Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bc1xIle9ZTMR4u8CwNihXOrmxaw.roa
File: Bc1xIle9ZTMR4u8CwNihXOrmxaw.roa (raw, json)
Hash identifier: Tmj26mjBUaOvpyf4lBkjoTREd5TAJV+cRvH8oF5FEy8=
Subject key identifier: 05:CD:71:22:57:BD:65:33:11:E2:EF:02:C0:D8:A1:5C:EA:E6:C5:AC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A164B63DDBA7BE9F805B65742A5D5BD5AE
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bc1xIle9ZTMR4u8CwNihXOrmxaw.roa
Signing time: Thu 22 Oct 2026 17:43:47 +0000
ROA not before: Thu 22 Oct 2026 17:43:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.53.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.220.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.68.0/24 maxlen: 24
88.216.73.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.195.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.254.0/24 maxlen: 24
88.216.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:b6:3d:db:a7:be:9f:80:5b:65:74:2a:5d:5b:d5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 22 17:43:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05cd712257bd653311e2ef02c0d8a15ceae6c5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:a1:62:fe:bd:8c:30:9e:36:d1:3e:d7:72:
04:a4:45:ea:cc:7a:f8:d3:45:b8:91:9b:78:05:77:
8f:8b:85:c6:71:a8:ba:a3:c0:36:f6:8b:75:37:7e:
67:6d:b1:fd:5b:47:09:11:3a:c9:77:4b:c3:5f:ac:
8d:4d:af:75:1e:7f:ee:d4:07:74:bb:6a:9c:32:3e:
c8:45:e4:d3:0f:4b:32:60:1b:c2:c3:7c:d3:ac:32:
ba:8d:b0:74:53:ed:5d:0b:75:be:c8:0a:f5:a2:3a:
36:5a:85:d0:43:1b:69:bd:8c:1a:fc:23:30:bb:8c:
b1:33:20:e8:0e:39:84:b6:a3:75:29:85:80:67:4d:
c1:44:fe:33:44:6d:a9:16:56:9d:f6:79:d6:54:1d:
d3:6b:20:a1:d7:d5:ab:f2:f6:e4:34:bf:e4:36:26:
9c:e1:ed:d0:8c:de:0a:b8:55:e1:6a:ee:ea:fa:3c:
86:de:cb:ca:e6:b7:dc:f2:ac:ed:0a:31:ea:a4:74:
ad:8d:4b:50:ac:1e:c1:32:41:a4:cf:6d:f7:de:e0:
3b:72:c5:06:d5:a0:8f:1d:27:b2:47:d4:1f:d4:fb:
28:d6:09:1a:7c:23:57:e3:ec:5e:3d:fc:da:9b:dc:
b6:73:4f:1c:49:17:1f:dc:38:de:4b:ea:ec:cc:f7:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CD:71:22:57:BD:65:33:11:E2:EF:02:C0:D8:A1:5C:EA:E6:C5:AC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Bc1xIle9ZTMR4u8CwNihXOrmxaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.48.0/24
84.32.53.0/24
84.32.61.0/24
84.32.63.0/24
84.32.70.0/23
84.32.128.0/22
84.32.220.0/24
88.216.39.0/24
88.216.57.0/24
88.216.68.0/24
88.216.73.0/24
88.216.183.0-88.216.184.255
88.216.195.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
88.216.254.0/23
Signature Algorithm: sha256WithRSAEncryption
47:db:cd:38:5d:5d:71:27:98:75:4c:16:9a:a2:84:6c:be:4e:
7d:3f:f9:8d:5b:52:2d:89:83:ce:00:de:b0:1a:b9:d0:cb:fa:
81:0b:23:cb:5f:18:49:41:7b:42:9d:4d:76:c2:80:3c:37:94:
fe:b4:89:ef:c5:83:6b:51:98:28:a1:ae:a6:04:0e:9c:59:58:
55:ad:73:7c:7e:18:64:bb:21:4e:0f:ac:7b:80:15:16:36:05:
a8:67:98:f0:b7:66:6a:29:43:e0:39:e4:de:b7:e8:e7:ef:8a:
d2:3c:8f:d4:df:8f:48:af:5c:3b:c6:9d:2d:a6:5c:f5:33:20:
f6:a8:45:b0:51:86:f7:77:0d:90:1c:25:5a:35:53:84:40:bd:
6b:70:b6:f6:e9:9c:1b:fd:05:44:4b:83:bf:d8:c3:53:23:47:
a2:9a:bb:f2:d1:2f:5e:18:99:bd:d1:bc:84:13:3d:e5:22:49:
15:61:31:99:c9:0c:8e:00:c5:10:b7:c7:d5:6a:dd:17:ad:ca:
6b:4a:8a:a8:4b:bc:19:29:53:e5:a6:de:3c:04:98:be:59:a8:
08:aa:7c:0e:df:66:3b:31:64:56:a0:86:1c:58:4e:3f:d6:7a:
27:b2:d0:de:6e:3c:e7:ea:26:09:ec:9d:71:f1:f2:51:cf:0f:
d2:b3:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:37 2026 by rpki-client