Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YoDptTQ2X2YdyIGs0sMfufgMoF4.roa
File: YoDptTQ2X2YdyIGs0sMfufgMoF4.roa (raw, json)
Hash identifier: aGxjtgjncMWlco2Dr/NEMzWteyAGOokHNU5meMEnYDM=
Subject key identifier: 62:80:E9:B5:34:36:5F:66:1D:C8:81:AC:D2:C3:1F:B9:F8:0C:A0:5E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019D19D5B9F4E86B84C096A97663F4482678
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YoDptTQ2X2YdyIGs0sMfufgMoF4.roa
Signing time: Mon 23 Mar 2026 08:35:30 +0000
ROA not before: Mon 23 Mar 2026 08:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216444
IP address blocks: 84.32.22.0/23 maxlen: 24
84.32.111.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:d5:b9:f4:e8:6b:84:c0:96:a9:76:63:f4:48:26:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 23 08:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6280e9b534365f661dc881acd2c31fb9f80ca05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:33:f0:ae:bd:67:90:8e:38:ee:a5:44:b9:
ea:79:10:80:5f:e8:0f:56:66:25:2a:03:41:36:f7:
3a:52:bb:79:ce:48:fb:c1:01:eb:8b:b3:75:98:a9:
0d:a8:b1:17:da:0e:99:0f:f5:0c:f4:fb:e6:86:cc:
9e:da:99:59:4b:3d:0e:e0:bb:69:d5:da:8f:df:f7:
be:f6:06:1f:63:66:1d:18:b8:cc:4a:3e:6c:19:dd:
2e:e5:74:0a:7d:9f:02:14:fa:7d:41:44:c7:8e:ee:
e8:09:cc:bb:b8:ab:a7:68:75:5d:1c:03:43:b7:c9:
c1:0d:1d:ab:aa:ab:35:da:f0:db:db:75:9c:7f:0f:
ae:32:60:65:7e:9d:df:6f:99:d1:fc:b0:8d:8c:59:
e3:ee:bd:24:5e:5b:04:5c:a8:99:42:3a:73:d3:0d:
76:87:aa:90:77:b8:0f:4b:5c:3b:25:17:23:f9:f9:
1b:c9:db:20:24:48:73:25:0c:45:b5:75:c5:5f:13:
c6:de:ed:19:f5:e7:20:a8:eb:2e:93:2b:8c:88:a9:
7b:58:f7:46:ba:93:32:0c:1f:88:bb:48:82:02:7a:
93:f0:18:3b:59:b7:e2:03:8c:f0:8d:5a:83:76:4e:
83:4e:37:4b:1b:a9:7e:d0:9a:7e:14:6a:ee:3e:e6:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:E9:B5:34:36:5F:66:1D:C8:81:AC:D2:C3:1F:B9:F8:0C:A0:5E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/YoDptTQ2X2YdyIGs0sMfufgMoF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.22.0/23
84.32.111.0/24
84.32.249.0/24
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a9:71:e9:2f:e5:92:54:51:67:2f:23:f4:11:f0:ac:9f:8d:
ec:b4:fd:90:1b:85:0d:48:fe:7e:51:6f:19:59:22:f3:c9:75:
fe:26:cb:42:3a:86:58:25:9e:a7:6a:86:97:4e:eb:93:a2:5f:
60:3e:6f:ef:8d:d9:35:c5:32:53:91:9d:c6:f4:0d:6a:d0:d5:
8a:f0:c6:f2:d2:97:37:50:3c:e9:88:40:cc:3a:3d:ef:f4:bf:
2c:89:b4:f5:71:f3:9d:7c:1c:0d:ec:00:2d:85:dd:90:c9:b2:
fa:93:d3:bc:dd:6b:dd:af:44:08:d9:93:7d:55:1c:2b:b1:ec:
8c:a2:19:f4:6c:96:ca:cb:2e:42:72:7e:7a:d4:ca:aa:5b:32:
e1:c5:4e:fd:bd:c7:9d:70:14:10:6a:f1:22:e5:5f:0b:f5:18:
2b:db:f6:bd:55:34:3e:df:3d:12:b8:5e:9e:5e:1b:ac:6b:f7:
45:8e:f9:a7:ab:17:c2:58:ec:ee:a0:5f:1d:fe:bd:cd:ec:a2:
e1:13:af:e1:69:71:8f:4d:ed:61:9d:52:43:ce:83:52:c5:43:
fb:ee:f3:ec:0d:47:9b:8f:2d:fb:63:6d:35:32:c7:6d:82:71:
be:1f:bd:ff:9a:e1:ba:d3:99:df:92:73:e2:54:86:f5:49:c6:
c2:64:ac:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ0Z1bn06GuEwJapdmP0SCZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwMzIzMDgzNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjgwZTliNTM0MzY1ZjY2MWRjODgxYWNkMmMzMWZiOWY4MGNhMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqucz8K69Z5COOO6lRLnqeRCAX+gP
VmYlKgNBNvc6Urt5zkj7wQHri7N1mKkNqLEX2g6ZD/UM9Pvmhsye2plZSz0O4Ltp
1dqP3/e+9gYfY2YdGLjMSj5sGd0u5XQKfZ8CFPp9QUTHju7oCcy7uKunaHVdHAND
t8nBDR2rqqs12vDb23Wcfw+uMmBlfp3fb5nR/LCNjFnj7r0kXlsEXKiZQjpz0w12
h6qQd7gPS1w7JRcj+fkbydsgJEhzJQxFtXXFXxPG3u0Z9ecgqOsukyuMiKl7WPdG
upMyDB+Iu0iCAnqT8Bg7WbfiA4zwjVqDdk6DTjdLG6l+0Jp+FGruPuZWLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGKA6bU0Nl9mHciBrNLDH7n4DKBeMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvWW9EcHRUUTJYMllkeUlHczBzTWZ1ZmdNb0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBVCAWAwQA
VCBvAwQAVCD5AwQAWNjQMA0GCSqGSIb3DQEBCwUAA4IBAQBpqXHpL+WSVFFnLyP0
EfCsn43stP2QG4UNSP5+UW8ZWSLzyXX+JstCOoZYJZ6naoaXTuuTol9gPm/vjdk1
xTJTkZ3G9A1q0NWK8Mby0pc3UDzpiEDMOj3v9L8sibT1cfOdfBwN7AAthd2QybL6
k9O83Wvdr0QI2ZN9VRwrseyMohn0bJbKyy5Ccn561MqqWzLhxU79vcedcBQQavEi
5V8L9Rgr2/a9VTQ+3z0SuF6eXhusa/dFjvmnqxfCWOzuoF8d/r3N7KLhE6/haXGP
Te1hnVJDzoNSxUP77vPsDUebjy37Y201MsdtgnG+H73/muG605nfknPiVIb1ScbC
ZKwK
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:55 2026 by rpki-client