Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/OP4GnLmThCBFy87U3IPXWaJdkGA.roa
File: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (raw, json)
Hash identifier: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=
Subject key identifier: 38:FE:06:9C:B9:93:84:20:45:CB:CE:D4:DC:83:D7:59:A2:5D:90:60
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 019F4B4B25346CCDCB17831F02FA8ED41B57
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/OP4GnLmThCBFy87U3IPXWaJdkGA.roa
Signing time: Fri 10 Jul 2026 09:10:43 +0000
ROA not before: Fri 10 Jul 2026 09:10:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 86.36.64.0/19 maxlen: 24
185.37.96.0/24 maxlen: 24
185.37.97.0/24 maxlen: 24
185.37.98.0/24 maxlen: 24
185.37.108.0/22 maxlen: 24
2a00:f0e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:4b:25:34:6c:cd:cb:17:83:1f:02:fa:8e:d4:1b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Jul 10 09:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38fe069cb993842045cbced4dc83d759a25d9060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:4c:73:23:68:1a:93:9f:2e:84:46:7c:a8:
c3:d2:63:fb:74:4a:fb:52:02:72:e9:a0:67:01:fa:
f5:04:98:11:72:3f:c3:e1:88:77:f8:70:8f:60:5b:
b3:b8:b1:d5:a1:ae:da:94:d0:2a:67:52:21:f7:ab:
14:8f:55:ef:10:7f:3e:2a:41:32:e3:08:16:40:2c:
95:40:da:7d:30:cb:69:9b:13:6c:ff:ba:e2:d4:3d:
63:e9:ad:c7:f0:a9:4c:e1:f8:21:c7:23:9d:d1:dd:
dc:a5:e1:e7:4c:22:08:ad:47:4c:4e:75:bd:69:04:
36:0e:cd:5f:80:6d:52:40:3b:aa:22:e1:e2:3f:aa:
31:1c:75:b9:15:73:6c:ea:ef:c3:cb:6d:d9:22:00:
61:b8:69:a3:fe:9f:42:59:7f:a3:57:50:19:e3:bd:
b5:75:4b:0c:78:21:9b:09:c6:92:c2:fb:b6:c6:56:
b3:1d:3c:8b:c6:1f:5c:a5:1c:87:b0:e9:74:39:18:
c0:b8:60:18:23:33:7a:09:e2:b5:ec:69:8b:b7:c5:
2a:8e:74:c7:b8:0e:96:31:22:d0:8b:9e:50:88:1c:
b4:17:58:7e:8b:13:6f:42:a8:f6:8a:cc:9a:0d:94:
1f:d4:29:bc:10:f1:63:16:c5:7a:27:49:1d:7f:cc:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FE:06:9C:B9:93:84:20:45:CB:CE:D4:DC:83:D7:59:A2:5D:90:60
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/OP4GnLmThCBFy87U3IPXWaJdkGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.36.64.0/19
185.37.96.0-185.37.98.255
185.37.108.0/22
IPv6:
2a00:f0e0::/32
Signature Algorithm: sha256WithRSAEncryption
31:46:87:46:4c:bc:aa:3e:91:98:47:f9:dd:e2:6c:95:a1:0c:
97:86:c0:db:f5:58:69:62:eb:a3:06:75:29:0e:a3:19:30:62:
fe:6a:fb:78:10:bb:51:77:1b:6f:77:9f:65:99:95:b4:fe:a0:
81:a7:44:62:bc:a1:ee:44:3e:d2:ba:b6:0f:65:02:e1:a6:9d:
98:82:e0:27:5a:0c:9b:7d:44:a3:9f:17:0a:e5:54:2a:08:8b:
00:de:f6:a6:32:76:dd:68:33:96:29:3a:ca:6a:ce:52:a3:ce:
da:1f:7f:26:ee:53:00:02:09:ac:b0:75:3c:4d:41:6f:84:84:
85:29:d3:0f:44:47:d7:44:26:08:03:0b:47:58:2e:d2:d3:a1:
57:e9:a2:14:6f:d2:c2:95:72:ce:3b:65:26:d3:d5:78:10:e2:
02:27:18:76:5c:7d:72:f2:19:b9:b9:2c:08:03:c7:b6:de:aa:
03:65:37:cb:8d:af:1d:8f:20:26:57:cc:a1:b8:80:23:61:3e:
c4:70:62:0a:36:db:cf:45:e5:61:27:e3:e2:f7:11:6d:22:b2:
a2:75:a3:95:01:27:50:ad:f8:b2:86:60:c3:bb:9a:be:16:6e:
fd:7d:c2:91:50:6f:4d:4d:b8:a8:8f:4a:fd:68:78:83:64:82:
cd:d1:cc:36
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZ9LSyU0bM3LF4MfAvqO1BtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGJhYjJmNGM1YjYyOTM1ODE1OTM0ZjRhODFmNTYwZDJk
NzMyYzgwHhcNMjYwNzEwMDkxMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGZlMDY5Y2I5OTM4NDIwNDVjYmNlZDRkYzgzZDc1OWEyNWQ5MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAladMcyNoGpOfLoRGfKjD0mP7dEr7
UgJy6aBnAfr1BJgRcj/D4Yh3+HCPYFuzuLHVoa7alNAqZ1Ih96sUj1XvEH8+KkEy
4wgWQCyVQNp9MMtpmxNs/7ri1D1j6a3H8KlM4fghxyOd0d3cpeHnTCIIrUdMTnW9
aQQ2Ds1fgG1SQDuqIuHiP6oxHHW5FXNs6u/Dy23ZIgBhuGmj/p9CWX+jV1AZ4721
dUsMeCGbCcaSwvu2xlazHTyLxh9cpRyHsOl0ORjAuGAYIzN6CeK17GmLt8UqjnTH
uA6WMSLQi55QiBy0F1h+ixNvQqj2isyaDZQf1Cm8EPFjFsV6J0kdf8wP8wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFDj+Bpy5k4QgRcvO1NyD11miXZBgMB8GA1UdIwQY
MBaAFEeLqy9MW2KTWBWTT0qB9WDS1zLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR1ckwweGJZcE5ZRlpOUFNvSDFZTkxYTXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMjc0YTEtZjhmYi00ZWVkLTgzMmUt
NDJhZDJmMjI1ZmVmLzEvT1A0R25MbVRoQ0JGeTg3VTNJUFhXYUpka0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMjc0YTEtZjhmYi00ZWVkLTgzMmUtNDJhZDJmMjI1ZmVm
LzEvUjR1ckwweGJZcE5ZRlpOUFNvSDFZTkxYTXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQFViRAMAwD
BAW5JWADBAC5JWIDBAK5JWwwDQQCAAIwBwMFACoA8OAwDQYJKoZIhvcNAQELBQAD
ggEBADFGh0ZMvKo+kZhH+d3ibJWhDJeGwNv1WGli66MGdSkOoxkwYv5q+3gQu1F3
G293n2WZlbT+oIGnRGK8oe5EPtK6tg9lAuGmnZiC4CdaDJt9RKOfFwrlVCoIiwDe
9qYydt1oM5YpOspqzlKjztoffybuUwACCaywdTxNQW+EhIUp0w9ER9dEJggDC0dY
LtLToVfpohRv0sKVcs47ZSbT1XgQ4gInGHZcfXLyGbm5LAgDx7beqgNlN8uNrx2P
ICZXzKG4gCNhPsRwYgo2289F5WEn4+L3EW0isqJ1o5UBJ1Ct+LKGYMO7mr4Wbv19
wpFQb01NuKiPSv1oeINkgs3RzDY=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:41 2026 by rpki-client