Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xX7HERbS2Sp4izX6UkuLP2TbhhE.roa
File: xX7HERbS2Sp4izX6UkuLP2TbhhE.roa (raw, json)
Hash identifier: beYP2j0TBzUh4ofDhPh3hzthRvSFOUVA0K3ak095dt0=
Subject key identifier: C5:7E:C7:11:16:D2:D9:2A:78:8B:35:FA:52:4B:8B:3F:64:DB:86:11
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D2A82B9F5A3B1667ADFED83FB54828D54
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xX7HERbS2Sp4izX6UkuLP2TbhhE.roa
Signing time: Thu 26 Mar 2026 14:18:23 +0000
ROA not before: Thu 26 Mar 2026 14:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396549
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:82:b9:f5:a3:b1:66:7a:df:ed:83:fb:54:82:8d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Mar 26 14:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c57ec71116d2d92a788b35fa524b8b3f64db8611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:bb:89:95:d9:c4:c0:bc:6c:62:33:51:80:
c8:da:bc:cf:c0:cd:44:ff:20:f7:79:02:df:8d:e1:
2b:a4:41:b9:44:ca:92:b8:53:fc:b6:7c:9d:d2:6f:
64:b1:b2:35:45:ec:63:72:19:a2:85:c9:41:75:f3:
8d:a3:40:27:35:1d:75:12:89:de:0d:c4:dd:33:b4:
3b:b8:c0:45:76:b9:4d:29:ae:e9:a3:1f:a0:0c:44:
ac:c8:6a:46:67:50:23:d7:0f:57:5d:ed:b4:6d:f8:
84:37:ca:d2:eb:e9:ec:52:6b:35:4f:e4:23:e0:85:
5e:c0:94:c3:6f:fe:26:f7:59:85:a7:80:9d:13:68:
e4:65:68:0d:b1:c6:df:a3:d8:86:8b:98:0f:8e:4f:
2f:53:27:48:01:f9:ad:35:e0:2f:ae:a0:aa:d8:b4:
60:58:be:d8:b4:03:ce:87:83:89:0e:48:88:13:0a:
ec:c1:2b:da:c5:87:3c:89:17:af:9d:c2:8d:e1:67:
bc:fb:90:8f:09:f4:b1:e5:2f:97:bb:6c:a0:7e:47:
a6:29:1f:2c:5a:11:40:67:21:fa:dd:2d:30:26:d5:
05:3f:e0:d7:12:c8:d9:d6:86:84:0c:3f:18:b2:64:
ab:49:2a:8b:cc:5e:6b:e0:5d:23:66:87:7e:58:91:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7E:C7:11:16:D2:D9:2A:78:8B:35:FA:52:4B:8B:3F:64:DB:86:11
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xX7HERbS2Sp4izX6UkuLP2TbhhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ee:7c:94:24:d2:98:7d:02:26:bd:3b:40:0c:c5:a6:56:58:
d5:4e:0e:62:d6:fd:ec:c5:fa:ea:64:93:5d:08:ff:91:df:f1:
d5:48:eb:33:10:79:9a:db:a6:c1:32:ce:67:2d:5d:d0:bc:1c:
05:a5:b1:d5:40:fb:16:fd:c9:65:72:ae:c2:65:5c:af:4a:59:
51:25:e0:68:1b:f6:f8:2c:5b:bb:49:23:d1:c0:a2:fb:cd:cb:
5e:20:1f:14:16:ff:5c:3e:38:3a:39:a2:84:a2:a0:86:d3:2a:
0f:4b:34:6e:69:06:e1:36:ad:da:7b:ad:b6:02:61:d5:09:48:
4b:e4:95:ea:83:b5:5c:0a:c5:9f:c7:0c:a0:5c:16:4c:00:25:
75:23:59:19:a7:86:72:02:8a:e4:3b:7e:2b:ea:51:f7:dc:e2:
04:fe:25:ac:27:f2:7c:d3:e5:a5:d5:b4:6c:02:71:21:52:d7:
f1:03:61:90:bd:c9:a5:25:39:9e:16:b9:92:07:cf:44:b0:19:
3d:63:c1:9c:a2:62:92:3e:15:7b:20:ca:17:89:7a:62:24:f5:
94:f2:4c:1f:0f:10:7c:89:4d:60:82:4f:ac:9f:a6:6a:1b:5f:
9a:49:05:d5:c7:5d:a0:cc:c6:66:7d:0e:d2:7a:3d:5b:b7:4e:
be:c5:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:57 2026 by rpki-client