Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KtwYdQriUbOXckT3AtbL5bv1iqE.roa
File: KtwYdQriUbOXckT3AtbL5bv1iqE.roa (raw, json)
Hash identifier: MPQSvoQ4kTm0SMpSY4aZcMHlW9rWMiRmljVV+xsN8+8=
Subject key identifier: 2A:DC:18:75:0A:E2:51:B3:97:72:44:F7:02:D6:CB:E5:BB:F5:8A:A1
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B2FF6E59856562FC259F5E925E20
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KtwYdQriUbOXckT3AtbL5bv1iqE.roa
Signing time: Thu 26 Mar 2026 14:18:21 +0000
ROA not before: Thu 26 Mar 2026 14:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36628
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b2:ff:6e:59:85:65:62:fc:25:9f:5e:92:5e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2adc18750ae251b3977244f702d6cbe5bbf58aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:7f:63:5a:96:35:15:d3:84:5c:21:13:ee:
8d:d0:26:f6:84:04:fb:a5:bd:62:e0:84:df:c9:28:
4d:ba:7c:d1:55:ee:75:9f:86:13:fd:8c:6a:f5:7a:
a5:d3:89:b6:ee:ef:7d:68:62:b3:27:16:d4:33:7d:
12:81:ac:a9:27:e8:f7:94:2b:1b:e9:c2:9e:7c:67:
68:2d:fc:88:8a:f4:cd:4b:e3:07:ac:99:27:97:8f:
3f:7c:55:dc:a3:99:ac:72:49:28:98:3c:8d:b1:21:
20:36:da:58:f2:f3:80:36:2a:b2:38:55:63:6d:a9:
21:cc:4b:64:bf:9d:71:37:c5:f4:9f:01:85:53:37:
b1:a5:e1:6b:40:5d:31:06:da:20:a9:d5:0b:16:6d:
95:f1:3e:22:b2:10:ad:e2:e0:65:d0:c2:eb:b0:1a:
08:7e:1a:23:03:29:3b:b1:8f:3f:31:00:ac:36:8a:
24:cc:b9:fe:d9:cd:c3:0a:40:76:c7:35:99:17:8b:
5e:77:16:35:0f:f5:86:0e:9c:3b:f5:7d:28:04:34:
45:c0:f8:df:7c:92:bd:2d:60:f9:d4:3b:eb:ff:b2:
5f:89:f7:e8:2e:9d:fe:09:70:cb:0d:33:80:b6:bf:
3f:e0:a9:91:89:fc:ee:0f:a6:d2:61:1c:c7:bb:d8:
95:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:18:75:0A:E2:51:B3:97:72:44:F7:02:D6:CB:E5:BB:F5:8A:A1
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KtwYdQriUbOXckT3AtbL5bv1iqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:38:a7:80:4f:be:89:bf:f8:33:fb:de:46:b5:e6:44:22:06:
f3:3a:e7:b6:58:bd:94:62:90:cf:16:06:ff:7e:34:37:b8:1e:
13:8a:b9:dd:99:84:93:44:21:88:11:1b:1d:f5:b4:6f:99:af:
c1:20:b2:94:9c:b3:c1:73:e0:9f:2c:9a:9d:a1:61:44:f8:34:
e2:bc:5e:37:0f:6c:4f:0a:11:99:a0:42:9f:eb:69:70:8e:29:
5c:a0:4f:66:de:fc:dc:a9:36:88:09:91:a8:d2:35:3e:48:81:
44:46:5e:80:ec:c0:52:6c:fa:2b:35:05:60:e4:b9:c6:71:9e:
e6:0b:83:2d:82:90:cb:af:d3:6f:88:2d:f9:e9:c1:26:90:13:
b9:45:b0:04:01:10:d8:19:10:4f:9c:da:23:67:87:bb:df:c5:
27:23:6d:73:07:06:9c:4e:a3:ee:49:23:98:a5:04:30:13:bb:
66:63:0f:89:99:14:e4:c5:2c:5c:ef:0a:18:6f:84:84:12:6f:
c3:09:fa:d1:54:89:1e:ad:8e:60:a0:72:28:0f:89:80:3d:79:
ad:21:ba:3b:19:ca:74:d9:e7:a2:03:7b:14:53:75:54:03:79:
26:6d:db:c3:7a:f6:40:62:9a:3b:74:d4:cb:25:7c:5d:b1:9a:
b1:16:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:44:53 2026 by rpki-client