Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bymynR6Q51TiWGZ3LqEbBrrvFzM.roa
File: bymynR6Q51TiWGZ3LqEbBrrvFzM.roa (raw, json)
Hash identifier: 1Lf90OQIbvdO9tvh1IXrBHfITPANBjbky8xz7I+vs7s=
Subject key identifier: 6F:29:B2:9D:1E:90:E7:54:E2:58:66:77:2E:A1:1B:06:BA:EF:17:33
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019FF52ACFCBB4833B63F56D5914D2CBC374
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bymynR6Q51TiWGZ3LqEbBrrvFzM.roa
Signing time: Wed 12 Aug 2026 08:50:51 +0000
ROA not before: Wed 12 Aug 2026 08:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33922
IP address blocks: 84.32.0.0/22 maxlen: 22
84.32.2.0/23 maxlen: 23
84.32.3.0/24 maxlen: 24
84.32.36.0/24 maxlen: 24
84.32.37.0/24 maxlen: 24
84.32.38.0/24 maxlen: 24
84.32.80.0/23 maxlen: 23
84.32.114.0/23 maxlen: 24
84.32.116.0/23 maxlen: 24
84.32.120.0/22 maxlen: 22
84.32.124.0/24 maxlen: 24
84.32.125.0/24 maxlen: 24
84.32.132.0/24 maxlen: 24
84.32.134.0/24 maxlen: 24
84.32.140.0/22 maxlen: 22
84.32.140.0/24 maxlen: 24
84.32.142.0/24 maxlen: 24
84.32.165.0/24 maxlen: 24
84.32.166.0/24 maxlen: 24
84.32.167.0/24 maxlen: 24
84.32.171.0/24 maxlen: 24
84.32.180.0/24 maxlen: 24
84.32.181.0/24 maxlen: 24
84.32.182.0/24 maxlen: 24
84.32.183.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
88.216.8.0/24 maxlen: 24
88.216.24.0/23 maxlen: 24
88.216.26.0/23 maxlen: 24
88.216.28.0/22 maxlen: 24
88.216.71.0/24 maxlen: 24
88.216.76.0/22 maxlen: 24
88.216.82.0/23 maxlen: 23
88.216.84.0/24 maxlen: 24
88.216.85.0/24 maxlen: 24
88.216.86.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.112.0/21 maxlen: 21
88.216.112.0/24 maxlen: 24
88.216.113.0/24 maxlen: 24
88.216.114.0/24 maxlen: 24
88.216.115.0/24 maxlen: 24
88.216.116.0/24 maxlen: 24
88.216.117.0/24 maxlen: 24
88.216.118.0/24 maxlen: 24
88.216.119.0/24 maxlen: 24
88.216.120.0/22 maxlen: 22
88.216.120.0/24 maxlen: 24
88.216.121.0/24 maxlen: 24
88.216.122.0/24 maxlen: 24
88.216.123.0/24 maxlen: 24
88.216.124.0/24 maxlen: 24
88.216.125.0/24 maxlen: 24
88.216.126.0/24 maxlen: 24
88.216.136.0/21 maxlen: 24
88.216.136.0/24 maxlen: 24
88.216.137.0/24 maxlen: 24
88.216.147.0/24 maxlen: 24
88.216.148.0/24 maxlen: 24
88.216.149.0/24 maxlen: 24
88.216.150.0/24 maxlen: 24
88.216.151.0/24 maxlen: 24
88.216.153.0/24 maxlen: 24
88.216.154.0/24 maxlen: 24
88.216.155.0/24 maxlen: 24
88.216.156.0/24 maxlen: 24
