Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/V1UgkuIqIe97GRP4TuqsclIGaMk.roa
File: V1UgkuIqIe97GRP4TuqsclIGaMk.roa (raw, json)
Hash identifier: 5GgVHpoOMi6kLBdlU+EutKuiS2WMuyepnG7IXZu6+G0=
Subject key identifier: 57:55:20:92:E2:2A:21:EF:7B:19:13:F8:4E:EA:AC:72:52:06:68:C9
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82D08CE93A08D907BA4DC3E97A6A66
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/V1UgkuIqIe97GRP4TuqsclIGaMk.roa
Signing time: Thu 26 Mar 2026 14:18:29 +0000
ROA not before: Thu 26 Mar 2026 14:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396597
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:d0:8c:e9:3a:08:d9:07:ba:4d:c3:e9:7a:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57552092e22a21ef7b1913f84eeaac72520668c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:cc:af:7e:5c:35:b3:0b:55:a9:05:49:ad:
ad:80:15:74:8e:03:6e:bd:a2:cf:ec:b4:75:a5:3b:
a0:68:29:ea:e6:fc:05:b6:ba:13:54:40:38:0b:61:
34:b4:91:5a:6d:d9:b8:6d:65:96:d8:41:fc:ea:6d:
bf:9a:72:95:08:75:3c:08:39:b1:d8:b1:9a:02:98:
6d:5d:f5:d2:38:fa:68:78:ed:31:d8:c0:32:81:bc:
fa:ad:84:38:9d:48:16:f3:24:94:27:26:60:83:be:
27:ae:fc:b6:e4:21:d1:d8:45:51:4b:b9:f2:9d:9d:
04:cf:51:aa:5f:e5:bf:ed:dd:29:bc:c6:f3:50:85:
e6:34:90:33:f4:23:0d:ff:ca:f8:ef:ca:84:e6:a9:
69:d1:fc:c4:0e:38:8b:b3:d3:53:d2:35:fa:f1:f4:
a6:fe:16:cd:64:88:c2:d5:29:17:74:b1:d9:47:eb:
d2:e0:5c:aa:dd:7e:3f:99:bd:7f:6a:1c:5c:51:b6:
27:30:54:16:c7:77:eb:77:a7:65:31:93:52:d1:4c:
99:9c:d5:b6:5b:a7:32:82:31:18:42:b4:88:6e:b2:
60:7d:6c:d0:fc:d0:15:cd:30:ff:8c:3e:7a:7b:19:
27:8c:76:94:c3:a5:3e:cd:3b:5d:69:b1:de:2d:6c:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:55:20:92:E2:2A:21:EF:7B:19:13:F8:4E:EA:AC:72:52:06:68:C9
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/V1UgkuIqIe97GRP4TuqsclIGaMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5b:77:26:59:31:43:14:96:0c:d4:a4:68:0b:07:ca:92:a6:
cd:c9:57:da:8b:79:f0:75:14:c4:14:1f:86:a5:cb:35:c5:1b:
7d:a5:9b:8d:50:a1:3a:fc:09:8e:e4:b7:f4:15:c9:3f:b0:46:
c4:7c:4b:b1:13:2d:39:75:70:05:a1:cf:95:05:e7:4a:ad:39:
9c:92:e4:7a:a8:64:b4:2b:35:7f:98:37:be:2d:bb:e0:c8:b3:
30:79:72:2f:b6:87:c9:9f:8b:54:eb:b8:06:14:5c:ad:50:af:
40:5b:2a:a2:a6:4e:07:96:b6:47:fa:f8:ee:26:c0:5f:a8:34:
ad:d7:12:c4:ee:20:ae:88:55:58:b3:d9:dd:c0:13:44:0a:c2:
cc:9c:7e:96:b9:44:e3:c4:8c:46:85:43:e4:3b:ef:85:ee:ff:
6a:1e:23:3c:81:16:f2:a1:eb:e2:ee:49:d0:ea:31:38:5e:86:
f1:6b:78:4b:07:8f:6d:64:47:a9:a6:05:7b:5c:e3:3e:1a:fb:
8b:63:0d:ff:82:6c:9d:1b:86:8c:ac:fc:5e:3c:46:31:60:ef:
d9:66:e4:35:20:ce:ca:94:06:db:47:5b:ce:25:8c:35:65:90:
a5:7d:13:f0:04:0e:be:d0:e6:99:f8:4c:62:57:4a:b7:8c:f5:
85:55:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:01 2026 by rpki-client