Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YCLl6GJhzFouyMsl784XxWv8-n8.roa
File: YCLl6GJhzFouyMsl784XxWv8-n8.roa (raw, json)
Hash identifier: dzTyWBb2cXP+yyfwlYnSpyOI1VbLyFJlRmlXtmgBcbc=
Subject key identifier: 60:22:E5:E8:62:61:CC:5A:2E:C8:CB:25:EF:CE:17:C5:6B:FC:FA:7F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B7ABDED0F6664EAED4483614F65E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YCLl6GJhzFouyMsl784XxWv8-n8.roa
Signing time: Thu 26 Mar 2026 14:18:22 +0000
ROA not before: Thu 26 Mar 2026 14:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396544
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b7:ab:de:d0:f6:66:4e:ae:d4:48:36:14:f6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6022e5e86261cc5a2ec8cb25efce17c56bfcfa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:ed:d6:1d:c1:38:05:f6:07:ec:4e:3e:15:
7f:d8:88:fb:37:79:04:ea:e1:68:1f:cb:a7:2f:f0:
0f:a8:ad:f3:7f:64:06:f0:18:fb:ec:37:47:d9:4e:
ed:dd:21:e4:7b:41:9d:61:7c:57:19:10:84:0e:ef:
30:f6:c3:f4:34:ea:5f:e6:b2:76:ed:c3:66:1e:0c:
5d:e8:09:f9:fe:9d:5c:54:85:f0:96:a7:00:92:de:
68:ea:1e:5f:a7:6d:7d:4e:31:17:a4:2d:f7:17:df:
01:03:b5:5f:14:fb:ec:b0:7f:12:e0:71:62:dc:67:
a1:39:07:87:81:60:e9:b4:69:5a:f6:da:d6:0e:e1:
0c:3a:22:56:0b:71:4f:05:28:a1:f9:64:f8:04:25:
77:a2:58:6d:67:2e:1c:67:37:8e:1e:ae:a4:06:d8:
51:d3:cc:0b:4d:55:66:2f:c0:83:18:f5:40:9c:61:
07:2e:9a:79:26:74:1c:9f:e5:de:a2:3e:a7:41:2f:
75:0b:2e:e6:3f:4e:db:4c:84:b3:76:8e:08:8d:ec:
ca:a8:38:ce:b5:2b:48:9b:53:0a:be:7b:7e:6c:33:
fe:3b:57:93:43:35:ed:be:b1:96:67:69:f2:05:50:
d3:83:bc:69:69:46:fb:7e:68:cf:56:53:d9:a6:ef:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:22:E5:E8:62:61:CC:5A:2E:C8:CB:25:EF:CE:17:C5:6B:FC:FA:7F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YCLl6GJhzFouyMsl784XxWv8-n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ce:55:7b:a5:86:d5:26:1b:e5:c7:c0:53:7b:2d:e5:1a:2c:
98:4f:89:5e:9d:b8:63:d0:e4:50:d0:66:7c:e1:c2:8f:55:af:
e6:2c:da:79:27:9c:04:72:43:37:8c:f8:27:81:10:87:75:42:
70:6d:cd:e6:c4:37:2d:66:5d:0b:3f:47:e5:76:1f:93:7b:af:
ad:3d:3e:c3:e4:d7:f7:f0:21:8d:1a:42:9b:0c:40:7a:ae:6f:
43:a9:32:8e:54:c9:8c:13:e1:e5:55:db:f5:c5:65:57:e6:d8:
32:f5:61:d7:1d:7e:01:3f:f3:85:e2:b3:84:81:a1:ce:50:03:
91:d6:57:b3:a9:70:39:55:6c:d2:12:3c:57:77:8e:b0:04:76:
4c:7c:13:37:36:3b:43:75:85:cb:ec:a9:05:43:5d:90:0a:56:
d1:f1:ac:09:56:75:52:51:74:40:58:5f:59:16:3e:9e:e2:41:
28:8a:da:0f:40:a5:ac:5a:82:f1:1f:92:a3:b5:d2:a8:b5:e7:
19:46:2f:b4:1a:7f:94:45:3d:77:fa:32:60:02:9d:fe:30:4c:
7c:4b:6e:ca:8f:10:fc:2a:9b:8b:18:55:0d:67:47:b2:2f:c9:
f2:89:e3:7f:5a:57:14:62:eb:6e:a8:07:87:90:5d:d1:b3:7f:
ab:f0:3e:9a
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0qgrer3tD2Zk6u1Eg2FPZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwMzI2MTQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDIyZTVlODYyNjFjYzVhMmVjOGNiMjVlZmNlMTdjNTZiZmNmYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Ht1h3BOAX2B+xOPhV/2Ij7N3kE
6uFoH8unL/APqK3zf2QG8Bj77DdH2U7t3SHke0GdYXxXGRCEDu8w9sP0NOpf5rJ2
7cNmHgxd6An5/p1cVIXwlqcAkt5o6h5fp219TjEXpC33F98BA7VfFPvssH8S4HFi
3GehOQeHgWDptGla9trWDuEMOiJWC3FPBSih+WT4BCV3olhtZy4cZzeOHq6kBthR
08wLTVVmL8CDGPVAnGEHLpp5JnQcn+Xeoj6nQS91Cy7mP07bTISzdo4IjezKqDjO
tStIm1MKvnt+bDP+O1eTQzXtvrGWZ2nyBVDTg7xpaUb7fmjPVlPZpu8VPwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFGAi5ehiYcxaLsjLJe/OF8Vr/Pp/MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvWUNMbDZHSmh6Rm91eU1zbDc4NFh4V3Y4LW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUBURPDHgME
ALlkADANBgkqhkiG9w0BAQsFAAOCAQEAHs5Ve6WG1SYb5cfAU3st5RosmE+JXp24
Y9DkUNBmfOHCj1Wv5izaeSecBHJDN4z4J4EQh3VCcG3N5sQ3LWZdCz9H5XYfk3uv
rT0+w+TX9/AhjRpCmwxAeq5vQ6kyjlTJjBPh5VXb9cVlV+bYMvVh1x1+AT/zheKz
hIGhzlADkdZXs6lwOVVs0hI8V3eOsAR2THwTNzY7Q3WFy+ypBUNdkApW0fGsCVZ1
UlF0QFhfWRY+nuJBKIraD0ClrFqC8R+So7XSqLXnGUYvtBp/lEU9d/oyYAKd/jBM
fEtuyo8Q/CqbixhVDWdHsi/J8onjf1pXFGLrbqgHh5Bd0bN/q/A+mg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:32:05 2026 by rpki-client