Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZX5qNsnOCkKg5e3MBB6YTqcc3sI.roa
File: ZX5qNsnOCkKg5e3MBB6YTqcc3sI.roa (raw, json)
Hash identifier: rhEpbTa9Aki8mJTcskkZhXQwQPVBQPj0MzpftbLoDkk=
Subject key identifier: 65:7E:6A:36:C9:CE:0A:42:A0:E5:ED:CC:04:1E:98:4E:A7:1C:DE:C2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019F3B9ABB20FE717C868C99563CAE5F47B5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZX5qNsnOCkKg5e3MBB6YTqcc3sI.roa
Signing time: Tue 07 Jul 2026 08:03:43 +0000
ROA not before: Tue 07 Jul 2026 08:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.99.0/24 maxlen: 24
84.32.208.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.72.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:9a:bb:20:fe:71:7c:86:8c:99:56:3c:ae:5f:47:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 7 08:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=657e6a36c9ce0a42a0e5edcc041e984ea71cdec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:7d:9f:59:c3:d9:fe:c2:69:bc:c9:a2:4c:
cd:f3:f0:1c:e2:97:ed:c6:2d:70:e0:3e:78:5a:72:
c1:30:22:4d:8e:88:2c:69:03:5f:a4:d1:90:70:a5:
4e:f9:ee:4a:d7:0b:79:6b:71:5c:f0:5e:b9:f9:9b:
28:93:ce:c7:ef:f6:9e:a5:8e:77:10:5b:95:fb:24:
de:bf:46:d2:c9:a9:c8:5a:25:c8:13:a2:b0:aa:98:
ad:4d:76:ba:e2:c3:62:ba:27:d1:a6:35:bf:2d:af:
dc:fe:be:1d:59:84:e1:6c:20:ce:90:38:48:60:28:
38:53:1a:ac:2e:6f:92:46:f8:63:7b:53:72:62:10:
ab:d1:74:63:fb:97:ec:a6:b1:2d:2d:53:4d:90:56:
cf:67:ee:71:1b:da:79:48:21:34:60:04:62:c3:66:
0c:09:38:3d:a5:65:94:7c:f5:34:bf:62:be:ae:38:
2b:a4:19:58:f6:ba:de:7c:61:4c:26:bc:96:ea:ad:
2b:0c:ae:f8:2b:eb:aa:05:9c:f0:d4:08:28:a5:66:
c8:e1:e9:04:83:96:c2:2c:ce:a2:b6:17:3b:fb:8d:
da:cd:e3:a0:f5:38:d9:85:c7:4c:02:b7:d6:af:65:
a5:67:32:81:8f:8c:a9:a6:11:bb:bf:e3:5d:71:08:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7E:6A:36:C9:CE:0A:42:A0:E5:ED:CC:04:1E:98:4E:A7:1C:DE:C2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZX5qNsnOCkKg5e3MBB6YTqcc3sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.99.0/24
84.32.208.0/24
84.32.217.0/24
88.216.60.0/24
88.216.72.0/24
88.216.130.0/23
88.216.189.0/24
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:49:00:5c:ec:d5:c2:ab:68:ed:4e:ac:0a:6c:6f:55:ce:94:
19:47:b3:d7:b0:75:02:13:27:a5:c3:35:59:05:eb:e0:22:cf:
98:98:a9:33:2c:95:4a:83:83:4a:00:87:56:f0:c2:fd:a5:1c:
18:72:62:03:ca:12:d3:5c:2b:98:75:a0:be:0f:6f:6b:57:20:
50:31:0c:4f:39:00:70:28:a0:f3:9a:5a:d9:ff:e4:54:8a:0a:
c9:79:d4:ba:33:fe:99:dc:04:79:ca:6d:4f:61:52:20:cb:cf:
3a:06:01:32:ed:89:90:2e:08:8a:33:ab:9b:1b:cf:74:a7:48:
c5:50:33:38:c3:2f:9d:4c:35:8b:c2:09:04:74:2b:ce:da:05:
2b:87:4c:aa:85:1e:1a:2d:04:b4:5b:12:ef:9f:34:25:33:57:
a3:88:ba:b9:53:e4:93:27:55:a0:5b:8e:86:65:43:a8:21:ab:
40:6a:62:59:48:2b:bd:f1:fd:2e:7d:25:f6:eb:50:f2:87:8d:
df:6d:bf:03:00:59:c5:24:69:d8:1c:0b:ca:6c:6f:34:87:49:
09:88:a7:2f:28:9b:6e:eb:96:4e:50:e8:0a:2b:fd:c5:be:ce:
33:48:f6:41:b6:df:30:1a:c7:34:de:bf:f6:e2:32:4f:b9:c3:
9b:b9:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:17:19 2026 by rpki-client