88.216.157.0/24 maxlen: 24
88.216.158.0/24 maxlen: 28
88.216.159.0/24 maxlen: 24
88.216.160.0/23 maxlen: 23
88.216.162.0/24 maxlen: 24
88.216.164.0/22 maxlen: 22
88.216.164.0/24 maxlen: 24
88.216.165.0/24 maxlen: 24
88.216.166.0/24 maxlen: 24
88.216.167.0/24 maxlen: 24
88.216.168.0/23 maxlen: 23
88.216.170.0/23 maxlen: 23
88.216.170.0/24 maxlen: 24
88.216.171.0/24 maxlen: 24
88.216.173.0/24 maxlen: 24
88.216.174.0/24 maxlen: 24
88.216.175.0/24 maxlen: 24
88.216.176.0/24 maxlen: 24
88.216.177.0/24 maxlen: 24
88.216.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:2a:cf:cb:b4:83:3b:63:f5:6d:59:14:d2:cb:c3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 12 08:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f29b29d1e90e754e25866772ea11b06baef1733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:c6:0c:f0:af:3e:86:15:b9:b7:e3:d8:04:
5f:5d:70:a7:df:a6:3b:61:54:b8:4f:6d:42:e4:45:
d0:4c:08:48:d0:89:f5:5e:79:d1:a7:7d:f2:58:13:
c6:16:18:12:8c:80:5c:26:f7:b2:75:46:06:6e:e1:
bd:96:27:42:55:85:4a:8d:de:dd:6f:60:14:57:57:
15:56:d5:9a:98:6f:d3:11:a5:44:c0:06:71:67:29:
51:21:03:0d:07:ff:c1:22:70:5c:b4:08:48:ca:77:
27:9f:ca:ee:38:b6:f9:d9:af:f6:6b:e3:97:21:cb:
c0:33:a8:c6:32:d7:17:fc:5f:99:5b:ce:33:0c:8c:
7f:38:9a:ca:7f:13:04:8a:2d:a6:0b:25:4c:50:b8:
79:fc:71:45:02:30:66:4d:6b:c2:70:96:47:98:0a:
73:17:f3:94:e1:4c:3b:df:9c:42:12:56:ec:c1:89:
c4:ff:3f:70:d7:77:d2:73:e2:5f:4a:fc:81:3c:c9:
b1:3a:a5:73:28:58:33:18:22:57:c4:43:13:79:d7:
ac:0a:1d:d5:30:be:35:36:7c:b5:5d:17:3a:cd:89:
04:16:ae:ac:56:a0:58:24:79:3d:a4:8b:f2:35:9a:
01:b0:e0:f5:b0:b7:3a:a2:76:38:4b:7b:ee:0a:4d:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:B2:9D:1E:90:E7:54:E2:58:66:77:2E:A1:1B:06:BA:EF:17:33
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/bymynR6Q51TiWGZ3LqEbBrrvFzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.0.0/22
84.32.36.0-84.32.38.255
84.32.80.0/23
84.32.114.0-84.32.117.255
84.32.120.0-84.32.125.255
84.32.132.0/24
84.32.134.0/24
84.32.140.0/22
84.32.165.0-84.32.167.255
84.32.171.0/24
84.32.180.0/22
84.32.250.0/23
88.216.8.0/24
88.216.24.0/21
88.216.71.0/24
88.216.76.0/22
88.216.82.0-88.216.86.255
88.216.104.0/22
88.216.112.0-88.216.126.255
88.216.136.0/21
88.216.147.0-88.216.151.255
88.216.153.0-88.216.162.255
88.216.164.0-88.216.171.255
88.216.173.0-88.216.179.255
Signature Algorithm: sha256WithRSAEncryption
