Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B_fOECLSrZZ0vY5MlUloj5UrnaY.roa
File: B_fOECLSrZZ0vY5MlUloj5UrnaY.roa (raw, json)
Hash identifier: /WruT7ZULQEZGt+SWw6KIQUApGbsQU14ZSo06q509Hg=
Subject key identifier: 07:F7:CE:10:22:D2:AD:96:74:BD:8E:4C:95:49:68:8F:95:2B:9D:A6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A143F0275796F3A73D795FE5F910BD6B63
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B_fOECLSrZZ0vY5MlUloj5UrnaY.roa
Signing time: Fri 16 Oct 2026 08:59:34 +0000
ROA not before: Fri 16 Oct 2026 08:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f0:27:57:96:f3:a7:3d:79:5f:e5:f9:10:bd:6b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 16 08:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07f7ce1022d2ad9674bd8e4c9549688f952b9da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:ff:31:c9:18:8a:31:ec:42:2f:af:2b:f2:
d4:b1:85:88:42:ae:ff:69:9b:44:c5:8c:fc:71:e5:
22:4e:a8:bf:94:53:ab:70:4c:90:5c:19:41:3a:b4:
ba:7f:73:b0:7c:31:52:79:0e:25:9c:d0:84:84:c1:
66:98:4e:c5:43:4b:2e:fb:18:17:9e:9c:b7:b0:f3:
07:53:d7:45:90:d2:e8:7b:83:a8:ec:70:e8:41:d4:
ab:74:be:a7:89:f1:16:0b:b7:1d:aa:80:9b:cc:ed:
89:83:7d:b2:0b:04:55:93:1d:e0:9f:8e:42:09:0d:
c5:19:b8:f4:ed:a0:c2:07:26:81:de:71:31:39:83:
35:4b:87:a8:17:dd:92:a8:c2:35:b4:f5:70:85:1b:
2a:53:69:2d:75:5d:2d:d5:a5:a7:f8:a1:15:17:b3:
12:cc:ea:4c:e8:19:b8:18:bf:57:e8:a9:cb:1d:c8:
6b:c8:1d:a8:b3:e8:3d:be:be:18:bd:05:1f:b6:65:
4f:6b:54:e7:e8:7f:ac:37:b7:31:31:f8:1b:73:14:
c6:ee:85:b6:55:26:52:16:d6:90:b6:73:e3:fc:06:
8b:74:52:9f:8e:6a:c5:9d:56:08:a2:8c:38:b5:9b:
0c:18:3a:00:42:a0:03:c9:54:cc:13:7b:89:94:9f:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F7:CE:10:22:D2:AD:96:74:BD:8E:4C:95:49:68:8F:95:2B:9D:A6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B_fOECLSrZZ0vY5MlUloj5UrnaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.107.0/24
84.32.156.0/24
84.32.218.0/24
88.216.41.0/24
88.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
73:94:4e:9c:e7:1e:55:bb:86:7f:dc:f2:50:d0:2d:4d:1c:87:
34:7a:50:d0:20:89:75:40:03:b6:51:ea:75:24:04:c1:06:38:
23:ec:44:2f:f8:ad:45:3a:d1:d4:32:c8:af:01:7d:8d:ed:3b:
56:01:b4:66:c1:97:06:03:60:1d:14:22:df:2e:da:ba:db:b5:
ca:e3:c4:89:31:8a:b6:e9:42:51:30:99:55:ef:e3:9f:4f:f1:
ff:f6:38:40:ab:33:36:f7:a8:60:c1:78:d7:e6:df:2b:4a:43:
47:6a:02:34:d5:11:04:b3:44:ff:64:f6:12:9f:77:ae:d6:5a:
1b:27:ee:21:c3:6a:2c:b3:09:50:83:8e:8c:16:bc:e7:22:d6:
3b:c6:c1:c7:a8:fd:a5:f6:95:8d:f3:19:51:92:5d:2d:e9:ce:
ca:30:9c:ad:26:c6:67:c0:28:5c:73:d9:f0:9d:ea:ac:5e:c8:
cb:40:0a:4a:fe:89:06:68:d1:39:25:f3:a4:34:72:2c:00:88:
73:ca:d4:78:8f:25:5a:7a:0d:82:9d:d0:fd:9c:59:3d:51:f3:
74:b5:0b:5d:7c:6c:72:83:cf:81:29:00:af:1f:b9:d7:cd:13:
81:aa:f8:04:19:9e:da:df:37:b2:96:53:76:61:98:fa:5c:e7:
1a:6e:bb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:54:57 2026 by rpki-client