30:9d:e7:
86:53:7d:f5:24:31:c1:59:41:ae:6c:a1:87:4b:b7:ec:cf:f2:
5a:81:b6:51:3f:a4:5e:90:4e:19:01:2d:33:1b:5e:35:67:bb:
d0:45:04:20:db:da:08:8c:0c:c0:70:60:32:e9:6c:4e:f5:6f:
2e:a2:f4:e0:e3:e6:0c:11:4e:9e:85:23:f0:05:63:52:6c:2d:
75:18:b2:3c:29:e0:59:0d:1c:f0:5b:23:40:29:6a:c5:86:ab:
f8:8f:3d:e4:df:a3:e6:60:8a:c0:72:30:c9:8f:f8:6e:24:0d:
ab:ef:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:08:48 2026 by rpki-client