Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qJE31s46ffwU1CAnKBAe2kTSgrM.roa
File: qJE31s46ffwU1CAnKBAe2kTSgrM.roa (raw, json)
Hash identifier: XjCiEsDpBjmcZn+fkG+7NkCPfxmvDNNq1hT+4yxphjs=
Subject key identifier: A8:91:37:D6:CE:3A:7D:FC:14:D4:20:27:28:10:1E:DA:44:D2:82:B3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82CCEC39DBE871B41847D6B094BC6E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qJE31s46ffwU1CAnKBAe2kTSgrM.roa
Signing time: Thu 26 Mar 2026 14:18:28 +0000
ROA not before: Thu 26 Mar 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396592
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:cc:ec:39:db:e8:71:b4:18:47:d6:b0:94:bc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a89137d6ce3a7dfc14d4202728101eda44d282b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:94:48:e3:2b:84:fb:47:9d:63:7d:35:b9:
98:f1:98:8d:fb:6a:e2:55:8d:f8:a4:5d:4d:47:06:
23:b3:19:8d:ba:a0:df:b2:45:d8:e4:2e:d5:10:6e:
16:5e:28:fc:44:a4:b8:d9:0c:91:b5:ab:46:2c:e7:
19:46:f2:2f:8c:32:80:51:f1:4a:a8:78:7f:af:5e:
0c:2c:c7:22:4d:5d:47:dc:79:42:ff:a3:cd:e6:4d:
ad:6d:7a:1e:3d:97:1a:9a:80:c2:aa:a0:65:19:88:
8f:95:ec:6f:53:94:d5:c2:55:fe:65:a5:49:5e:b0:
c9:d8:63:b1:cd:1a:d0:31:08:22:91:26:28:7b:95:
1b:d0:b1:24:7a:f0:a9:6f:b5:a2:f3:7b:aa:96:ff:
a8:14:9c:d4:e1:91:80:6e:96:66:d6:0a:0b:73:22:
37:ea:56:38:8d:ce:79:ca:54:ef:cd:e2:0b:fc:ed:
54:23:2a:c3:d0:7e:b3:ff:3e:74:a7:d9:c0:4b:03:
6a:df:00:48:70:13:c2:9c:62:ee:ba:41:8d:f7:2d:
a2:83:0f:61:7c:e2:fd:1d:e8:b0:88:d0:8c:c2:5f:
af:e7:df:b6:4c:07:b8:13:5e:df:83:0a:0f:81:f7:
54:93:fd:15:ea:f1:3b:ef:af:4c:79:0a:2c:88:9c:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:91:37:D6:CE:3A:7D:FC:14:D4:20:27:28:10:1E:DA:44:D2:82:B3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qJE31s46ffwU1CAnKBAe2kTSgrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
28:03:24:87:2c:9e:c0:21:65:31:df:0e:ca:2c:cc:56:e4:53:
d1:4c:e9:50:25:9e:d8:95:25:2a:ce:98:49:f4:cb:0f:39:c4:
17:fa:3a:b6:30:20:83:e6:de:94:17:76:5c:c3:17:9b:0b:43:
df:5b:6b:e2:88:88:13:c8:e9:86:49:94:ef:e5:9d:30:2c:4d:
d1:9f:39:b7:39:f1:4e:d8:c5:a5:1d:5b:a7:0a:e1:71:1f:4c:
6f:66:fe:fd:14:d8:b7:3c:ee:22:74:2b:73:4d:47:49:de:d6:
74:68:8e:83:3e:3c:7b:4d:0c:d1:95:8f:78:e2:1f:21:32:0a:
58:e8:9b:e2:54:4e:e1:17:86:00:29:34:ac:e4:a1:d7:42:3f:
25:ac:4f:be:f6:3a:7e:ea:ca:39:bd:f5:fa:a2:5a:41:77:81:
1d:b4:8e:83:2f:bf:16:cd:e3:73:b8:be:c8:d7:92:99:7e:41:
25:61:ab:cf:5a:da:d4:a9:a9:4e:b5:b9:41:9a:fc:94:06:3f:
80:38:10:e6:b5:c7:2e:9f:2d:e7:00:07:7b:d7:c7:33:27:3b:
30:18:0c:94:ac:ad:54:27:bd:d0:9d:10:54:33:fc:8b:9b:1b:
f2:57:7c:c7:2f:63:83:d0:cf:8c:dd:81:dc:80:7b:5d:b0:90:
1a:1b:5a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:13:21 2026 by rpki-client