15:c9:40:f4:ee:eb:85:66:cf:01:7d:d5:a3:db:96:e9:fa:c2:
cd:f2:b5:89:b7:65:5e:02:0d:47:7d:92:aa:d7:8d:d2:e9:13:
75:22:22:73:cd:df:0c:81:7b:e1:86:03:5a:99:b4:a8:ca:a8:
8c:77:c8:75:55:e4:bc:23:88:b0:79:23:80:5a:97:56:1c:90:
b3:5f:98:fe:37:d8:65:42:cd:29:a2:96:56:69:ad:9a:5e:49:
63:f8:5f:14:48:c0:e3:1b:02:07:c2:09:86:60:d5:fb:85:9f:
7a:c4:3a:98:5f:ca:15:45:0a:81:e0:51:13:fc:15:c2:8d:32:
0e:fe:6a:d9:70:3e:2f:9a:f7:e0:1c:75:b4:7c:9f:84:97:7c:
69:ef:88:6b:b0:3f:24:ba:cc:9a:80:8e:57:59:8b:21:43:b0:
ec:76:b4:b3:f5:e1:bb:1c:21:c9:1f:d1:bf:ed:5c:79:de:fd:
8c:7b:32:f5:3c:d8:56:9f:6c:27:e8:19:1d:6c:57:bd:a8:d1:
d7:1c:df:78:66:ad:8f:06:5b:62:08:f9:c6:5c:9f:7b:c6:58:
8a:77:bd:9c:67:83:96:6f:86:dc:14:15:b4:6d:92:09:0b:fb:
96:d6:56:e8:37:69:9f:12:d6:d6:79:dc:5b:2c:8f:20:f5:93:
19:01:34:d0
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAZ/1Ks/LtIM7Y/VtWRTSy8N0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwODEyMDg1MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjI5YjI5ZDFlOTBlNzU0ZTI1ODY2NzcyZWExMWIwNmJhZWYxNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUbGDPCvPoYVubfj2ARfXXCn36Y7
YVS4T21C5EXQTAhI0In1XnnRp33yWBPGFhgSjIBcJveydUYGbuG9lidCVYVKjd7d
b2AUV1cVVtWamG/TEaVEwAZxZylRIQMNB//BInBctAhIyncnn8ruOLb52a/2a+OX
IcvAM6jGMtcX/F+ZW84zDIx/OJrKfxMEii2mCyVMULh5/HFFAjBmTWvCcJZHmApz
F/OU4Uw735xCElbswYnE/z9w13fSc+JfSvyBPMmxOqVzKFgzGCJXxEMTedesCh3V
ML41Nny1XRc6zYkEFq6sVqBYJHk9pIvyNZoBsOD1sLc6onY4S3vuCk1ArwIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFG8psp0ekOdU4lhmdy6hGwa67xczMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvYnlteW5SNlE1MVRpV0daM0xxRWJCcnJ2RnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAJU
IAAwDAMEAlQgJAMEAFQgJgMEAVQgUDAMAwQBVCByAwQBVCB0MAwDBANUIHgDBAFU
IHwDBABUIIQDBABUIIYDBAJUIIwwDAMEAFQgpQMEA1QgoAMEAFQgqwMEAlQgtAME
AVQg+gMEAFjYCAMEA1jYGAMEAFjYRwMEAljYTDAMAwQBWNhSAwQAWNhWAwQCWNho
MAwDBARY2HADBABY2H4DBANY2IgwDAMEAFjYkwMEA1jYkDAMAwQAWNiZAwQAWNii
MAwDBAJY2KQDBAJY2KgwDAMEAFjYrQMEAljYsDANBgkqhkiG9w0BAQsFAAOCAQEA
FclA9O7rhWbPAX3Vo9uW6frCzfK1ibdlXgINR32SqteN0ukTdSIic83fDIF74YYD
Wpm0qMqojHfIdVXkvCOIsHkjgFqXVhyQs1+Y/jfYZULNKaKWVmmtml5JY/hfFEjA
4xsCB8IJhmDV+4WfesQ6mF/KFUUKgeBRE/wVwo0yDv5q2XA+L5r34Bx1tHyfhJd8
ae+Ia7A/JLrMmoCOV1mLIUOw7Ha0s/XhuxwhyR/Rv+1ced79jHsy9TzYVp9sJ+gZ
HWxXvajR1xzfeGatjwZbYgj5xlyfe8ZYine9nGeDlm+G3BQVtG2SCQv7ltZW6Ddp
nxLW1nncWyyPIPWTGQE00A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:37 2026 by rpki-client