Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xOM3y0JOm7vXloQCsujlieq0pX4.roa
File: xOM3y0JOm7vXloQCsujlieq0pX4.roa (raw, json)
Hash identifier: UDFx1Qvus0T3c9EJlwPXudw8UJl94/2CKuV3aEAWIhA=
Subject key identifier: C4:E3:37:CB:42:4E:9B:BB:D7:96:84:02:B2:E8:E5:89:EA:B4:A5:7E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01A16437E5BADBAD7BA94E1BB25A87D8EFAA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xOM3y0JOm7vXloQCsujlieq0pX4.roa
Signing time: Thu 22 Oct 2026 15:25:47 +0000
ROA not before: Thu 22 Oct 2026 15:25:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7342
IP address blocks: 81.19.192.0/24 maxlen: 24
81.19.193.0/24 maxlen: 24
81.19.196.0/24 maxlen: 24
81.19.197.0/24 maxlen: 24
81.19.198.0/24 maxlen: 24
81.19.199.0/24 maxlen: 24
81.19.200.0/24 maxlen: 24
81.19.201.0/24 maxlen: 24
81.19.202.0/24 maxlen: 24
81.19.203.0/24 maxlen: 24
81.19.204.0/24 maxlen: 24
81.19.205.0/24 maxlen: 24
81.19.206.0/24 maxlen: 24
81.19.207.0/24 maxlen: 24
185.100.1.0/24 maxlen: 24
185.100.2.0/24 maxlen: 24
185.100.3.0/24 maxlen: 24
193.109.220.0/24 maxlen: 24
194.110.75.0/24 maxlen: 24
217.30.80.0/24 maxlen: 24
217.30.80.7/32 maxlen: 32
217.30.81.0/24 maxlen: 24
217.30.82.0/24 maxlen: 24
217.30.83.0/24 maxlen: 24
217.30.84.0/24 maxlen: 24
217.30.85.0/24 maxlen: 24
217.30.86.0/24 maxlen: 24
217.30.87.0/24 maxlen: 24
217.30.89.0/24 maxlen: 24
217.30.90.0/24 maxlen: 24
217.30.91.0/24 maxlen: 24
217.30.92.0/24 maxlen: 24
217.30.93.0/24 maxlen: 24
217.30.94.0/24 maxlen: 24
217.30.95.0/24 maxlen: 24
2a10:eec0::/48 maxlen: 48
2a10:eec0:1::/48 maxlen: 48
2a10:eec0:2::/48 maxlen: 48
2a10:eec0:2:101::7/128 maxlen: 128
2a10:eec0:3::/48 maxlen: 48
2a10:eec0:4::/48 maxlen: 48
2a10:eec0:5::/48 maxlen: 48
2a10:eec0:6::/48 maxlen: 48
2a10:eec0:7::/48 maxlen: 48
2a10:eec0:8::/48 maxlen: 48
2a10:eec0:9::/48 maxlen: 48
2a10:eec0:a::/48 maxlen: 48
2a10:eec0:c::/48 maxlen: 48
2a10:eec0:d::/48 maxlen: 48
2a10:eec0:e::/48 maxlen: 48
2a10:eec0:f::/48 maxlen: 48
2a10:eec0:10::/48 maxlen: 48
2a10:eec0:11::/48 maxlen: 48
2a10:eec0:12::/48 maxlen: 48
2a10:eec0:13::/48 maxlen: 48
2a10:eec0:14::/48 maxlen: 48
2a10:eec0:15::/48 maxlen: 48
2a10:eec0:16::/48 maxlen: 48
2a10:eec0:17::/48 maxlen: 48
2a10:eec0:18::/48 maxlen: 48
2a10:eec0:19::/48 maxlen: 48
2a10:eec0:1a::/48 maxlen: 48
2a10:eec0:1b::/48 maxlen: 48
2a10:eec0:1c::/48 maxlen: 48
2a10:eec0:1d::/48 maxlen: 48
2a10:eec0:1e::/48 maxlen: 48
2a10:eec0:1f::/48 maxlen: 48
2a10:eec0:20::/48 maxlen: 48
2a10:eec0:21::/48 maxlen: 48
2a10:eec0:22::/48 maxlen: 48
2a10:eec0:30::/48 maxlen: 48
2a10:eec0:31::/48 maxlen: 48
2a10:eec0:32::/48 maxlen: 48
2a10:eec0:33::/48 maxlen: 48
2a10:eec0:34::/48 maxlen: 48
2a10:eec0:40::/48 maxlen: 48
