Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kOv1xA8YKQAvQTGS45iIMnRlVyk.roa
File: kOv1xA8YKQAvQTGS45iIMnRlVyk.roa (raw, json)
Hash identifier: 09PbDh7zhzwDpjQ2FYQCmfhT1t26wdnDcCcld06XqLA=
Subject key identifier: 90:EB:F5:C4:0F:18:29:00:2F:41:31:92:E3:98:88:32:74:65:57:29
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0199E2BD915E97F02534A2D8394420422483
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kOv1xA8YKQAvQTGS45iIMnRlVyk.roa
Signing time: Tue 14 Oct 2025 12:41:38 +0000
ROA not before: Tue 14 Oct 2025 12:41:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 84.32.9.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.97.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.178.0/23 maxlen: 23
84.32.209.0/24 maxlen: 24
84.32.214.0/24 maxlen: 24
84.32.215.0/24 maxlen: 24
84.32.248.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:bd:91:5e:97:f0:25:34:a2:d8:39:44:20:42:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 14 12:41:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90ebf5c40f1829002f413192e398883274655729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:cd:e2:45:f3:cd:01:64:e2:af:32:1f:9a:
e3:9f:06:ea:a8:77:75:f1:10:b4:92:05:3c:0d:9d:
05:bc:d4:b1:1f:c9:ba:1c:0a:13:0b:e2:ec:82:d0:
2c:34:fe:bb:28:fe:40:17:8f:ac:53:2d:67:6a:04:
f5:a4:39:5a:8a:ff:6c:46:a3:26:07:f3:e1:b7:c4:
c0:8c:e7:e6:54:ef:f9:e3:11:10:18:fe:95:bd:06:
36:c4:7e:6d:20:45:5b:ff:19:af:cd:2c:52:c6:c5:
03:86:fe:21:7d:5d:8f:82:28:5c:75:63:97:be:c6:
7a:22:f7:14:d3:de:b4:cd:a8:97:27:4b:66:56:4c:
cc:62:db:61:6e:b3:6b:35:50:d9:17:4d:94:99:24:
ac:22:90:67:ba:52:fe:ec:1c:97:0f:e7:5e:52:d8:
b2:ff:5b:77:6c:39:56:53:97:9c:00:86:28:21:0f:
ab:c5:04:93:19:3e:e7:a3:0d:fd:fa:ff:83:85:53:
ae:ef:c5:db:e3:fa:24:76:77:de:53:37:60:69:78:
79:e1:37:74:ba:dd:57:83:c7:4f:70:27:cc:1f:65:
4c:67:75:fb:c6:3e:a8:bc:88:d9:a4:2e:f5:b7:62:
de:4a:60:a0:51:a5:86:ed:9a:12:14:d3:67:d3:af:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:F5:C4:0F:18:29:00:2F:41:31:92:E3:98:88:32:74:65:57:29
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kOv1xA8YKQAvQTGS45iIMnRlVyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.25.0/24
84.32.51.0/24
84.32.97.0/24
84.32.151.0/24
84.32.178.0/23
84.32.209.0/24
84.32.214.0/23
84.32.248.0/24
88.216.62.0/24
88.216.90.0/24
88.216.127.0/24
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4d:6a:9b:72:89:d9:b8:b6:75:2f:d7:9d:32:32:ee:7c:c4:
da:c2:56:bb:d5:85:37:d9:1c:85:c6:e6:b6:ca:b0:9f:9c:ad:
e2:87:62:db:0a:20:91:cb:0e:2d:11:14:35:2e:3f:bb:ed:a3:
1f:3d:b1:a5:af:8c:50:0c:3a:eb:2e:9c:eb:54:2e:21:b4:e3:
86:20:86:c5:2f:07:7d:35:9f:e0:94:26:d0:d0:01:54:2c:45:
fd:0b:62:94:2e:8a:f7:dc:1a:77:19:ee:bf:d8:cc:18:fd:59:
69:e4:f0:9f:29:bc:4c:3c:55:67:84:8a:da:29:22:56:da:72:
8f:61:21:7d:85:8b:a3:fa:6a:77:5d:a8:0f:8e:54:ae:17:32:
de:a0:e2:c9:fe:b2:f9:e0:55:f9:5c:c1:0b:ff:4a:c0:ee:bd:
32:56:01:6d:8c:ce:97:5b:58:56:a4:c9:95:74:d7:bb:4a:cf:
08:83:dc:7a:51:c7:59:b0:45:d3:69:bd:01:d8:73:c5:23:c7:
7c:16:d1:c2:c8:00:53:21:06:92:f8:c8:28:15:10:95:1f:75:
45:77:65:15:70:15:bd:f6:76:12:56:c5:3d:a6:2d:39:d7:32:
ff:89:d1:4a:fd:2d:b4:45:44:2b:9a:00:68:cd:87:cb:7c:69:
25:be:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:17 2025 by rpki-client