Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7moPHkycqrshgqyISD9NRtXs5ik.roa
File: 7moPHkycqrshgqyISD9NRtXs5ik.roa (raw, json)
Hash identifier: c5AVs3Z8eGTWndhLoEpVIDG22A1/XpfD5MpVYJ0CU3g=
Subject key identifier: EE:6A:0F:1E:4C:9C:AA:BB:21:82:AC:88:48:3F:4D:46:D5:EC:E6:29
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A1011009D46DC0490298196D3ABC18B453
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7moPHkycqrshgqyISD9NRtXs5ik.roa
Signing time: Sat 03 Oct 2026 09:19:50 +0000
ROA not before: Sat 03 Oct 2026 09:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.52.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.96.0/24 maxlen: 24
84.32.101.0/24 maxlen: 24
84.32.102.0/24 maxlen: 24
84.32.103.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
84.32.231.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.75.0/24 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
88.216.252.0/24 maxlen: 24
88.216.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:10:09:d4:6d:c0:49:02:98:19:6d:3a:bc:18:b4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 3 09:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee6a0f1e4c9caabb2182ac88483f4d46d5ece629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:c7:84:4d:ae:f6:b0:69:d1:7a:e0:aa:f5:
7a:f7:6e:56:ab:8a:fc:ed:1c:cb:43:25:a8:17:2e:
eb:fe:23:0c:58:fa:6d:88:84:ba:dd:de:fe:59:31:
4c:c6:ce:1a:9c:f7:9a:b4:8c:40:d5:b7:aa:49:63:
49:e8:57:cf:4b:3e:11:f3:3a:72:97:7c:d3:bb:27:
70:4d:d4:2f:ac:95:e9:31:85:bc:34:65:dc:50:d6:
d9:0e:e0:9e:21:87:e6:ec:fa:b1:b8:6b:c7:03:71:
72:ea:1e:4a:6b:e9:8b:a0:25:27:cb:2a:1e:e6:d4:
cf:6d:d6:8d:d2:07:e9:20:71:63:7d:30:1f:a2:25:
17:e6:63:0e:3f:9a:f3:44:5d:97:72:d3:27:92:cb:
54:24:07:a5:75:1e:e0:5d:5d:39:2f:7f:21:cc:93:
90:cd:c3:35:07:9a:b9:29:46:75:41:59:ad:cd:c5:
ea:57:f8:91:65:21:b9:d8:d2:8b:84:53:7f:49:f3:
d9:5c:e8:69:47:57:4d:27:b8:0e:78:89:82:44:dd:
15:b1:8b:50:ad:f3:9d:5d:d2:d1:21:bb:f5:98:77:
f9:9d:63:85:58:b7:8a:ab:2a:b7:2b:27:a1:68:ab:
97:ac:24:8b:a2:07:3f:db:cd:d7:5e:bc:67:03:1c:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:0F:1E:4C:9C:AA:BB:21:82:AC:88:48:3F:4D:46:D5:EC:E6:29
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/7moPHkycqrshgqyISD9NRtXs5ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.52.0/24
84.32.64.0/24
84.32.96.0/24
84.32.101.0-84.32.104.255
84.32.108.0/24
84.32.176.0/23
84.32.184.0/21
84.32.231.0/24
88.216.61.0/24
88.216.63.0/24
88.216.75.0/24
88.216.92.0/23
88.216.187.0/24
88.216.252.0/23
Signature Algorithm: sha256WithRSAEncryption
82:4e:07:f6:e4:22:d6:3a:ce:76:24:58:8a:33:ce:18:ef:0c:
e1:af:8c:37:8e:ea:d3:74:c5:33:eb:19:70:b4:c5:f6:ef:72:
6c:4f:3a:a5:52:dd:0f:6d:8c:52:58:40:2e:bd:93:18:f4:4d:
db:3c:52:b1:a3:47:55:20:d3:a9:2c:4f:0f:c8:e7:31:26:a2:
4e:af:6c:78:ea:a7:07:9a:5d:f4:be:2a:3c:c2:c5:45:32:9b:
63:93:75:9c:79:d8:57:a6:10:de:81:6e:6e:6d:2d:9b:04:75:
fb:31:58:f2:23:f9:c8:ae:66:48:45:e5:f0:5d:ae:ce:19:61:
d6:ee:50:52:7a:ac:17:37:f2:e1:e1:eb:8a:fe:9c:cc:b2:89:
4c:5a:d5:7f:4d:78:c3:02:19:d2:21:17:f3:82:c8:73:25:50:
d4:01:09:7f:23:76:7a:ac:be:57:58:1e:af:37:ed:c5:a5:a7:
25:93:f0:fa:a6:20:eb:63:51:dd:95:73:26:88:b0:b0:d4:3e:
dd:a3:9a:3c:28:a2:7b:f5:64:bf:fb:20:c6:81:27:75:de:80:
97:d5:68:c4:68:e2:a1:80:d0:c5:f4:4b:2a:7f:a5:c8:27:bd:
94:26:54:d6:a1:cd:3d:f4:78:70:0c:41:dc:74:18:22:77:de:
41:35:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:38 2026 by rpki-client