Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AmHBVO5bMRzfxAIMSiBGH7BXWpQ.roa
File: AmHBVO5bMRzfxAIMSiBGH7BXWpQ.roa (raw, json)
Hash identifier: ENFqnlq0VIOo5GpkFmIra+HiUPd2LuUa/n8EqhDxdqc=
Subject key identifier: 02:61:C1:54:EE:5B:31:1C:DF:C4:02:0C:4A:20:46:1F:B0:57:5A:94
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A051CE0A25A21753CCE27D6F7E12B53CF1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AmHBVO5bMRzfxAIMSiBGH7BXWpQ.roa
Signing time: Sun 30 Aug 2026 08:34:12 +0000
ROA not before: Sun 30 Aug 2026 08:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.99.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.208.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.72.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:ce:0a:25:a2:17:53:cc:e2:7d:6f:7e:12:b5:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 30 08:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0261c154ee5b311cdfc4020c4a20461fb0575a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:42:6a:2c:7e:c5:26:a0:63:dc:24:b9:e4:
83:76:cc:1e:fd:06:3f:c4:c8:63:ec:05:8f:6a:fd:
40:9b:7a:06:d7:12:8c:6e:93:da:ae:4f:0c:18:65:
9c:88:96:4e:77:4d:00:57:b7:06:7b:c9:47:ab:94:
86:98:30:9e:9f:bf:a7:fc:55:6a:30:4b:f1:97:99:
fb:8c:c5:27:33:db:42:cc:d2:53:30:54:79:4a:cc:
05:6f:57:37:8f:a4:b5:cc:84:7e:05:19:65:75:df:
18:2d:8b:5c:0f:c6:3f:6b:9c:f5:5f:9b:60:60:f1:
b5:87:d2:72:f6:9b:95:69:92:28:05:1d:e8:47:82:
36:5c:f9:2c:42:f8:6c:02:e8:50:73:f7:de:9d:36:
03:63:ea:52:14:40:13:52:d3:68:04:d4:71:e0:27:
d8:bc:88:b6:e9:76:17:9f:b4:a6:d9:6b:31:ad:af:
94:77:19:a6:da:a1:05:c1:2d:7d:db:93:f5:86:27:
70:49:b4:70:b5:fa:f7:e2:b8:b5:7b:ad:41:c6:01:
e4:42:8d:b7:09:d5:9b:df:d1:5c:79:9b:37:5e:77:
d1:06:59:ff:c3:c2:43:8c:c4:33:04:d8:10:49:2b:
bb:78:6c:c1:01:1b:b2:5a:cd:d3:1f:ec:a6:bc:0f:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:C1:54:EE:5B:31:1C:DF:C4:02:0C:4A:20:46:1F:B0:57:5A:94
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AmHBVO5bMRzfxAIMSiBGH7BXWpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.99.0/24
84.32.106.0/24
84.32.154.0/24
84.32.208.0/24
84.32.217.0/24
88.216.60.0/24
88.216.72.0/24
88.216.130.0/23
88.216.189.0/24
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fa:35:57:b7:e0:d3:07:46:f1:2c:ab:a1:48:c3:d9:c2:6c:
ed:c2:14:8d:8d:7d:db:c6:d5:44:f3:af:26:bc:42:fa:76:32:
21:99:d0:5e:79:bc:09:07:63:d7:44:13:60:b3:6e:48:4f:e1:
2b:8d:bd:33:0e:95:68:b5:22:87:08:11:f7:c8:17:96:be:99:
a3:09:78:ab:ad:e6:e8:72:14:a8:e0:58:61:88:18:1b:dc:21:
f1:51:3b:cb:25:be:de:55:92:4d:b9:ac:db:62:d1:b2:14:4c:
39:26:41:91:04:66:42:3c:f2:e2:4d:a9:0e:f2:72:ce:d6:c7:
9a:d0:93:1f:56:70:d4:99:9d:5e:6f:8e:fa:0a:72:ee:48:22:
9f:63:ff:e7:f8:2e:80:d5:a8:fa:c1:77:43:77:be:60:f2:f1:
b0:79:5e:c4:00:13:83:55:5f:99:a0:bb:7a:fe:02:e5:52:d4:
72:0c:52:95:5c:26:a6:e9:e8:01:ee:63:01:b2:fe:62:4e:2d:
87:b6:42:3e:d8:19:5a:67:d7:70:5f:16:e2:fd:ec:5d:cd:40:
8f:b4:d2:b9:b9:ba:56:52:54:06:6b:dd:f0:14:4e:55:d4:48:
8d:da:6a:19:17:fb:75:8c:50:b3:9e:1e:9a:f8:88:08:a3:5a:
82:2e:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:56 2026 by rpki-client