Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Oq-yvhdwhm-dGY0yDsBIewgYM5U.roa
File: Oq-yvhdwhm-dGY0yDsBIewgYM5U.roa (raw, json)
Hash identifier: pac9c2aNnIW4yFhh6Zy3bhjbKluS3OSImLEjwwfj82Y=
Subject key identifier: 3A:AF:B2:BE:17:70:86:6F:9D:19:8D:32:0E:C0:48:7B:08:18:33:95
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D9586EF51C6C2CACD853FCA6F98149FB2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Oq-yvhdwhm-dGY0yDsBIewgYM5U.roa
Signing time: Thu 16 Apr 2026 09:02:21 +0000
ROA not before: Thu 16 Apr 2026 09:02:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 37.98.146.0/24 maxlen: 24
82.153.51.0/24 maxlen: 24
82.163.8.0/24 maxlen: 24
89.31.238.0/24 maxlen: 24
109.176.213.0/24 maxlen: 24
213.218.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:86:ef:51:c6:c2:ca:cd:85:3f:ca:6f:98:14:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 16 09:02:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3aafb2be1770866f9d198d320ec0487b08183395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:85:c6:68:04:08:94:3b:59:ad:fb:fd:85:
2f:dc:be:6a:dd:87:53:02:c3:ad:f8:38:3b:49:63:
fc:95:74:be:fc:26:aa:f1:30:fb:b8:a3:ba:f2:98:
ea:51:26:d5:2c:1c:f5:f4:a2:7d:8c:9f:e5:f6:8c:
d6:38:06:ff:6a:6a:9f:70:ea:5f:17:ee:3a:9b:e0:
01:43:e1:5a:b0:9d:c7:ff:3c:0d:69:d3:fb:a3:55:
8f:4a:4b:e0:32:56:ad:f5:40:e0:96:fb:2f:87:eb:
6a:6e:2a:00:6b:44:fe:cb:f1:46:1c:a1:16:b1:b1:
c0:53:0d:05:54:bc:c9:83:12:cd:3b:01:dc:b4:2a:
5f:db:63:33:c8:7b:e1:05:0e:f4:2f:06:b8:26:f6:
a8:c0:dd:23:21:55:cf:ba:dc:2b:39:88:25:d1:89:
bd:f5:4b:da:24:89:ab:ed:cc:45:2c:90:68:b6:c1:
95:b9:87:a5:39:4e:da:a1:42:c8:c1:04:0d:be:f3:
40:05:e8:bf:f8:d1:ba:c7:32:77:8c:79:29:bd:08:
bf:c6:df:c9:b3:4a:c6:9d:8f:25:be:3c:ce:13:69:
47:e1:d6:25:72:35:32:14:a4:c8:d7:d8:16:f2:ba:
ca:57:fc:2d:e9:d1:32:4c:25:b9:65:28:46:e2:19:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:B2:BE:17:70:86:6F:9D:19:8D:32:0E:C0:48:7B:08:18:33:95
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Oq-yvhdwhm-dGY0yDsBIewgYM5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.146.0/24
82.153.51.0/24
82.163.8.0/24
89.31.238.0/24
109.176.213.0/24
213.218.224.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ab:fd:5b:fc:d3:b5:e1:43:cf:3a:ac:23:24:ae:3d:d7:8d:
81:92:75:93:dd:e7:1d:b6:86:7f:18:a7:de:90:b6:24:0a:af:
b3:f3:49:ab:cd:be:85:04:8f:5a:73:31:c4:64:fc:88:bb:df:
21:7a:0c:31:5a:0b:60:97:39:d4:06:5a:99:c1:65:68:e2:35:
d0:f6:90:dd:ab:a2:72:fe:10:6b:dc:8c:2b:f3:74:7c:90:0e:
2f:ce:0c:e9:5b:62:1f:a8:51:f3:1f:82:20:cd:29:76:b3:8c:
fb:57:5a:40:3f:89:8c:db:cd:c1:7f:91:e0:c0:95:92:33:03:
b9:c8:5b:9f:8b:d1:55:63:34:18:66:cc:b3:2d:84:26:c9:ea:
3b:f8:3c:1f:2d:5d:aa:e0:fd:2c:d5:a0:19:e5:1e:01:4e:02:
20:99:0d:95:23:b1:18:e6:9b:4d:81:cd:d3:41:e8:ce:e6:8b:
e7:98:21:ae:7e:1e:3c:ae:8f:c7:7b:6b:e1:6a:38:fc:84:90:
05:80:78:8c:eb:0f:3c:86:37:6f:15:c0:53:3b:c8:86:e7:72:
17:1a:cc:c6:7d:d2:59:3d:bd:92:32:e2:e1:7e:4c:48:15:78:
d6:21:40:64:61:74:b5:f0:72:41:61:0d:80:b6:4e:15:c1:26:
8f:cc:4e:29
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ2Vhu9RxsLKzYU/ym+YFJ+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNDE2MDkwMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWFmYjJiZTE3NzA4NjZmOWQxOThkMzIwZWMwNDg3YjA4MTgzMzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtaFxmgECJQ7Wa37/YUv3L5q3YdT
AsOt+Dg7SWP8lXS+/Caq8TD7uKO68pjqUSbVLBz19KJ9jJ/l9ozWOAb/amqfcOpf
F+46m+ABQ+FasJ3H/zwNadP7o1WPSkvgMlat9UDglvsvh+tqbioAa0T+y/FGHKEW
sbHAUw0FVLzJgxLNOwHctCpf22MzyHvhBQ70Lwa4JvaowN0jIVXPutwrOYgl0Ym9
9UvaJImr7cxFLJBotsGVuYelOU7aoULIwQQNvvNABei/+NG6xzJ3jHkpvQi/xt/J
s0rGnY8lvjzOE2lH4dYlcjUyFKTI19gW8rrKV/wt6dEyTCW5ZShG4hljFQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDqvsr4XcIZvnRmNMg7ASHsIGDOVMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvT3EteXZoZHdobS1kR1kweURzQklld2dZTTVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJWKSAwQA
UpkzAwQAUqMIAwQAWR/uAwQAbbDVAwQA1drgMA0GCSqGSIb3DQEBCwUAA4IBAQCJ
q/1b/NO14UPPOqwjJK49142BknWT3ecdtoZ/GKfekLYkCq+z80mrzb6FBI9aczHE
ZPyIu98hegwxWgtglznUBlqZwWVo4jXQ9pDdq6Jy/hBr3Iwr83R8kA4vzgzpW2If
qFHzH4IgzSl2s4z7V1pAP4mM283Bf5HgwJWSMwO5yFufi9FVYzQYZsyzLYQmyeo7
+DwfLV2q4P0s1aAZ5R4BTgIgmQ2VI7EY5ptNgc3TQejO5ovnmCGufh48ro/He2vh
ajj8hJAFgHiM6w88hjdvFcBTO8iG53IXGszGfdJZPb2SMuLhfkxIFXjWIUBkYXS1
8HJBYQ2Atk4VwSaPzE4p
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:32 2026 by rpki-client