Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_GXoNYRYCatfeKTvWC70W9vtShQ.roa
File: _GXoNYRYCatfeKTvWC70W9vtShQ.roa (raw, json)
Hash identifier: Wib1TBxF6HSC9rz4VP+umPsgHTq4SNgMlJW+lbD+L7E=
Subject key identifier: FC:65:E8:35:84:58:09:AB:5F:78:A4:EF:58:2E:F4:5B:DB:ED:4A:14
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019F7AA273DA3A00D11227F00F96421D0A0E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_GXoNYRYCatfeKTvWC70W9vtShQ.roa
Signing time: Sun 19 Jul 2026 13:48:14 +0000
ROA not before: Sun 19 Jul 2026 13:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216444
IP address blocks: 84.32.22.0/23 maxlen: 24
84.32.111.0/24 maxlen: 24
84.32.249.0/24 maxlen: 24
88.216.191.0/24 maxlen: 24
88.216.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:a2:73:da:3a:00:d1:12:27:f0:0f:96:42:1d:0a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 19 13:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc65e835845809ab5f78a4ef582ef45bdbed4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:06:76:4c:40:c3:b8:59:b6:02:c8:fb:09:
33:15:1c:16:54:3c:d2:7d:81:01:bc:e3:dd:af:7a:
f9:97:47:05:69:5a:e3:78:43:83:d7:e3:46:50:9b:
69:2e:d9:33:05:48:2b:be:14:56:b0:c7:6d:d7:a3:
04:e8:0c:94:11:b9:81:b3:eb:6e:8b:97:8b:57:86:
bc:cf:3e:9a:7e:94:c0:f1:c1:94:29:11:79:eb:b5:
0c:f6:8d:38:3c:4a:ff:0b:bd:ee:cb:aa:9f:d2:cb:
01:1b:6a:f9:59:05:34:91:3b:13:eb:0a:4a:bd:bc:
e1:7a:34:bf:32:00:d9:ef:bc:df:cb:48:6d:05:1d:
db:73:5a:83:2d:bb:70:25:3f:bc:bc:25:36:82:a5:
bf:44:ac:2e:5a:7d:d6:fc:f7:28:85:a2:ac:aa:62:
a3:21:6c:b4:81:49:ff:5c:10:2c:0a:31:c6:c0:8c:
4a:56:04:27:26:0e:8a:0c:53:6b:09:9e:2f:ec:ff:
c7:7d:08:70:ce:fc:89:e4:d3:5d:4a:a1:3a:8e:bf:
d5:df:75:ae:de:84:bd:7e:c4:8a:a8:79:fa:da:16:
ca:02:4e:a8:75:1e:87:0a:4d:45:5a:31:39:01:5a:
57:9f:4a:76:59:4e:25:72:48:e2:68:89:86:e8:91:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:65:E8:35:84:58:09:AB:5F:78:A4:EF:58:2E:F4:5B:DB:ED:4A:14
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_GXoNYRYCatfeKTvWC70W9vtShQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.22.0/23
84.32.111.0/24
84.32.249.0/24
88.216.191.0/24
88.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
83:96:96:e2:38:9c:44:a4:06:75:9c:20:8f:73:1b:28:7d:10:
7d:43:0b:d3:c0:8a:0c:d4:8b:37:58:94:3a:52:42:f9:99:36:
3c:fa:dd:69:c6:dc:65:ba:8a:07:d5:fe:3f:9b:8c:3f:c2:df:
86:40:ab:fe:e5:73:54:a6:37:09:f4:6a:11:26:12:65:f0:ad:
be:57:55:df:80:6e:e1:d5:34:8d:5c:0e:4e:e8:9b:e3:d8:a7:
08:7a:9d:94:c5:65:a0:8a:5b:1c:b4:79:ae:bb:5f:a2:9c:ba:
b6:76:36:20:45:b2:bf:9f:0f:81:4e:0f:07:ba:48:e9:5e:f2:
6a:82:d5:21:2e:df:63:b3:4e:fe:b2:b6:c5:8b:ad:0c:21:78:
85:60:ee:da:46:9a:ef:92:ff:d1:54:83:62:a2:c0:fc:40:70:
dc:13:11:70:33:58:d3:fa:26:a7:e5:2e:0b:06:ef:2a:f0:59:
d9:16:21:b8:11:2f:40:85:28:31:7f:65:59:13:21:79:d6:e4:
1d:ac:48:af:b2:29:43:35:3d:be:80:f8:d6:eb:8d:06:42:02:
4e:01:fc:9f:b1:6e:fc:1e:ce:5f:bb:0e:b1:e1:9f:d1:bf:e6:
e0:59:94:ba:ac:19:6f:00:99:f1:f5:08:2e:8a:5f:1d:5b:98:
a2:e1:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:17:19 2026 by rpki-client