Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/076LOd6W-dR2kLHOV3RFPwstl2w.roa
File: 076LOd6W-dR2kLHOV3RFPwstl2w.roa (raw, json)
Hash identifier: S1SkH+ZvnypmtsxUknGeksT+l1cE9ddgl9Ag/U875Fg=
Subject key identifier: D3:BE:8B:39:DE:96:F9:D4:76:90:B1:CE:57:74:45:3F:0B:2D:97:6C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019E3E82C14D7ECE785F73BCAD38528B324F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/076LOd6W-dR2kLHOV3RFPwstl2w.roa
Signing time: Tue 19 May 2026 04:33:36 +0000
ROA not before: Tue 19 May 2026 04:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.6.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3e:82:c1:4d:7e:ce:78:5f:73:bc:ad:38:52:8b:32:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 19 04:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3be8b39de96f9d47690b1ce5774453f0b2d976c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:62:82:1c:54:12:62:ce:46:04:c1:7d:5c:
84:df:f6:6e:3b:6c:e8:df:e1:4a:b6:b1:60:9e:15:
70:3e:93:47:f1:f2:5b:8c:04:ac:9e:6f:82:14:40:
7e:12:e3:64:5a:87:54:1a:9d:31:49:64:72:8d:51:
63:7a:a7:49:96:c0:31:2f:08:d5:2b:d8:51:70:8e:
f4:e2:58:14:d9:79:a1:5e:ea:96:3f:8f:a4:4b:7e:
6c:bc:de:2c:3b:3f:c4:ae:c6:f7:5c:40:f4:06:a1:
38:5f:80:f2:2b:3e:48:c2:74:3c:54:ce:1d:a3:f0:
6b:a3:a1:57:f7:69:fc:fb:79:18:0b:93:33:ed:ec:
43:73:74:ff:54:47:22:31:41:32:52:16:80:fc:a0:
fc:5e:27:93:97:40:98:33:39:81:6e:19:25:4b:7a:
b6:6b:1c:81:b0:9b:81:31:d2:c4:1c:39:56:04:c8:
45:cd:55:3d:d5:d6:6d:5e:f2:6a:cb:fc:de:cd:eb:
de:0b:ec:ff:f2:20:aa:19:77:f5:dd:d6:90:a8:df:
b0:c2:4d:20:7f:b0:e5:d2:13:24:8e:80:cb:43:0b:
b3:1b:9a:3c:f9:58:28:34:e9:70:96:8e:ef:92:5a:
13:11:b6:01:9e:4f:71:20:8f:ad:6b:74:26:75:27:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:8B:39:DE:96:F9:D4:76:90:B1:CE:57:74:45:3F:0B:2D:97:6C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/076LOd6W-dR2kLHOV3RFPwstl2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
88.216.21.0/24
88.216.98.0/24
88.216.103.0/24
88.216.129.0/24
88.216.185.0/24
88.216.212.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:f6:86:45:c4:71:22:d0:7e:ce:68:1e:e1:ac:ab:c5:a0:
73:fe:31:ca:c7:26:96:cd:17:70:0a:b8:55:b5:35:ec:18:a4:
4d:6b:02:88:89:1d:12:00:92:c1:ca:ce:5b:4e:5c:8c:81:d1:
02:2e:4b:28:46:34:3a:ab:14:0c:1f:67:a3:2f:c7:c6:b0:1c:
04:d7:43:b1:e9:f0:54:fa:7b:52:e0:7f:a4:29:e4:40:57:c8:
f8:d6:a2:2d:95:b1:bf:3f:d6:c0:e4:99:fd:87:05:2c:7c:2f:
3f:17:f7:6c:28:82:b0:7b:0b:6f:3e:f3:27:10:25:e0:6a:5a:
4e:c1:71:8d:14:0b:e7:eb:80:8a:23:cd:d8:66:cd:58:3a:c6:
aa:3e:6e:52:5d:c3:e8:16:a9:01:78:63:33:03:9e:25:52:76:
9f:bc:84:05:19:13:c3:41:04:5f:34:7c:58:e8:30:6a:8b:9e:
50:d4:d3:98:05:df:5a:15:a1:7e:14:53:07:ec:66:19:01:62:
86:26:a6:37:31:ee:f5:04:61:cb:05:7e:49:9b:f3:2c:d2:66:
6c:40:fb:f9:26:31:d5:cd:66:6e:f3:3f:f5:2a:15:ab:34:6f:
76:9c:37:f9:65:13:73:61:5e:75:03:26:5e:f5:0f:4a:a3:a0:
8b:39:90:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:52 2026 by rpki-client