Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TF2TIkc5_GYIjRuv5QRJs0wiaAQ.roa
File: TF2TIkc5_GYIjRuv5QRJs0wiaAQ.roa (raw, json)
Hash identifier: RsQvfkcE8yLY55j9/4bWu19OryzlwObP9b//NF/WKfk=
Subject key identifier: 4C:5D:93:22:47:39:FC:66:08:8D:1B:AF:E5:04:49:B3:4C:22:68:04
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82C5C97B7E8DBDE6221623ABA6D7F9
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TF2TIkc5_GYIjRuv5QRJs0wiaAQ.roa
Signing time: Thu 26 Mar 2026 14:18:26 +0000
ROA not before: Thu 26 Mar 2026 14:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396580
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:c5:c9:7b:7e:8d:bd:e6:22:16:23:ab:a6:d7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c5d93224739fc66088d1bafe50449b34c226804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:70:0b:76:d9:83:44:18:e7:25:8b:be:07:
ab:24:ba:3c:71:0d:fd:96:83:ab:cb:75:36:a0:be:
4e:f1:18:ea:55:cf:04:9f:8a:28:76:7e:03:da:35:
7f:a3:ae:8d:71:ed:0d:07:01:7b:df:8d:c7:72:cf:
a1:09:19:55:8b:d1:ae:ad:6b:3b:fe:ee:08:48:ad:
f2:3c:64:04:91:e1:23:3f:4f:12:fb:fc:ff:a0:d4:
5a:46:12:73:cd:3a:a2:a9:89:d0:ab:f9:43:32:b9:
e5:53:10:dd:0c:ca:e6:a1:9e:dc:78:ad:76:55:83:
e2:c8:01:f7:13:e6:ca:ef:b6:6f:65:87:71:95:ba:
3f:da:e0:0f:68:41:fd:0c:1e:f6:00:0f:c8:a7:b7:
c8:49:6c:4f:56:e8:42:51:d5:66:4c:e9:16:b6:f9:
01:88:75:db:ad:f6:01:2f:c7:63:30:b5:1f:71:f5:
bc:29:7a:f7:1b:47:b5:3b:8a:07:e4:1c:0c:b1:38:
3a:4f:04:1c:a2:0c:8e:de:d4:dc:39:65:81:23:7b:
8b:69:33:20:46:52:bf:5a:70:41:50:88:95:13:f9:
31:d0:af:59:6d:4f:a0:94:15:98:a0:cf:7b:9b:cf:
13:07:90:c1:d5:f8:4e:41:6a:29:28:4d:b0:23:9e:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5D:93:22:47:39:FC:66:08:8D:1B:AF:E5:04:49:B3:4C:22:68:04
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/TF2TIkc5_GYIjRuv5QRJs0wiaAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
29:58:76:49:d0:d0:af:66:e3:b5:37:36:6a:8f:d0:4d:87:b6:
9e:cc:51:e7:1e:a8:bc:de:fc:83:28:c1:a5:db:8b:c0:0b:25:
50:c1:9c:a2:77:7a:ac:af:3b:41:ef:cf:ff:a9:3b:55:ed:ea:
de:95:4a:3a:61:78:a6:29:08:5a:d1:cf:26:29:03:5f:72:6a:
3c:ef:86:78:e7:9d:b5:51:72:34:ce:64:be:78:c9:75:22:70:
7e:bd:cb:0c:57:93:07:62:e6:d7:1a:68:3f:25:86:9a:04:2a:
a7:c7:6d:08:59:12:37:bb:f4:18:72:4a:fb:52:42:b3:07:2e:
35:70:5c:ac:eb:b9:f2:fe:12:43:cc:47:95:d0:b9:2a:b9:28:
ae:2a:80:0d:29:db:30:76:0e:c1:f7:b3:01:c1:8c:77:57:cf:
2b:8d:9e:8b:1f:b1:f5:45:e6:c3:fb:0c:2f:7d:29:1f:b4:65:
ec:ec:fd:56:da:a6:f0:67:46:b8:57:47:1c:1e:aa:55:12:aa:
b1:ca:1e:3a:95:07:69:52:2a:8c:4f:55:2f:49:3c:1b:fb:7e:
27:c9:e0:75:60:c9:c4:33:8c:65:d8:bf:d9:38:43:aa:79:83:
e2:11:70:a5:14:1d:56:9f:5d:0f:e4:92:d2:5e:6d:44:4a:e1:
00:a1:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:11:31 2026 by rpki-client