Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AM83swvVbDqf1WKY_OS2WJwWHXg.roa
File: AM83swvVbDqf1WKY_OS2WJwWHXg.roa (raw, json)
Hash identifier: C/lq2ZFQ0Olj8MSxKTRmbAzGc02nKj2bvaPzAraWgHE=
Subject key identifier: 00:CF:37:B3:0B:D5:6C:3A:9F:D5:62:98:FC:E4:B6:58:9C:16:1D:78
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82CC981FBFD28F91FD2D28224B4920
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AM83swvVbDqf1WKY_OS2WJwWHXg.roa
Signing time: Thu 26 Mar 2026 14:18:28 +0000
ROA not before: Thu 26 Mar 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396591
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:cc:98:1f:bf:d2:8f:91:fd:2d:28:22:4b:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00cf37b30bd56c3a9fd56298fce4b6589c161d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:c7:60:e9:7d:90:57:46:c9:27:db:dd:d5:
9e:34:9d:80:ad:ba:62:db:d5:3c:c2:33:ab:b0:b3:
8f:1f:84:d7:ed:e0:f4:ec:15:8d:dc:a8:b3:bf:b8:
2f:0e:40:ca:67:62:47:1c:5e:f3:52:ea:33:25:df:
84:0a:df:1e:0a:ac:d6:1e:8f:ba:bf:42:23:ef:cc:
cc:97:72:c7:5d:59:b2:6e:38:4f:8b:08:9a:51:49:
3c:45:4f:ee:b1:74:fd:8a:9f:0e:03:ed:4c:85:ba:
0c:7a:d8:3d:43:4d:c2:32:d5:9d:fd:74:cb:54:c4:
27:39:de:a8:a5:6d:5d:ee:d4:04:49:70:14:67:aa:
0d:49:64:d2:61:cf:59:88:f6:ac:6e:31:ef:9b:c3:
30:26:1d:fa:b5:5e:e5:68:1a:17:a2:fe:a4:c0:70:
60:e9:55:c1:82:5e:61:4e:72:d9:d3:12:63:da:b1:
33:34:4d:7f:63:bf:fc:0e:2d:67:60:70:c2:85:70:
62:f1:d1:47:90:93:07:4b:b1:f2:61:8a:ad:8b:9e:
8f:79:1d:63:b0:0d:77:a1:2c:c0:f7:bb:2a:da:42:
a4:e5:fd:bb:4e:19:a7:b8:8c:75:8f:f7:3b:2a:46:
4e:e8:8e:35:ec:19:26:a8:a2:51:e5:6d:a8:b2:81:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:37:B3:0B:D5:6C:3A:9F:D5:62:98:FC:E4:B6:58:9C:16:1D:78
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AM83swvVbDqf1WKY_OS2WJwWHXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a3:63:47:f4:67:bb:06:37:bf:c8:d5:34:5b:ee:81:cd:a3:
02:63:ed:0f:c8:c4:4a:f0:4f:7d:7b:0b:16:1b:4a:1d:04:62:
48:74:c9:c6:59:55:e2:78:df:cf:f0:bc:ed:64:86:04:c1:7d:
12:4f:08:00:64:58:d1:5a:f3:e3:20:79:5e:43:7c:cd:bb:d2:
5b:e6:84:e9:58:7d:50:bd:70:e2:7e:a2:f8:82:bf:31:3b:3b:
dd:36:44:44:e4:18:cc:8b:38:4c:46:92:46:a0:31:f7:cc:d2:
7e:c9:9b:ad:09:8d:b3:a9:18:25:57:f1:8e:2a:c1:7b:8a:78:
78:e8:a5:7d:ef:7b:10:6b:bb:bf:ef:d2:e2:5e:95:1b:06:a5:
2a:1f:56:b4:de:24:0c:a6:6d:bc:21:8c:83:2c:64:15:e5:ad:
39:5b:7b:b1:d2:1a:e5:64:d3:69:e9:a6:9d:9b:3c:2a:f4:21:
c2:5a:53:de:3d:da:99:e0:0b:2f:8c:1a:a2:85:8e:2d:ac:c6:
ab:ef:79:ff:be:46:1e:7b:20:3f:56:13:c2:24:1c:77:09:d9:
42:10:ab:9c:7c:c8:95:c0:46:17:47:48:61:32:19:c5:ac:ff:
29:35:21:87:2a:05:ec:16:76:10:20:5e:67:4d:21:2e:5d:c6:
76:5b:23:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:24 2026 by rpki-client