Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SGNHkx9uxTsfIOUYbcfeznLaYaw.roa
File: SGNHkx9uxTsfIOUYbcfeznLaYaw.roa (raw, json)
Hash identifier: KG5jc+Ii/BTnuN7YYuq16d1GQbplhAIXAI9F/nTTOFk=
Subject key identifier: 48:63:47:93:1F:6E:C5:3B:1F:20:E5:18:6D:C7:DE:CE:72:DA:61:AC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0199C3A5FA720E5E5A3007B606E36146DF7D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SGNHkx9uxTsfIOUYbcfeznLaYaw.roa
Signing time: Wed 08 Oct 2025 11:47:38 +0000
ROA not before: Wed 08 Oct 2025 11:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.98.0/24 maxlen: 24
84.32.100.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
88.216.70.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:a5:fa:72:0e:5e:5a:30:07:b6:06:e3:61:46:df:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 8 11:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=486347931f6ec53b1f20e5186dc7dece72da61ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:0f:3d:48:5e:da:1b:3f:5e:19:3c:d2:65:
e5:34:75:a7:66:44:e3:b2:e3:18:ef:d9:3e:03:65:
77:03:ed:bd:46:0b:f5:6b:14:26:af:6a:4c:e3:7a:
d5:53:ab:dc:cf:9b:d8:e9:5d:9f:30:10:ad:c6:b5:
af:bd:1a:d0:c5:a2:db:49:15:ec:b7:3b:c8:ce:6b:
c4:4e:51:f9:72:ba:b6:bd:75:18:19:06:4d:9c:c5:
30:a3:7e:51:d7:f9:6a:28:6e:2e:d7:75:1c:01:75:
84:29:87:12:e5:04:8d:30:72:1a:a7:4e:c8:bb:66:
b2:66:c5:65:68:b1:09:2d:8b:15:4e:05:05:d4:29:
b5:19:9f:85:7f:ea:23:81:a7:c7:01:3f:0d:c9:66:
3d:2a:11:85:87:da:12:40:f3:80:1b:17:ec:a2:03:
b5:0e:dd:16:fd:20:74:83:dc:36:44:97:1a:93:a3:
63:4f:f0:18:18:17:40:89:78:2d:ba:e1:74:50:f2:
ab:3e:3a:36:22:56:82:11:2a:f7:fc:e6:75:fc:5a:
b9:18:9d:0a:b5:00:4e:8e:24:7b:c7:f8:c2:f2:66:
12:7a:34:d9:34:53:d1:2a:d4:95:27:aa:56:17:f2:
8b:ad:f5:a1:c3:51:bc:c3:44:30:80:ed:18:72:fb:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:63:47:93:1F:6E:C5:3B:1F:20:E5:18:6D:C7:DE:CE:72:DA:61:AC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/SGNHkx9uxTsfIOUYbcfeznLaYaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
84.32.98.0/24
84.32.100.0/24
84.32.223.0/24
88.216.70.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
91:22:43:ea:32:7b:c6:d6:e0:95:2b:7f:ca:83:51:54:c5:2f:
e3:6c:59:bf:85:89:8b:3c:dc:d3:8c:1f:b7:13:8a:86:4d:6c:
7c:23:4a:5a:81:b7:c6:d4:0e:5d:04:72:a2:9e:3b:da:9c:35:
28:2c:cc:9b:4b:3b:f9:e4:37:8f:b8:25:ba:b3:ab:d6:71:5c:
b0:b3:c6:d9:47:32:dc:6f:34:89:aa:da:06:b0:98:21:d3:1c:
db:a9:f9:16:72:b8:14:f9:e6:c2:36:21:26:ae:53:39:53:46:
50:2c:27:13:cd:fe:7d:01:fe:71:73:d4:0a:3a:b2:87:b8:56:
33:c4:0a:15:b4:cd:e8:59:ce:20:67:f8:57:ea:1d:b6:d1:c3:
a0:01:1c:1e:3e:0b:2b:ec:99:ea:f4:e4:3a:9a:10:31:40:cb:
4f:01:6e:d6:05:8e:e0:47:c0:c9:f3:e6:10:53:77:a1:24:29:
c0:b3:6d:c1:e2:4c:53:9d:f3:14:d6:d5:a9:7c:19:e9:76:47:
53:b5:31:15:a7:52:29:72:49:d7:8e:d5:ee:f3:d3:34:54:77:
d8:72:78:f3:09:cf:f2:42:c6:68:21:1d:1c:1b:26:ee:65:1b:
4d:d6:7b:ea:76:67:90:d9:91:76:01:fd:49:49:92:79:84:4a:
59:44:57:49
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZnDpfpyDl5aMAe2BuNhRt99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUxMDA4MTE0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODYzNDc5MzFmNmVjNTNiMWYyMGU1MTg2ZGM3ZGVjZTcyZGE2MWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUoPPUhe2hs/Xhk80mXlNHWnZkTj
suMY79k+A2V3A+29Rgv1axQmr2pM43rVU6vcz5vY6V2fMBCtxrWvvRrQxaLbSRXs
tzvIzmvETlH5crq2vXUYGQZNnMUwo35R1/lqKG4u13UcAXWEKYcS5QSNMHIap07I
u2ayZsVlaLEJLYsVTgUF1Cm1GZ+Ff+ojgafHAT8NyWY9KhGFh9oSQPOAGxfsogO1
Dt0W/SB0g9w2RJcak6NjT/AYGBdAiXgtuuF0UPKrPjo2IlaCESr3/OZ1/Fq5GJ0K
tQBOjiR7x/jC8mYSejTZNFPRKtSVJ6pWF/KLrfWhw1G8w0QwgO0YcvsmTwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFEhjR5MfbsU7HyDlGG3H3s5y2mGsMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvU0dOSGt4OXV4VHNmSU9VWWJjZmV6bkxhWWF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVCA7AwQA
VCBiAwQAVCBkAwQAVCDfAwQAWNhGAwQAWNjcMA0GCSqGSIb3DQEBCwUAA4IBAQCR
IkPqMnvG1uCVK3/Kg1FUxS/jbFm/hYmLPNzTjB+3E4qGTWx8I0pagbfG1A5dBHKi
njvanDUoLMybSzv55DePuCW6s6vWcVyws8bZRzLcbzSJqtoGsJgh0xzbqfkWcrgU
+ebCNiEmrlM5U0ZQLCcTzf59Af5xc9QKOrKHuFYzxAoVtM3oWc4gZ/hX6h220cOg
ARwePgsr7Jnq9OQ6mhAxQMtPAW7WBY7gR8DJ8+YQU3ehJCnAs23B4kxTnfMU1tWp
fBnpdkdTtTEVp1IpcknXjtXu89M0VHfYcnjzCc/yQsZoIR0cGybuZRtN1nvqdmeQ
2ZF2Af1JSZJ5hEpZRFdJ
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:48 2025 by rpki-client