Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IVUNj6fWMCImn5ArypTl0kZReiM.roa
File: IVUNj6fWMCImn5ArypTl0kZReiM.roa (raw, json)
Hash identifier: xaO9wVH97BZmzgK0ALT4w6wTCh0a0LtkLe9FYRBGejo=
Subject key identifier: 21:55:0D:8F:A7:D6:30:22:26:9F:90:2B:CA:94:E5:D2:46:51:7A:23
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A0BE9DCC333EF25EA71D13483A44E9655E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IVUNj6fWMCImn5ArypTl0kZReiM.roa
Signing time: Sun 20 Sep 2026 11:40:07 +0000
ROA not before: Sun 20 Sep 2026 11:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.64.0/24 maxlen: 24
84.32.96.0/24 maxlen: 24
84.32.101.0/24 maxlen: 24
84.32.102.0/24 maxlen: 24
84.32.103.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
84.32.231.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.75.0/24 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.252.0/24 maxlen: 24
88.216.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:9d:cc:33:3e:f2:5e:a7:1d:13:48:3a:44:e9:65:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 20 11:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21550d8fa7d63022269f902bca94e5d246517a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:dd:a9:c9:b9:48:33:2e:17:61:aa:e7:1f:
08:90:d4:9e:7b:b3:63:a8:ae:84:62:28:93:0d:53:
1a:05:b0:06:d9:03:b6:dc:22:e9:07:b5:fa:7c:c3:
96:04:b5:fd:0a:1a:fb:e8:ff:e7:11:e5:3d:35:1c:
a9:7d:3c:8b:43:34:df:05:4d:fa:1a:e4:87:79:44:
c3:c1:96:95:15:76:b1:c7:a3:fe:4d:9d:eb:c6:db:
00:f7:d9:ed:bc:da:56:cf:b9:db:52:42:0f:4c:32:
bc:e0:73:72:c6:94:61:80:ee:37:24:c8:1c:49:06:
a7:ab:4d:df:23:4c:8f:86:01:32:fc:f1:5f:d4:85:
d7:be:31:af:c6:01:45:67:a9:6b:b7:b0:3a:39:02:
62:35:53:4a:66:d5:bd:00:f1:1d:24:e6:13:85:b4:
86:48:43:b5:1b:43:1b:d4:87:cd:c7:a0:df:0f:02:
98:d8:73:d7:d4:99:a1:01:b7:40:23:12:da:cf:54:
92:7f:f4:bd:77:06:36:01:16:2d:e2:35:ee:a0:09:
eb:a9:07:c3:98:c9:19:de:6a:f7:f2:65:1c:c1:b9:
93:cb:af:36:b3:00:9a:fb:f2:97:91:2f:34:5e:60:
b8:c0:88:69:05:34:ea:74:bf:bc:1e:cc:c0:83:dc:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:0D:8F:A7:D6:30:22:26:9F:90:2B:CA:94:E5:D2:46:51:7A:23
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IVUNj6fWMCImn5ArypTl0kZReiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
84.32.96.0/24
84.32.101.0-84.32.104.255
84.32.108.0/24
84.32.176.0/23
84.32.184.0/21
84.32.231.0/24
88.216.61.0/24
88.216.63.0/24
88.216.75.0/24
88.216.92.0/23
88.216.187.0/24
88.216.252.0/23
Signature Algorithm: sha256WithRSAEncryption
28:8c:e5:63:d9:2a:b9:5f:63:7d:58:ca:b5:dd:ad:e2:c1:cc:
43:45:3d:20:62:92:a0:e0:52:20:9d:50:5e:1c:fc:c9:a0:12:
59:9a:2d:80:73:f7:54:00:9f:23:89:d0:2d:5b:02:36:5c:a8:
75:46:58:e3:ff:49:12:f7:41:21:3e:78:c1:18:e2:8a:f3:c4:
81:bb:7d:f3:91:03:76:9c:4f:00:9c:c0:e0:aa:e9:b3:ed:5f:
f0:e7:af:8a:d7:f8:8f:05:31:24:51:71:7c:44:ee:fe:98:c3:
4b:c4:fb:c8:89:5a:8d:dd:4a:7a:b6:62:6f:ea:24:8e:0a:11:
d5:d4:ed:e7:16:91:09:5f:75:35:4f:35:ff:4d:7a:f9:7a:19:
89:0f:01:33:a2:48:07:54:0c:2f:5a:e2:f6:98:a5:1d:e6:ff:
92:1e:ab:74:85:43:6c:9e:42:bd:8d:b3:3f:9c:2c:ff:a1:83:
b4:18:f4:6e:1a:aa:7f:25:0f:73:ff:db:c9:5d:fa:08:46:f7:
24:1a:70:bf:b0:4c:81:50:b0:9c:28:07:aa:bd:19:3b:12:28:
6e:83:cb:9f:45:1f:21:76:02:27:2f:de:70:68:7b:3b:a2:5c:
cf:16:5e:33:48:d7:db:9d:2c:a3:e1:24:95:f0:12:ca:5d:fc:
c1:7c:ce:e4
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAaC+ncwzPvJepx0TSDpE6WVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwOTIwMTE0MDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTU1MGQ4ZmE3ZDYzMDIyMjY5ZjkwMmJjYTk0ZTVkMjQ2NTE3YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHdqcm5SDMuF2Gq5x8IkNSee7Nj
qK6EYiiTDVMaBbAG2QO23CLpB7X6fMOWBLX9Chr76P/nEeU9NRypfTyLQzTfBU36
GuSHeUTDwZaVFXaxx6P+TZ3rxtsA99ntvNpWz7nbUkIPTDK84HNyxpRhgO43JMgc
SQanq03fI0yPhgEy/PFf1IXXvjGvxgFFZ6lrt7A6OQJiNVNKZtW9APEdJOYThbSG
SEO1G0Mb1IfNx6DfDwKY2HPX1JmhAbdAIxLaz1SSf/S9dwY2ARYt4jXuoAnrqQfD
mMkZ3mr38mUcwbmTy682swCa+/KXkS80XmC4wIhpBTTqdL+8HszAg9yTHQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFCFVDY+n1jAiJp+QK8qU5dJGUXojMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvSVZVTmo2ZldNQ0ltbjVBcnlwVGwwa1pSZWlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAVCBAAwQA
VCBgMAwDBABUIGUDBABUIGgDBABUIGwDBAFUILADBANUILgDBABUIOcDBABY2D0D
BABY2D8DBABY2EsDBAFY2FwDBABY2LsDBAFY2PwwDQYJKoZIhvcNAQELBQADggEB
ACiM5WPZKrlfY31YyrXdreLBzENFPSBikqDgUiCdUF4c/MmgElmaLYBz91QAnyOJ
0C1bAjZcqHVGWOP/SRL3QSE+eMEY4orzxIG7ffORA3acTwCcwOCq6bPtX/Dnr4rX
+I8FMSRRcXxE7v6Yw0vE+8iJWo3dSnq2Ym/qJI4KEdXU7ecWkQlfdTVPNf9Nevl6
GYkPATOiSAdUDC9a4vaYpR3m/5Ieq3SFQ2yeQr2Nsz+cLP+hg7QY9G4aqn8lD3P/
28ld+ghG9yQacL+wTIFQsJwoB6q9GTsSKG6Dy59FHyF2Aicv3nBoezuiXM8WXjNI
19udLKPhJJXwEspd/MF8zuQ=
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:31 2026 by rpki-client