Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4V2a0HL--Tq7MdIg7jOi6uq8NY8.roa
File: 4V2a0HL--Tq7MdIg7jOi6uq8NY8.roa (raw, json)
Hash identifier: V7QmsN6dc+Tw9VLtzuQG5INrCo/QfciRk2EiJVKherA=
Subject key identifier: E1:5D:9A:D0:72:FE:F9:3A:BB:31:D2:20:EE:33:A2:EA:EA:BC:35:8F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019DA1D9D5A8CAE6CEEE963BF184D50165BE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4V2a0HL--Tq7MdIg7jOi6uq8NY8.roa
Signing time: Sat 18 Apr 2026 18:28:20 +0000
ROA not before: Sat 18 Apr 2026 18:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 84.32.6.0/24 maxlen: 24
84.32.136.0/22 maxlen: 24
88.216.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:d9:d5:a8:ca:e6:ce:ee:96:3b:f1:84:d5:01:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 18 18:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e15d9ad072fef93abb31d220ee33a2eaeabc358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:0e:2d:92:99:8f:8e:96:0a:a0:fa:b5:3b:
3f:34:16:b1:52:41:43:ca:6d:fd:10:3b:a9:73:da:
4c:67:05:bd:ba:d9:c4:94:04:00:af:0b:55:60:6f:
56:32:5f:56:fb:e0:62:90:c8:af:fa:1a:a0:af:ae:
0e:90:01:d9:86:db:cf:b6:a0:cc:52:5a:cb:69:ee:
ad:f5:9a:7d:74:e1:14:b4:cd:c0:3c:7b:8f:4c:80:
af:80:73:56:6e:bc:c8:28:ce:3a:9a:83:f7:35:38:
b1:49:88:e9:96:64:07:ef:92:26:26:ea:b1:b1:3d:
ae:8f:e7:b2:6d:5c:59:19:48:0f:8a:7e:23:3c:ac:
5d:14:3a:e6:25:98:32:c4:71:e3:ff:9b:f7:0d:3f:
bb:09:0e:19:29:f8:c5:12:4f:12:42:92:5b:3a:53:
70:93:fc:eb:e1:53:18:18:20:c9:d0:42:34:27:a1:
6c:76:04:20:aa:53:69:62:9c:33:9b:70:6c:c7:28:
0d:55:93:fa:d8:82:fe:0b:80:fc:e5:bf:cb:7e:17:
18:dc:a8:ad:c6:f9:e9:ef:3a:28:80:bf:48:cb:27:
19:e5:65:32:22:fd:c9:d9:9a:09:08:f5:a5:23:bc:
12:78:4e:9a:b4:00:8d:09:2b:39:76:96:97:1c:92:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5D:9A:D0:72:FE:F9:3A:BB:31:D2:20:EE:33:A2:EA:EA:BC:35:8F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/4V2a0HL--Tq7MdIg7jOi6uq8NY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.136.0/22
88.216.98.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e4:57:e4:a0:7c:9b:58:54:59:75:f9:d2:47:3d:cb:3f:a3:
b4:41:f3:9f:ca:71:3c:dc:52:09:fc:a0:45:05:2b:a4:58:6a:
11:f3:02:0c:33:dd:4f:69:93:f3:68:a5:73:d7:f3:dc:7b:64:
97:e2:b5:3f:35:90:fa:04:1a:13:be:00:b9:a9:51:5b:ee:04:
1e:95:9a:49:70:8a:96:cc:57:d0:49:0a:a3:1b:10:61:ba:d1:
6b:6d:fc:e4:62:26:69:4b:26:ed:d3:fb:09:2a:96:1d:65:5b:
d3:b0:98:64:76:2f:ec:27:37:61:86:3a:e5:b7:51:7a:56:3a:
ac:cb:6a:48:96:6d:7e:83:03:7c:15:a4:c8:70:3b:cf:f5:64:
53:90:a3:0a:34:1e:a0:f4:eb:05:fd:8b:7f:2d:59:b7:51:4c:
6c:0f:81:a3:27:bd:a8:c8:f7:00:37:87:44:47:72:84:ac:7d:
1d:01:b7:33:5c:ff:ef:6b:b4:d4:2b:65:79:35:8d:2c:19:50:
50:f7:6f:30:98:69:c0:dd:c0:23:4f:ab:cb:60:e8:d7:98:f2:
f6:22:a6:74:00:fd:69:1a:8c:ff:ec:f3:6e:55:22:e5:03:60:
1a:eb:bc:a6:c1:a6:85:97:ae:99:ef:10:4e:70:48:6d:71:63:
02:92:b3:57
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ2h2dWoyubO7pY78YTVAWW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwNDE4MTgyODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTVkOWFkMDcyZmVmOTNhYmIzMWQyMjBlZTMzYTJlYWVhYmMzNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ8OLZKZj46WCqD6tTs/NBaxUkFD
ym39EDupc9pMZwW9utnElAQArwtVYG9WMl9W++BikMiv+hqgr64OkAHZhtvPtqDM
UlrLae6t9Zp9dOEUtM3APHuPTICvgHNWbrzIKM46moP3NTixSYjplmQH75ImJuqx
sT2uj+eybVxZGUgPin4jPKxdFDrmJZgyxHHj/5v3DT+7CQ4ZKfjFEk8SQpJbOlNw
k/zr4VMYGCDJ0EI0J6FsdgQgqlNpYpwzm3BsxygNVZP62IL+C4D85b/LfhcY3Kit
xvnp7zoogL9IyycZ5WUyIv3J2ZoJCPWlI7wSeE6atACNCSs5dpaXHJI1TQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOFdmtBy/vk6uzHSIO4zourqvDWPMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvNFYyYTBITC0tVHE3TWRJZzdqT2k2dXE4Tlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCAGAwQC
VCCIAwQAWNhiMA0GCSqGSIb3DQEBCwUAA4IBAQBz5FfkoHybWFRZdfnSRz3LP6O0
QfOfynE83FIJ/KBFBSukWGoR8wIMM91PaZPzaKVz1/Pce2SX4rU/NZD6BBoTvgC5
qVFb7gQelZpJcIqWzFfQSQqjGxBhutFrbfzkYiZpSybt0/sJKpYdZVvTsJhkdi/s
Jzdhhjrlt1F6Vjqsy2pIlm1+gwN8FaTIcDvP9WRTkKMKNB6g9OsF/Yt/LVm3UUxs
D4GjJ72oyPcAN4dER3KErH0dAbczXP/va7TUK2V5NY0sGVBQ928wmGnA3cAjT6vL
YOjXmPL2IqZ0AP1pGoz/7PNuVSLlA2Aa67ymwaaFl66Z7xBOcEhtcWMCkrNX
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:13 2026 by rpki-client