Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ipx3q23fTqyYTD0KPTUpChuJBTE.roa
File: Ipx3q23fTqyYTD0KPTUpChuJBTE.roa (raw, json)
Hash identifier: Oa6COZAueP902wGmPuBkoON8rzQAg9jEzs+y/JLoxIE=
Subject key identifier: 22:9C:77:AB:6D:DF:4E:AC:98:4C:3D:0A:3D:35:29:0A:1B:89:05:31
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019DB54D7BC56C8ECE890650FBB54741A2A1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ipx3q23fTqyYTD0KPTUpChuJBTE.roa
Signing time: Wed 22 Apr 2026 13:07:27 +0000
ROA not before: Wed 22 Apr 2026 13:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 88.216.181.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:4d:7b:c5:6c:8e:ce:89:06:50:fb:b5:47:41:a2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 22 13:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=229c77ab6ddf4eac984c3d0a3d35290a1b890531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:ec:1c:60:b2:71:ba:c8:ed:60:96:7a:cf:
28:04:15:b6:80:ae:11:2e:92:bc:85:04:d6:29:47:
f1:e7:a0:1c:13:00:f3:6d:03:fe:c4:8a:b0:a2:1e:
7c:b7:da:bc:f7:dc:48:f0:f7:0a:90:83:ac:e8:42:
2e:78:64:d9:1e:67:b7:63:b7:89:47:56:d3:be:8a:
4a:f0:d6:49:79:ee:95:91:48:5b:ad:c8:ff:bf:e4:
0d:c0:99:15:b2:f6:1d:50:6b:b8:6a:78:83:19:f3:
94:b3:78:76:c9:0b:6d:f2:0e:13:48:b6:03:16:7f:
b4:24:c1:9c:e9:6e:88:7f:bc:96:2d:29:d9:66:2a:
01:94:98:d3:85:1f:a1:0c:16:89:45:32:85:31:1d:
c1:47:62:87:c5:37:6e:ae:05:19:90:62:c0:73:14:
90:50:bf:c5:42:e5:8a:d2:46:57:be:44:e7:e7:a7:
72:a0:c2:44:82:c6:29:1c:d6:e8:80:05:4f:89:a6:
f9:c6:70:ac:6d:a4:97:91:36:23:3c:4b:21:87:a3:
03:27:e4:b1:1a:46:39:09:d4:47:d7:fe:7e:1c:cd:
23:fb:c7:29:0a:38:93:49:25:0e:2b:b7:35:83:8f:
63:8b:f7:5f:bf:c7:9c:1a:90:30:b5:77:c5:aa:14:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:77:AB:6D:DF:4E:AC:98:4C:3D:0A:3D:35:29:0A:1B:89:05:31
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Ipx3q23fTqyYTD0KPTUpChuJBTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.181.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:0f:ff:3c:c0:21:70:e3:20:79:f9:2c:31:e0:aa:60:57:c3:
f7:39:cc:75:1f:27:61:e2:aa:e5:ca:c2:e7:ee:69:68:15:ba:
af:30:68:5c:70:fa:21:1f:64:43:18:86:8b:9b:18:a7:30:cc:
3b:10:74:e7:73:97:70:24:4d:b3:46:8c:da:e8:97:2b:61:69:
66:c3:6f:cb:57:a2:97:a1:09:8c:9b:ea:c9:16:a5:32:b0:5d:
88:91:f5:9e:53:21:da:4b:9f:d2:d6:e8:9c:39:f3:63:d0:29:
27:fb:0a:0e:b4:c1:c7:80:cb:ac:17:fd:39:64:4d:9d:5e:13:
54:e7:48:3b:ac:0a:46:5e:77:a7:b3:a9:54:50:81:58:2c:40:
ae:86:5c:51:95:b6:62:f0:65:a0:cc:68:7c:c4:1e:52:bc:52:
44:73:f5:70:62:88:4b:f2:b7:a9:00:20:7f:ca:4e:88:b8:4f:
04:8d:c8:6d:00:81:c7:8d:09:e2:ac:c6:2c:ac:b2:09:77:54:
14:5f:c7:ad:96:a9:e0:b0:ab:a5:2c:f4:32:39:ea:0d:b3:99:
b5:b9:75:2c:f4:c1:0a:5c:ab:e1:87:3e:d5:63:10:f0:51:a2:
74:58:2e:52:73:6c:52:31:fb:78:1b:57:3c:f4:08:04:2b:30:
c7:a0:0c:f0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ21TXvFbI7OiQZQ+7VHQaKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwNDIyMTMwNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjljNzdhYjZkZGY0ZWFjOTg0YzNkMGEzZDM1MjkwYTFiODkwNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmDsHGCycbrI7WCWes8oBBW2gK4R
LpK8hQTWKUfx56AcEwDzbQP+xIqwoh58t9q899xI8PcKkIOs6EIueGTZHme3Y7eJ
R1bTvopK8NZJee6VkUhbrcj/v+QNwJkVsvYdUGu4aniDGfOUs3h2yQtt8g4TSLYD
Fn+0JMGc6W6If7yWLSnZZioBlJjThR+hDBaJRTKFMR3BR2KHxTdurgUZkGLAcxSQ
UL/FQuWK0kZXvkTn56dyoMJEgsYpHNbogAVPiab5xnCsbaSXkTYjPEshh6MDJ+Sx
GkY5CdRH1/5+HM0j+8cpCjiTSSUOK7c1g49ji/dfv8ecGpAwtXfFqhSAYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCKcd6tt306smEw9Cj01KQobiQUxMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvSXB4M3EyM2ZUcXlZVEQwS1BUVXBDaHVKQlRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNi1AwQC
WNjkAwQCWNjsMA0GCSqGSIb3DQEBCwUAA4IBAQBbD/88wCFw4yB5+Swx4KpgV8P3
Ocx1Hydh4qrlysLn7mloFbqvMGhccPohH2RDGIaLmxinMMw7EHTnc5dwJE2zRoza
6JcrYWlmw2/LV6KXoQmMm+rJFqUysF2IkfWeUyHaS5/S1uicOfNj0Ckn+woOtMHH
gMusF/05ZE2dXhNU50g7rApGXnens6lUUIFYLECuhlxRlbZi8GWgzGh8xB5SvFJE
c/VwYohL8repACB/yk6IuE8EjchtAIHHjQnirMYsrLIJd1QUX8etlqngsKulLPQy
OeoNs5m1uXUs9MEKXKvhhz7VYxDwUaJ0WC5Sc2xSMft4G1c89AgEKzDHoAzw
-----END CERTIFICATE-----
Generated at Sun May 3 14:47:52 2026 by rpki-client