Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Y8hoA4YYdmjBQ2gnHBRpXwhbBJU.roa
File: Y8hoA4YYdmjBQ2gnHBRpXwhbBJU.roa (raw, json)
Hash identifier: mDekDc+WnKosV/Ucf5L/AoSI2mbjw6a+aAENUFTSs/8=
Subject key identifier: 63:C8:68:03:86:18:76:68:C1:43:68:27:1C:14:69:5F:08:5B:04:95
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82BC972FB1B809928A8E2B69965B84
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Y8hoA4YYdmjBQ2gnHBRpXwhbBJU.roa
Signing time: Thu 26 Mar 2026 14:18:23 +0000
ROA not before: Thu 26 Mar 2026 14:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396552
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:bc:97:2f:b1:b8:09:92:8a:8e:2b:69:96:5b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63c8680386187668c14368271c14695f085b0495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:b6:00:cf:20:64:a4:bb:4d:70:23:24:11:
04:e2:d6:aa:1e:36:28:00:5d:43:e8:84:01:78:8d:
91:20:0d:05:15:9b:56:f2:ab:ca:23:93:0f:5f:10:
9b:12:a1:83:d9:ef:0d:df:67:11:b6:4d:fa:74:08:
13:a4:05:77:3f:47:23:da:08:29:c5:fb:8c:22:c5:
77:79:d6:3b:67:41:eb:af:3f:20:1c:34:a1:91:0c:
7b:55:5c:ca:91:03:f4:7d:ce:b0:2d:9c:a6:92:97:
f9:61:06:e4:0c:54:af:98:98:7a:1e:94:39:64:08:
18:e9:f4:35:06:4a:67:d3:50:6e:cd:7a:95:c2:2f:
39:a2:bc:dd:aa:d8:b2:f6:cb:b4:4c:22:38:2e:e8:
20:bc:48:e2:97:fe:ea:7f:6e:ae:1f:97:ca:c7:c0:
41:bb:e0:8d:9d:6e:69:80:d0:8e:94:9c:5b:9e:d0:
74:46:c2:d0:51:95:be:63:5e:01:05:15:87:87:3f:
2c:0b:96:e3:f8:b4:36:31:c1:cf:20:b6:69:51:6d:
c6:f5:4a:52:f3:3c:77:d4:46:9f:1d:91:98:71:a5:
39:80:87:36:a4:0b:02:ef:af:93:f5:af:5f:69:d4:
ce:56:6e:9c:50:8d:11:e4:38:44:ca:bf:5d:59:96:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C8:68:03:86:18:76:68:C1:43:68:27:1C:14:69:5F:08:5B:04:95
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Y8hoA4YYdmjBQ2gnHBRpXwhbBJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:51:c2:0f:2c:0f:96:c1:9f:00:23:a7:74:a8:7a:9c:ee:3c:
d6:9e:78:53:5f:86:9c:07:ad:63:7d:97:45:fc:6a:a3:0a:ce:
24:81:b2:c1:53:ad:44:e5:bb:3a:c5:e9:6e:b8:78:f1:19:bc:
58:8e:91:93:43:c3:6f:c1:50:9c:2b:68:8e:12:f6:22:80:70:
9e:f1:35:8c:2c:72:3c:b4:f9:c8:6e:26:1a:29:3e:fe:7e:0d:
46:74:17:f2:ce:ee:01:90:1c:bd:4f:d9:0e:86:c5:ef:ba:f0:
b8:f1:9a:28:6a:c9:3c:91:43:62:e1:8f:c5:bd:54:94:15:ff:
ca:1a:57:a0:a3:df:00:c9:02:e2:aa:68:f5:4d:34:2c:7a:de:
41:9b:ae:d9:9d:9c:98:df:1b:78:da:b7:89:8e:ec:be:bf:da:
76:0b:0c:06:b9:92:ed:26:57:8a:cf:76:d3:8e:3f:7d:0c:25:
0b:0b:8a:42:2b:ac:50:07:41:1d:8b:72:0c:e3:0c:1c:96:d0:
bd:e4:89:5e:e5:49:d7:26:1e:cb:dc:f8:d1:db:15:df:f4:ce:
5b:50:f1:2d:a7:b4:9d:05:cb:4b:ed:4c:0d:18:53:77:6c:17:
32:9c:79:d6:0f:c4:3c:b3:ae:76:d4:e4:92:b0:db:90:aa:89:
a6:c1:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:46:51 2026 by rpki-client