Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n0Lc8BGrD5j7Z9LiS-7U1P17mhM.roa
File: n0Lc8BGrD5j7Z9LiS-7U1P17mhM.roa (raw, json)
Hash identifier: hsCaw6EswYSmpszly4UovEa40YUbL1G+sZBl/nZ8Q+k=
Subject key identifier: 9F:42:DC:F0:11:AB:0F:98:FB:67:D2:E2:4B:EE:D4:D4:FD:7B:9A:13
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019D25FA139B4B16814F4AB2CFA6D421355F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n0Lc8BGrD5j7Z9LiS-7U1P17mhM.roa
Signing time: Wed 25 Mar 2026 17:10:38 +0000
ROA not before: Wed 25 Mar 2026 17:10:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16125
IP address blocks: 84.32.9.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.97.0/24 maxlen: 24
84.32.109.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.178.0/23 maxlen: 23
84.32.209.0/24 maxlen: 24
84.32.214.0/24 maxlen: 24
84.32.215.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
84.32.248.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.90.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.192.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:fa:13:9b:4b:16:81:4f:4a:b2:cf:a6:d4:21:35:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 25 17:10:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f42dcf011ab0f98fb67d2e24beed4d4fd7b9a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:65:44:fa:74:9f:84:72:f4:28:1a:46:6c:
d0:3b:ac:4d:7c:74:68:b4:dd:86:9e:bd:c0:46:6b:
1f:2e:c1:7f:a4:8a:dd:b3:c8:d3:83:00:63:53:d4:
c3:be:a2:15:52:f0:46:86:f1:15:ba:58:9c:fc:1a:
54:6c:dd:bb:a0:c0:e7:91:05:11:02:ec:6f:65:6d:
d5:bb:2c:11:aa:bc:86:54:d4:50:a1:5f:cb:3e:0f:
54:d3:b1:f0:98:83:16:e5:ce:a5:e4:e9:34:08:dc:
be:20:b0:c2:83:ab:39:92:1e:66:48:84:b7:6f:56:
cd:41:c3:26:62:96:26:77:f1:d2:f3:3e:86:47:a1:
5d:6e:7d:fb:c4:d4:11:9a:43:6d:35:6a:6c:bd:26:
c1:4b:e5:37:29:bb:25:39:ec:02:34:9b:4e:03:c5:
9c:20:56:ce:53:0f:cf:f6:48:38:53:1f:03:4e:a3:
aa:c6:65:e9:d4:d3:05:1b:25:87:f5:08:2d:1d:50:
3c:c0:9b:39:89:25:2b:5e:67:6d:a0:02:94:4a:3e:
6c:d5:80:25:ff:6e:8f:87:f3:a5:78:3d:fc:aa:17:
9f:b0:25:e9:90:d7:a6:f6:ab:d7:0f:31:92:1b:5b:
84:46:82:92:60:58:52:51:db:25:1c:6d:0f:fe:74:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:DC:F0:11:AB:0F:98:FB:67:D2:E2:4B:EE:D4:D4:FD:7B:9A:13
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/n0Lc8BGrD5j7Z9LiS-7U1P17mhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.9.0/24
84.32.25.0/24
84.32.51.0/24
84.32.83.0/24
84.32.97.0/24
84.32.109.0-84.32.110.255
84.32.149.0/24
84.32.151.0/24
84.32.178.0/23
84.32.209.0/24
84.32.214.0/23
84.32.244.0/24
84.32.248.0/24
88.216.62.0/24
88.216.90.0/24
88.216.93.0/24
88.216.127.0/24
88.216.192.0/24
88.216.197.0/24
88.216.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:84:3e:07:4d:0a:92:86:61:ca:03:e4:25:59:40:9f:78:6d:
cb:4f:6a:84:f0:91:61:a3:0c:ef:e7:af:fa:c2:50:c5:e5:18:
15:eb:44:1d:a4:e6:c0:d6:fc:56:7e:0f:8b:14:de:93:43:74:
84:32:93:bf:9d:69:fe:a3:be:ad:7a:0f:37:84:31:a5:11:9b:
3e:f7:bd:75:4e:84:33:d6:f2:4d:60:1d:09:4d:e8:2f:ed:ab:
1e:40:e2:ef:43:4b:53:b6:94:8a:66:3f:6f:29:cd:9c:30:b7:
da:df:55:f7:7e:f9:bf:9f:a6:62:0a:85:47:1e:f0:e7:a2:d4:
52:96:b0:9a:c6:55:48:da:ba:62:ac:50:51:57:2e:1d:1f:d6:
23:1a:f6:71:08:2f:6c:42:48:9b:4c:40:d9:71:1d:55:cc:fc:
2a:f8:4e:a3:b1:c9:6d:05:fd:67:15:05:de:52:5c:e5:61:9d:
95:cb:1c:bc:10:e4:00:3d:47:0c:54:f5:7f:cf:2c:5f:53:78:
79:ba:33:79:51:17:ab:22:3c:38:96:16:1e:08:26:5b:7a:b0:
de:1f:8f:cf:2a:50:81:73:96:d2:e3:f2:b8:b8:71:44:22:a0:
eb:e1:61:a0:85:a8:62:3c:fd:12:87:07:85:64:36:a2:22:54:
78:e9:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:08 2026 by rpki-client