Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Z9xFzmTGlL7zVwNqpmVaI7LWHUM.roa
File: Z9xFzmTGlL7zVwNqpmVaI7LWHUM.roa (raw, json)
Hash identifier: A+LUv/0srO0ziQToWgZ4RdWcIxVk0ZwDqP+BmXlgpo0=
Subject key identifier: 67:DC:45:CE:64:C6:94:BE:F3:57:03:6A:A6:65:5A:23:B2:D6:1D:43
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CB00164D8BE3EB52788FDF77070F01666
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Z9xFzmTGlL7zVwNqpmVaI7LWHUM.roa
Signing time: Mon 02 Mar 2026 19:23:27 +0000
ROA not before: Mon 02 Mar 2026 19:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.230.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.72.0/22 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:01:64:d8:be:3e:b5:27:88:fd:f7:70:70:f0:16:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 2 19:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67dc45ce64c694bef357036aa6655a23b2d61d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:31:aa:5a:1e:d9:eb:44:89:11:14:eb:23:
80:0a:ea:b8:6a:eb:0e:89:26:33:67:30:af:ef:04:
b0:59:ac:08:78:bd:4f:a0:2a:44:73:1d:13:1e:d6:
e6:b1:1c:ba:14:51:46:6a:44:7f:80:4a:f2:66:4a:
14:e1:56:a8:f6:fb:17:99:15:31:be:78:d0:ab:54:
a1:13:c4:a1:09:ca:fb:e5:db:67:f4:69:e1:a0:99:
cb:fb:0d:ed:c7:3f:d6:3c:ab:39:0d:cf:39:b2:d1:
16:c6:08:1b:9d:10:d0:4e:60:85:ab:b2:33:7d:66:
71:65:a1:ff:50:90:3e:4f:dd:ce:3e:13:00:98:05:
cf:10:9d:04:09:02:b4:05:27:e7:31:ac:b9:d4:ae:
d5:09:99:1a:db:ff:db:c4:2f:df:3a:87:4b:4d:b6:
24:71:13:ce:3b:0a:fe:f6:b3:cd:05:06:c3:0c:b8:
9c:12:16:6b:bd:ee:20:a0:95:e1:81:b7:54:e9:ab:
44:dc:f5:8c:d1:21:05:80:0d:7e:a1:4a:62:ff:24:
e4:52:b1:02:e9:39:1b:39:e9:41:dd:26:dd:dc:70:
8a:d5:33:7f:05:73:b4:b9:0e:b5:e7:dd:5b:76:28:
58:64:82:c9:5e:34:d6:79:7c:48:4b:3d:9e:d4:ae:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:45:CE:64:C6:94:BE:F3:57:03:6A:A6:65:5A:23:B2:D6:1D:43
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Z9xFzmTGlL7zVwNqpmVaI7LWHUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
84.32.20.0/22
84.32.46.0/23
84.32.61.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.230.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.66.0/23
88.216.72.0/22
88.216.130.0/23
88.216.134.0/23
Signature Algorithm: sha256WithRSAEncryption
14:2e:a3:6b:10:35:df:3d:a6:69:47:40:5d:77:e7:6e:6e:8e:
cf:ac:a5:b6:01:6e:fe:bc:8a:8d:7b:e6:78:45:c3:0a:20:5e:
a0:7a:68:ea:10:28:62:bc:39:7d:91:11:bb:02:47:47:c3:ed:
b2:e5:d7:7c:54:21:dd:11:73:c0:64:6b:98:9f:ed:79:7e:b8:
bd:62:a0:74:81:29:cd:f4:df:ae:17:5a:a5:46:58:41:d1:b9:
01:8c:9d:a7:00:3e:e4:b8:97:9b:8e:ce:0c:a7:59:99:96:b5:
b4:bb:77:0a:86:16:7f:38:94:d5:34:79:81:73:81:1e:99:12:
a4:4d:df:42:1f:be:b2:d7:69:95:ee:1b:36:44:72:be:53:d7:
61:1e:86:11:11:d2:ce:98:93:3d:1a:24:88:d7:52:6f:4a:65:
bd:10:10:55:ed:c0:cc:3d:14:15:fa:c8:59:b3:f5:8b:c4:09:
3e:68:0c:d5:2c:e2:68:19:28:c7:e6:27:d8:00:bf:a9:5b:49:
82:51:91:1c:3b:38:32:57:fe:b1:bd:0d:dd:86:c8:79:65:a9:
05:3f:12:96:45:a8:7e:c9:76:05:3f:59:8b:eb:c5:02:eb:97:
0d:05:e7:83:2f:a8:b0:9b:e9:57:8a:45:fc:6d:72:92:14:98:
10:0c:f9:84
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZywAWTYvj61J4j993Bw8BZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwMzAyMTkyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2RjNDVjZTY0YzY5NGJlZjM1NzAzNmFhNjY1NWEyM2IyZDYxZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqwxqloe2etEiREU6yOACuq4ausO
iSYzZzCv7wSwWawIeL1PoCpEcx0THtbmsRy6FFFGakR/gEryZkoU4Vao9vsXmRUx
vnjQq1ShE8ShCcr75dtn9GnhoJnL+w3txz/WPKs5Dc85stEWxggbnRDQTmCFq7Iz
fWZxZaH/UJA+T93OPhMAmAXPEJ0ECQK0BSfnMay51K7VCZka2//bxC/fOodLTbYk
cRPOOwr+9rPNBQbDDLicEhZrve4goJXhgbdU6atE3PWM0SEFgA1+oUpi/yTkUrEC
6TkbOelB3Sbd3HCK1TN/BXO0uQ61591bdihYZILJXjTWeXxISz2e1K7RwQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFGfcRc5kxpS+81cDaqZlWiOy1h1DMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvWjl4RnptVEdsTDd6VndOcXBtVmFJN0xXSFVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAVCAHAwQC
VCAUAwQBVCAuAwQAVCA9AwQCVCCUAwQBVCCuAwQBVCDWAwQAVCDmAwQCVCD0AwQB
WNgWAwQBWNgsAwQBWNhCAwQCWNhIAwQBWNiCAwQBWNiGMA0GCSqGSIb3DQEBCwUA
A4IBAQAULqNrEDXfPaZpR0Bdd+dubo7PrKW2AW7+vIqNe+Z4RcMKIF6gemjqEChi
vDl9kRG7AkdHw+2y5dd8VCHdEXPAZGuYn+15fri9YqB0gSnN9N+uF1qlRlhB0bkB
jJ2nAD7kuJebjs4Mp1mZlrW0u3cKhhZ/OJTVNHmBc4EemRKkTd9CH76y12mV7hs2
RHK+U9dhHoYREdLOmJM9GiSI11JvSmW9EBBV7cDMPRQV+shZs/WLxAk+aAzVLOJo
GSjH5ifYAL+pW0mCUZEcOzgyV/6xvQ3dhsh5ZakFPxKWRah+yXYFP1mL68UC65cN
BeeDL6iwm+lXikX8bXKSFJgQDPmE
-----END CERTIFICATE-----
Generated at Thu Mar 5 17:34:47 2026 by rpki-client