Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y_uRrzEDGUTmlzoTuzRvshtqcok.roa
File: Y_uRrzEDGUTmlzoTuzRvshtqcok.roa (raw, json)
Hash identifier: JJI+oM3nlYA1yQAFLwS3hputh/McfIaATjIHzWwijgU=
Subject key identifier: 63:FB:91:AF:31:03:19:44:E6:97:3A:13:BB:34:6F:B2:1B:6A:72:89
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0196C47038D69B514EE9F1F9347679EA5C38
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y_uRrzEDGUTmlzoTuzRvshtqcok.roa
Signing time: Mon 12 May 2025 12:20:10 +0000
ROA not before: Mon 12 May 2025 12:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:70:38:d6:9b:51:4e:e9:f1:f9:34:76:79:ea:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 12 12:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63fb91af31031944e6973a13bb346fb21b6a7289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:cc:cf:06:0c:6d:10:ae:56:57:76:e4:50:
3b:b9:9d:b3:7f:7e:a3:60:d4:86:4d:70:90:a8:d9:
97:ca:c0:63:88:ff:52:77:23:f5:65:6e:6d:06:5a:
9c:aa:13:2c:ae:28:1f:3e:3b:09:94:30:b3:fc:7e:
ed:17:c0:1c:a1:95:66:c4:14:2c:d8:82:7a:f3:25:
83:f5:89:48:57:95:09:34:b2:de:ea:3d:c1:90:c8:
8a:25:c7:0a:02:14:1b:eb:16:49:cd:b4:d8:74:e2:
6b:fd:9d:ed:36:77:90:62:fd:2b:4a:b4:29:93:40:
13:ae:70:1c:23:c1:52:21:22:14:25:e2:ab:d2:80:
03:d9:b8:d9:db:ee:ed:13:14:f6:98:4d:f9:74:c1:
d9:33:e7:8b:67:5b:38:cb:59:89:b4:96:37:a9:a7:
67:09:39:a0:4a:64:f4:89:b5:86:6e:d0:bb:ff:9f:
d4:cf:4f:b2:89:32:55:43:99:bf:34:ac:92:ce:4f:
14:6a:6e:22:39:f3:5d:e2:cc:b4:37:28:b5:4e:d4:
d2:3e:3e:3c:bd:c1:53:04:70:60:0b:c6:89:c5:d5:
6f:23:82:cf:fb:2c:15:91:bb:21:c0:47:02:a4:04:
ff:ec:c6:7e:a6:b6:f0:76:ac:a2:27:65:26:b6:39:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:91:AF:31:03:19:44:E6:97:3A:13:BB:34:6F:B2:1B:6A:72:89
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Y_uRrzEDGUTmlzoTuzRvshtqcok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.63.0/24
84.32.107.0/24
84.32.149.0/24
84.32.152.0/24
84.32.154.0/24
84.32.156.0/24
84.32.177.0/24
84.32.218.0/24
84.32.244.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
56:16:6b:55:28:a4:2f:89:68:10:8d:08:b7:3e:b3:8e:92:53:
9e:00:c1:24:f8:13:ca:8b:ec:0b:09:94:69:fd:86:22:14:ed:
8f:83:66:16:d9:8c:71:7a:ed:b0:1d:fc:80:c4:45:da:10:09:
81:90:11:19:78:39:4f:f6:63:a2:42:7e:7d:f1:c3:62:50:5a:
87:9b:2b:fe:fa:45:90:91:7f:8b:e3:c2:57:04:b8:e3:2b:e7:
4b:2f:08:ca:b2:2a:e1:ea:8c:f7:19:c8:04:29:c5:14:eb:98:
d9:93:9c:c0:89:b7:02:34:7f:0c:fa:c1:d0:94:a9:2d:b7:6d:
32:eb:ec:e6:05:fe:fd:55:1a:b8:a8:6e:ae:24:40:6d:6c:aa:
8e:d2:0f:a7:61:ff:80:26:d3:26:04:b1:a4:42:f0:45:ac:2b:
ba:23:06:ee:fd:96:3d:c7:fd:1b:97:aa:b4:59:7d:3d:4c:8f:
38:b9:d3:93:32:6d:3a:8f:ea:a8:2c:b4:ac:d0:c9:db:a4:7e:
f8:f1:2d:e3:85:c8:72:1c:56:2e:15:83:21:64:3b:07:4e:2f:
b3:bc:3b:87:c4:d8:f8:d2:fc:11:8e:75:e3:50:53:63:4e:40:
7f:54:78:16:ad:70:e8:21:cf:f1:56:4e:4d:a8:fd:6e:f9:2c:
d4:6b:fe:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZbEcDjWm1FO6fH5NHZ56lw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwNTEyMTIyMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2ZiOTFhZjMxMDMxOTQ0ZTY5NzNhMTNiYjM0NmZiMjFiNmE3Mjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO/MzwYMbRCuVld25FA7uZ2zf36j
YNSGTXCQqNmXysBjiP9SdyP1ZW5tBlqcqhMsrigfPjsJlDCz/H7tF8AcoZVmxBQs
2IJ68yWD9YlIV5UJNLLe6j3BkMiKJccKAhQb6xZJzbTYdOJr/Z3tNneQYv0rSrQp
k0ATrnAcI8FSISIUJeKr0oAD2bjZ2+7tExT2mE35dMHZM+eLZ1s4y1mJtJY3qadn
CTmgSmT0ibWGbtC7/5/Uz0+yiTJVQ5m/NKySzk8Uam4iOfNd4sy0Nyi1TtTSPj48
vcFTBHBgC8aJxdVvI4LP+ywVkbshwEcCpAT/7MZ+prbwdqyiJ2UmtjlfTQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFGP7ka8xAxlE5pc6E7s0b7IbanKJMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvWV91UnJ6RURHVVRtbHpvVHV6UnZzaHRxY29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAVCAPAwQA
VCAYAwQAVCA/AwQAVCBrAwQAVCCVAwQAVCCYAwQAVCCaAwQAVCCcAwQAVCCxAwQA
VCDaAwQAVCD0AwQAWNgpAwQAWNi6MA0GCSqGSIb3DQEBCwUAA4IBAQBWFmtVKKQv
iWgQjQi3PrOOklOeAMEk+BPKi+wLCZRp/YYiFO2Pg2YW2Yxxeu2wHfyAxEXaEAmB
kBEZeDlP9mOiQn598cNiUFqHmyv++kWQkX+L48JXBLjjK+dLLwjKsirh6oz3GcgE
KcUU65jZk5zAibcCNH8M+sHQlKktt20y6+zmBf79VRq4qG6uJEBtbKqO0g+nYf+A
JtMmBLGkQvBFrCu6Iwbu/ZY9x/0bl6q0WX09TI84udOTMm06j+qoLLSs0MnbpH74
8S3jhchyHFYuFYMhZDsHTi+zvDuHxNj40vwRjnXjUFNjTkB/VHgWrXDoIc/xVk5N
qP1u+SzUa/6x
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:09 2025 by rpki-client