2a10:eec0:41::/48 maxlen: 48
2a10:eec0:42::/48 maxlen: 48
2a10:eec0:43::/48 maxlen: 48
2a10:eec0:50::/48 maxlen: 48
2a10:eec0:51::/48 maxlen: 48
2a10:eec0:52::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:37:e5:ba:db:ad:7b:a9:4e:1b:b2:5a:87:d8:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Oct 22 15:25:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4e337cb424e9bbbd7968402b2e8e589eab4a57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:3e:4a:bd:af:c4:6f:d1:fa:4b:80:16:8b:
05:ea:1f:5c:52:2f:6b:40:64:9d:6b:31:9b:e5:24:
fc:12:b7:69:23:69:46:90:de:26:74:ae:7e:22:b4:
87:09:ad:64:11:58:c1:19:8d:50:13:43:b9:8e:11:
60:c4:bb:0c:6d:73:74:c4:2d:24:89:f0:34:b5:bc:
2d:ff:a7:de:57:cc:38:a1:21:80:c0:b5:bb:20:81:
9b:11:4a:9f:5f:05:d7:ff:a2:38:c5:6b:eb:2a:a3:
ac:7e:b3:1c:69:9e:1a:ee:6f:70:1c:a7:c4:26:a9:
f3:c6:a0:e8:32:89:69:40:2e:8f:8b:5c:5d:7c:d8:
87:b8:85:4e:99:96:e7:ff:d1:f3:ea:42:cc:cd:d1:
b2:a1:78:23:ab:21:b0:6b:58:01:c5:37:f2:75:f1:
4f:c3:42:92:38:3e:6b:2b:6c:16:12:38:86:b0:f6:
84:ef:75:ba:59:30:61:d3:51:06:ed:7e:b6:13:be:
8f:9c:ea:fa:24:ab:34:a2:1b:85:de:9b:c0:73:6d:
92:73:e1:28:33:40:3d:65:69:1d:a7:fb:90:b2:ac:
50:80:f1:4c:98:6a:a2:c3:b0:cd:45:69:67:93:7d:
3b:c8:83:56:91:bd:0f:bf:98:ac:33:a8:2a:d2:a7:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E3:37:CB:42:4E:9B:BB:D7:96:84:02:B2:E8:E5:89:EA:B4:A5:7E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xOM3y0JOm7vXloQCsujlieq0pX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.192.0/23
81.19.196.0-81.19.207.255
185.100.1.0-185.100.3.255
193.109.220.0/24
194.110.75.0/24
217.30.80.0/21
217.30.89.0-217.30.95.255
IPv6:
2a10:eec0::-2a10:eec0:a:ffff:ffff:ffff:ffff:ffff
2a10:eec0:c::-2a10:eec0:22:ffff:ffff:ffff:ffff:ffff
2a10:eec0:30::-2a10:eec0:34:ffff:ffff:ffff:ffff:ffff
2a10:eec0:40::/46
2a10:eec0:50::-2a10:eec0:52:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:a7:3c:ab:92:ba:05:6f:07:a0:46:0d:9e:69:6d:9c:b7:61:
43:51:a4:22:19:00:22:bf:2f:3d:ec:bd:6b:bc:a2:1a:be:16:
a6:f2:0d:e5:a3:d4:9f:3c:36:95:f8:33:00:c5:4b:65:ea:32:
87:03:fc:20:72:f5:f7:e8:d7:14:b6:be:39:1a:1c:a7:cd:a7:
41:48:b1:bb:a4:a5:f5:18:4a:43:30:6d:2a:fc:4a:6e:d9:b6:
69:8c:82:a0:5d:12:a8:eb:a3:75:52:79:c3:8b:81:8c:bf:99:
f8:53:b9:60:26:70:82:d6:b5:5b:b2:4c:05:d0:ad:b9:b1:38:
78:d0:3a:08:bc:b7:ac:7b:3f:de:3a:58:cb:18:d1:71:04:ff:
b7:84:be:68:19:5a:22:92:0d:ec:f8:7a:5e:66:94:31:f8:f9:
d8:93:40:44:36:b3:9f:c4:d4:f8:05:e9:dd:f9:3a:26:b9:67:
f2:dd:79:ea:03:b6:14:bd:0e:ad:c2:fc:f3:d9:bf:d9:a4:7e:
96:7a:ff:8e:27:ef:21:49:13:92:e9:a6:b9:a9:88:30:49:02:
f3:29:2c:2e:76:e6:27:a2:30:93:3d:07:0d:97:b3:62:d3:8d:
5a:02:36:3f:0b:b8:24:69:01:45:3e:d9:92:e6:15:d4:ab:17:
d2:90:1b:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:08:44 2026 by rpki-client