Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S4R-6A79mk96YjCTRQlqleVNHzQ.roa
File: S4R-6A79mk96YjCTRQlqleVNHzQ.roa (raw, json)
Hash identifier: 1pNgJwn9+9oNPeJTM9YI1d8ZT4LQXuZKfoJMkrLKKss=
Subject key identifier: 4B:84:7E:E8:0E:FD:9A:4F:7A:62:30:93:45:09:6A:95:E5:4D:1F:34
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D7292C632190E479A53939CD65DD81908
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S4R-6A79mk96YjCTRQlqleVNHzQ.roa
Signing time: Thu 09 Apr 2026 14:08:34 +0000
ROA not before: Thu 09 Apr 2026 14:08:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397198
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:c6:32:19:0e:47:9a:53:93:9c:d6:5d:d8:19:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b847ee80efd9a4f7a62309345096a95e54d1f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:b1:fa:69:a4:d1:81:6c:b7:f7:54:37:fe:
9b:2a:ff:ba:5b:68:6f:3e:d4:c1:a5:af:7f:0f:a3:
26:12:2f:d8:19:8e:48:b9:a3:a6:9e:05:6f:59:fc:
d3:55:36:b0:31:57:a1:b3:48:07:71:88:d1:2f:7f:
ef:3f:4a:82:1d:f3:6b:54:09:69:08:de:c2:4f:70:
a0:b4:5f:c2:b9:3c:d7:69:41:c3:78:45:89:5d:bb:
c7:c6:41:79:ba:2e:bf:f7:b4:8a:10:05:84:bf:98:
bd:45:bd:05:e0:5b:e2:70:ef:e2:30:d3:b2:8b:e4:
87:5a:b9:d7:78:47:b8:a3:3c:e6:79:be:dd:60:45:
05:e6:46:6a:e4:d1:b1:0a:a4:c0:d7:e1:d0:10:48:
2c:c4:79:88:86:ed:4c:02:80:1e:d0:58:43:41:a8:
c8:b6:70:b8:54:30:e9:b0:3d:b2:71:30:56:3d:08:
a6:5d:ad:21:87:54:a5:d3:e6:7a:ca:8f:9d:8d:5c:
f5:93:7e:14:9d:d1:56:c4:30:97:f1:8d:45:0e:17:
ed:4e:a7:7c:80:ca:85:96:8d:b8:09:c1:97:8b:e7:
cc:69:ac:71:31:d6:c9:74:78:86:04:9f:cf:7c:fe:
cc:7c:91:9d:d7:fe:89:7a:30:be:34:4e:c2:ae:d5:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:84:7E:E8:0E:FD:9A:4F:7A:62:30:93:45:09:6A:95:E5:4D:1F:34
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/S4R-6A79mk96YjCTRQlqleVNHzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
07:0b:35:28:a2:31:9c:c5:6d:5c:c0:39:d7:c2:15:5e:25:b7:
58:2f:b4:3c:43:9d:1e:1f:12:f9:b2:97:53:b1:4f:93:7e:28:
7d:21:f3:de:25:33:bf:37:0a:dd:5f:90:17:3e:f8:79:fc:2d:
c1:df:0b:f0:74:8c:4a:14:54:08:14:3e:49:ef:0b:b4:c3:71:
76:2e:45:45:3c:6c:7f:63:a5:a0:4b:de:88:39:ff:23:9b:d7:
da:f7:38:66:37:ce:6b:4d:9a:1e:39:69:1e:d0:e7:41:8b:7f:
bc:e6:ba:4d:f3:0f:b7:ae:cb:eb:28:bf:7b:5c:78:99:51:83:
04:77:9d:7c:e0:12:8d:85:22:6f:cc:95:17:43:d3:47:57:dd:
dd:66:07:41:1e:3d:77:c7:48:d1:73:4d:2d:d4:f6:2e:8c:3a:
e9:fe:e8:3a:de:fd:38:e1:48:3c:27:8c:eb:e3:a8:87:47:c3:
24:b3:5f:dd:1e:e6:81:42:11:bc:ef:b0:65:df:c3:cb:3e:7e:
3d:24:a8:12:08:ea:74:fc:b0:c4:31:47:7d:75:bb:07:db:fb:
1d:e0:8f:95:79:15:bf:d6:00:47:b3:15:80:c6:6b:b4:12:de:
18:b1:42:ee:5a:21:f6:b8:c3:4f:ce:0e:5d:f0:4d:84:0a:4a:
c4:ab:58:7f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ1yksYyGQ5HmlOTnNZd2BkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjYwNDA5MTQwODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjg0N2VlODBlZmQ5YTRmN2E2MjMwOTM0NTA5NmE5NWU1NGQxZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yex+mmk0YFst/dUN/6bKv+6W2hv
PtTBpa9/D6MmEi/YGY5IuaOmngVvWfzTVTawMVehs0gHcYjRL3/vP0qCHfNrVAlp
CN7CT3CgtF/CuTzXaUHDeEWJXbvHxkF5ui6/97SKEAWEv5i9Rb0F4FvicO/iMNOy
i+SHWrnXeEe4ozzmeb7dYEUF5kZq5NGxCqTA1+HQEEgsxHmIhu1MAoAe0FhDQajI
tnC4VDDpsD2ycTBWPQimXa0hh1Sl0+Z6yo+djVz1k34UndFWxDCX8Y1FDhftTqd8
gMqFlo24CcGXi+fMaaxxMdbJdHiGBJ/PfP7MfJGd1/6JejC+NE7CrtWxQwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEuEfugO/ZpPemIwk0UJapXlTR80MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvUzRSLTZBNzltazk2WWpDVFJRbHFsZVZOSHpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBURPCAwQA
uWQAMA8EAgACMAkDBwAqEO7Aq80wDQYJKoZIhvcNAQELBQADggEBAAcLNSiiMZzF
bVzAOdfCFV4lt1gvtDxDnR4fEvmyl1OxT5N+KH0h894lM783Ct1fkBc++Hn8LcHf
C/B0jEoUVAgUPknvC7TDcXYuRUU8bH9jpaBL3og5/yOb19r3OGY3zmtNmh45aR7Q
50GLf7zmuk3zD7euy+sov3tceJlRgwR3nXzgEo2FIm/MlRdD00dX3d1mB0EePXfH
SNFzTS3U9i6MOun+6Dre/TjhSDwnjOvjqIdHwySzX90e5oFCEbzvsGXfw8s+fj0k
qBII6nT8sMQxR311uwfb+x3gj5V5Fb/WAEezFYDGa7QS3hixQu5aIfa4w0/ODl3w
TYQKSsSrWH8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:36 2026 by rpki-client