Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LGbqtgwVX-XkVO3KgPvl3EDLxeY.roa
File: LGbqtgwVX-XkVO3KgPvl3EDLxeY.roa (raw, json)
Hash identifier: ZzPfoWuMBs7LvuAsueEIGgMnf/3tDrJUp+2eokalKzc=
Subject key identifier: 2C:66:EA:B6:0C:15:5F:E5:E4:54:ED:CA:80:FB:E5:DC:40:CB:C5:E6
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A051CEF54BBF9BA299B60CC0C537A81345
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LGbqtgwVX-XkVO3KgPvl3EDLxeY.roa
Signing time: Sun 30 Aug 2026 08:35:12 +0000
ROA not before: Sun 30 Aug 2026 08:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213896
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.98.0/24 maxlen: 24
84.32.100.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.70.0/24 maxlen: 24
88.216.74.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.182.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:ce:f5:4b:bf:9b:a2:99:b6:0c:c0:c5:37:a8:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 30 08:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c66eab60c155fe5e454edca80fbe5dc40cbc5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:57:15:8d:a7:15:3e:ae:f1:40:81:90:7a:cb:
90:c7:7e:d8:00:5f:1b:31:d5:12:e9:08:5b:63:9e:
14:ed:2b:15:02:78:1a:cc:c6:d8:d7:8a:56:2c:17:
9a:64:34:55:1d:5d:fa:1e:ee:69:68:52:fd:e9:bf:
a3:1e:81:bf:5b:92:e6:7c:e7:1c:90:27:cd:64:2f:
1d:f4:fc:4b:a7:e1:d9:f5:86:89:2c:f6:74:5f:3d:
7b:54:95:83:5d:54:02:f6:90:25:06:ff:16:37:1d:
09:9f:06:96:c2:3f:0b:0f:e9:df:2d:b3:ea:17:bb:
67:cb:cd:36:88:38:51:f4:49:f8:e6:80:5b:ad:b8:
6c:79:72:70:71:ea:c6:36:07:55:f2:74:22:b3:a1:
4a:57:1b:d2:df:bb:97:45:14:79:68:88:5f:01:7a:
60:b7:b8:53:68:33:55:36:eb:8b:e3:88:f3:a6:a2:
46:cb:5c:81:78:c1:c2:11:b7:a4:9b:f5:9d:31:3d:
03:23:c1:8e:ad:44:54:91:ce:89:0b:15:4d:cf:b8:
b6:01:76:5d:a8:e3:e6:3c:66:da:ad:26:3d:f9:d9:
74:3f:43:86:43:6b:30:46:87:dd:ec:ba:64:1f:b9:
2a:c1:55:db:08:ab:6a:af:54:a9:3c:8f:26:e7:22:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:66:EA:B6:0C:15:5F:E5:E4:54:ED:CA:80:FB:E5:DC:40:CB:C5:E6
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/LGbqtgwVX-XkVO3KgPvl3EDLxeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
84.32.98.0/24
84.32.100.0/24
84.32.223.0/24
88.216.36.0/24
88.216.70.0/24
88.216.74.0/24
88.216.132.0/24
88.216.182.0/24
88.216.190.0/24
88.216.211.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
88:64:30:e3:3d:5d:a8:a5:46:bb:6d:86:bc:f5:21:9b:46:d7:
e1:80:14:85:f3:06:b9:33:e4:14:94:cc:4a:1f:6a:c3:b5:f6:
81:27:82:a8:52:42:cb:fc:b1:31:ae:ca:b3:3c:76:cd:54:b6:
25:bd:03:9f:be:e5:e4:60:c9:0e:f3:99:c8:b4:9d:16:c6:ab:
a3:86:25:d9:12:3f:c7:83:96:54:63:22:4d:46:71:01:78:1f:
b5:34:04:7b:31:e4:d1:62:26:1f:cb:c3:5a:70:e3:73:04:ff:
3f:01:b1:7b:6a:95:6b:a9:c8:11:9c:87:dd:f5:8b:40:3d:33:
58:23:31:b6:35:3a:c2:40:c2:68:75:d8:56:77:b6:1b:a2:d5:
5b:16:3f:a3:ce:3b:be:00:d5:51:2b:91:a7:c0:1b:86:0a:28:
57:9b:27:27:60:e0:6d:a3:e0:a8:31:ab:fd:51:33:8f:9d:e7:
9a:25:7a:53:11:13:88:f4:3c:aa:c2:0b:e5:9d:80:4f:d3:49:
60:cf:7f:19:56:6c:39:a9:a4:0c:34:c3:b8:08:7b:7b:74:54:
d3:e1:51:4a:e8:be:f3:5b:e2:20:a0:c2:e2:f5:37:0c:21:40:
93:57:a9:d5:1e:9a:21:50:b2:7e:79:a6:ca:a1:bd:b6:34:97:
1d:4d:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:18 2026 by rpki-client