Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RVAc4s_RY1kUpQQn2ct_mGEG1Jg.roa
File: RVAc4s_RY1kUpQQn2ct_mGEG1Jg.roa (raw, json)
Hash identifier: zZwBcqzr+UKxeIUZ6M6zJ7OfahW8clgBpvrvJyzgufs=
Subject key identifier: 45:50:1C:E2:CF:D1:63:59:14:A5:04:27:D9:CB:7F:98:61:06:D4:98
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019FB90BF294D3E2BF997E4A778746504BB7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RVAc4s_RY1kUpQQn2ct_mGEG1Jg.roa
Signing time: Fri 31 Jul 2026 16:39:55 +0000
ROA not before: Fri 31 Jul 2026 16:39:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 84.32.148.0/24 maxlen: 24
84.32.210.0/24 maxlen: 24
88.216.108.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:0b:f2:94:d3:e2:bf:99:7e:4a:77:87:46:50:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 31 16:39:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45501ce2cfd1635914a50427d9cb7f986106d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:d2:a3:3c:6e:d7:5b:f1:e6:6d:76:a8:d7:
c6:8b:47:f1:32:7b:66:9e:18:b9:50:2e:ea:13:af:
7b:30:e0:7c:87:83:87:7a:fc:96:97:93:cb:1e:2a:
1b:4e:cf:73:65:f6:a3:f4:5e:4c:ad:6f:4a:f9:5b:
ef:fd:de:21:af:86:fb:55:12:04:f7:ec:42:28:82:
47:01:6a:15:d5:56:8e:7f:3e:e6:ed:92:60:d4:ae:
97:6f:6b:7c:22:1d:e3:96:4c:85:72:a9:b0:31:94:
cd:9f:42:57:1d:63:67:03:5a:02:dd:35:82:3c:c8:
27:a9:13:6c:0e:95:99:e9:5e:bb:c2:88:ff:5f:0a:
6b:26:8c:7f:67:08:f0:e9:d4:46:e9:1a:64:4d:57:
c6:dc:a8:ac:af:31:06:50:f2:ba:e3:00:11:6a:2b:
d8:90:72:f0:71:66:fc:48:ad:9f:91:50:18:cd:82:
ee:be:82:f2:3f:d5:b3:dd:5b:1f:c9:ec:44:aa:91:
48:c1:b8:1b:99:77:92:fa:a4:e9:f0:67:00:18:2c:
21:1b:fd:2d:a2:c3:22:d4:63:69:63:8b:5d:9b:83:
22:1c:66:0a:8c:5a:80:3a:20:7c:f2:b7:a4:a4:c5:
4f:a1:d5:6f:0e:e3:8d:b8:97:b3:1f:48:0f:e8:4c:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:1C:E2:CF:D1:63:59:14:A5:04:27:D9:CB:7F:98:61:06:D4:98
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RVAc4s_RY1kUpQQn2ct_mGEG1Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.148.0/24
84.32.210.0/24
88.216.108.0/24
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1f:03:ed:7f:ea:e7:fc:53:eb:a0:21:8e:b8:00:35:87:42:
de:7f:3a:04:a7:47:8b:f8:04:6a:71:ca:9d:5e:9d:06:36:fb:
14:b5:93:e5:3a:00:20:31:91:eb:55:ab:52:88:ad:3a:9b:99:
22:eb:40:0b:7e:3d:de:20:f5:74:7e:31:23:0a:80:d6:02:e0:
e6:35:0c:6f:b2:e1:91:47:20:74:07:eb:bb:e7:59:62:78:09:
26:d3:df:27:ce:89:3e:bc:22:58:6b:36:91:32:77:02:f5:59:
f3:3e:53:44:a7:3d:99:d2:8a:22:3f:21:d5:65:2f:dc:18:24:
41:86:5a:34:d4:b3:d3:e7:96:7b:6f:55:fb:22:b7:9a:84:2e:
bb:42:1a:f6:14:79:30:23:81:e3:08:b5:e4:38:55:28:95:d9:
66:3f:47:c7:6d:89:25:e9:be:53:18:7c:fa:5b:d2:3b:4c:8a:
90:a6:2a:16:71:55:1b:0f:51:38:d2:63:db:25:9c:d5:0c:cf:
e9:11:e2:36:df:48:af:14:8b:27:99:ea:68:d8:85:80:cc:b1:
6e:04:73:28:5c:6b:52:51:de:76:81:de:cd:73:66:0d:5d:c1:
dd:23:fa:a8:58:ba:88:56:75:11:f1:fc:4d:f0:6e:fc:d8:1e:
b2:d6:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:04 2026 by rpki-client