Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N4mYxhl8425zdS-KFELhHkygFGQ.roa
File: N4mYxhl8425zdS-KFELhHkygFGQ.roa (raw, json)
Hash identifier: ei80GD6HNnDulPuvh5M6tmVBFPautmI9ftzl1xjs2qs=
Subject key identifier: 37:89:98:C6:19:7C:E3:6E:73:75:2F:8A:14:42:E1:1E:4C:A0:14:64
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0199E2BD924F2E420A5FFEA63C6E132C0D0B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N4mYxhl8425zdS-KFELhHkygFGQ.roa
Signing time: Tue 14 Oct 2025 12:41:38 +0000
ROA not before: Tue 14 Oct 2025 12:41:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:bd:92:4f:2e:42:0a:5f:fe:a6:3c:6e:13:2c:0d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 14 12:41:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=378998c6197ce36e73752f8a1442e11e4ca01464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:f6:32:be:74:28:60:31:b2:68:93:db:bd:
e0:c3:4d:a0:ec:40:9f:d6:99:bd:dc:8a:41:3a:1b:
d3:41:dd:b3:96:42:36:46:20:2c:14:8d:07:57:e7:
c0:65:ff:01:1a:9b:a0:b5:a2:dd:91:5d:b6:89:b9:
5c:4a:0c:3e:6d:09:45:2a:b1:6c:16:d2:22:8e:70:
aa:ba:24:0b:8a:00:78:36:bd:2e:ae:3b:bd:5c:aa:
7d:5b:ca:16:67:1e:88:38:1f:90:77:f9:0f:99:80:
56:46:85:cd:fc:4a:e5:09:95:93:50:a5:a9:d7:1e:
91:03:94:01:e3:70:8d:81:c9:4d:7f:e7:75:09:9c:
2d:b3:b6:c7:be:51:c4:16:cb:a4:70:ab:22:99:9c:
b7:d1:d8:fd:bc:6f:57:4e:97:6a:5c:28:bb:ee:bd:
80:5c:a9:f9:4c:e5:79:ba:dd:a5:5b:30:2b:ea:2f:
ac:b8:9e:a9:03:a2:5c:d7:a0:dd:4c:ee:bf:6c:a1:
68:c7:e3:83:1a:ec:1e:b7:b2:8e:f3:a0:8c:14:93:
cb:b3:43:b8:8a:76:e1:88:f6:cc:34:16:0e:c3:8d:
bd:91:42:d6:25:45:58:00:44:b7:4b:e5:b7:7b:9d:
f1:82:03:05:74:a7:a9:57:2f:70:90:fe:be:47:2f:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:98:C6:19:7C:E3:6E:73:75:2F:8A:14:42:E1:1E:4C:A0:14:64
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/N4mYxhl8425zdS-KFELhHkygFGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.107.0/24
84.32.152.0/24
84.32.154.0/24
84.32.156.0/24
84.32.177.0/24
84.32.218.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1c:2b:f9:49:03:cf:db:09:2e:75:fa:fa:95:3f:9f:32:e4:
99:57:e3:bf:59:aa:6f:f5:a5:12:05:02:c7:55:77:72:bf:49:
61:2e:73:8c:df:a3:86:f5:0f:a7:6d:55:28:06:04:6e:7e:74:
cd:15:07:b8:0c:bc:e2:8d:d8:30:e1:52:ae:4e:51:3c:0c:a0:
6f:92:1f:f1:87:4c:dc:7f:f1:88:f8:90:ea:37:20:46:bf:34:
0e:42:ee:91:f3:04:9d:13:31:b8:9d:71:3d:79:48:24:8a:47:
19:01:aa:1e:ff:27:f6:cd:c4:72:ad:78:d7:37:66:78:23:00:
72:91:aa:6e:39:6a:75:18:81:48:a7:4a:c1:e8:72:ff:6d:97:
fe:31:b0:97:fa:d3:d5:91:cd:dc:39:97:88:7c:89:aa:7d:e6:
76:4c:19:d8:ab:25:6a:52:e5:c9:17:83:93:0a:29:fe:2b:dc:
9f:aa:f6:1e:63:4d:8b:5d:59:84:e1:3f:d3:62:35:b8:69:93:
71:fc:d6:f9:cf:ff:c1:76:87:65:1b:11:16:ce:32:50:9e:ed:
bb:41:0b:39:21:b7:72:74:a0:b3:ab:33:9d:42:63:af:9b:cb:
a9:9c:70:c2:ea:dc:b3:d0:25:24:97:82:8b:a5:e8:dd:52:c0:
8e:64:be:b7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZnivZJPLkIKX/6mPG4TLA0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUxMDE0MTI0MTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzg5OThjNjE5N2NlMzZlNzM3NTJmOGExNDQyZTExZTRjYTAxNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMj2Mr50KGAxsmiT273gw02g7ECf
1pm93IpBOhvTQd2zlkI2RiAsFI0HV+fAZf8BGpugtaLdkV22iblcSgw+bQlFKrFs
FtIijnCquiQLigB4Nr0urju9XKp9W8oWZx6IOB+Qd/kPmYBWRoXN/ErlCZWTUKWp
1x6RA5QB43CNgclNf+d1CZwts7bHvlHEFsukcKsimZy30dj9vG9XTpdqXCi77r2A
XKn5TOV5ut2lWzAr6i+suJ6pA6Jc16DdTO6/bKFox+ODGuwet7KO86CMFJPLs0O4
inbhiPbMNBYOw429kULWJUVYAES3S+W3e53xggMFdKepVy9wkP6+Ry+NAwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFDeJmMYZfONuc3UvihRC4R5MoBRkMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvTjRtWXhobDg0MjV6ZFMtS0ZFTGhIa3lnRkdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAVCAPAwQA
VCAYAwQAVCBrAwQAVCCYAwQAVCCaAwQAVCCcAwQAVCCxAwQAVCDaAwQAWNgpAwQA
WNi6MA0GCSqGSIb3DQEBCwUAA4IBAQBzHCv5SQPP2wkudfr6lT+fMuSZV+O/Wapv
9aUSBQLHVXdyv0lhLnOM36OG9Q+nbVUoBgRufnTNFQe4DLzijdgw4VKuTlE8DKBv
kh/xh0zcf/GI+JDqNyBGvzQOQu6R8wSdEzG4nXE9eUgkikcZAaoe/yf2zcRyrXjX
N2Z4IwBykapuOWp1GIFIp0rB6HL/bZf+MbCX+tPVkc3cOZeIfImqfeZ2TBnYqyVq
UuXJF4OTCin+K9yfqvYeY02LXVmE4T/TYjW4aZNx/Nb5z//BdodlGxEWzjJQnu27
QQs5IbdydKCzqzOdQmOvm8upnHDC6tyz0CUkl4KLpejdUsCOZL63
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:16 2025 by rpki-client