Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dfm-Ve4a117CS4gbHn_2KowXgaM.roa
File: dfm-Ve4a117CS4gbHn_2KowXgaM.roa (raw, json)
Hash identifier: zPfYyMCkr73GPm79KACY1SGY718bOQ4Q7NOUVQObcyA=
Subject key identifier: 75:F9:BE:55:EE:1A:D7:5E:C2:4B:88:1B:1E:7F:F6:2A:8C:17:81:A3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019FF78BA33213B7D58AC5633C761849AEE1
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dfm-Ve4a117CS4gbHn_2KowXgaM.roa
Signing time: Wed 12 Aug 2026 19:55:51 +0000
ROA not before: Wed 12 Aug 2026 19:55:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.64.0/24 maxlen: 24
84.32.96.0/24 maxlen: 24
84.32.101.0/24 maxlen: 24
84.32.102.0/24 maxlen: 24
84.32.103.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
84.32.231.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.75.0/24 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:8b:a3:32:13:b7:d5:8a:c5:63:3c:76:18:49:ae:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 12 19:55:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75f9be55ee1ad75ec24b881b1e7ff62a8c1781a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:6b:6a:83:32:ce:dc:1d:ea:91:dc:a0:50:
27:21:da:cd:47:75:68:35:76:88:9d:eb:74:e5:81:
04:92:3c:ff:99:73:e2:7a:fc:83:75:fa:64:0a:06:
a0:67:54:c4:47:05:09:1e:37:41:37:67:3c:fe:9c:
57:7d:ce:f2:33:ea:4d:b1:14:29:7f:d5:f7:80:20:
b9:4b:df:25:7c:8f:b2:e4:d3:51:b0:fd:00:69:85:
03:d2:3a:46:8f:84:cd:62:c3:0d:0b:98:b5:41:64:
1e:34:c6:2d:3a:c2:e1:dc:20:6d:a9:c2:9c:2a:00:
7e:fa:e7:80:c0:2e:b8:5f:a2:97:52:c2:d9:57:fe:
2d:b2:85:53:bf:35:6c:c6:e5:a7:28:96:4d:14:f3:
74:cf:9e:9d:5d:11:de:74:80:38:2f:d2:db:d0:d3:
a9:95:ac:b9:2f:66:2c:73:73:e5:96:08:86:79:d5:
8b:70:e6:dc:0a:ff:fb:20:c5:a2:31:fb:05:c9:e3:
fd:84:73:5b:65:94:06:10:b7:d7:53:d1:ed:a8:5a:
57:94:03:92:08:55:27:66:f4:86:30:a4:24:03:77:
2f:93:51:f7:da:c5:2d:7f:9a:53:09:0d:33:4a:97:
f8:53:57:1e:59:1a:db:97:29:7f:4b:85:f4:7a:b3:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:BE:55:EE:1A:D7:5E:C2:4B:88:1B:1E:7F:F6:2A:8C:17:81:A3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dfm-Ve4a117CS4gbHn_2KowXgaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
84.32.96.0/24
84.32.101.0-84.32.104.255
84.32.108.0/24
84.32.176.0/23
84.32.184.0/21
84.32.231.0/24
88.216.61.0/24
88.216.63.0/24
88.216.75.0/24
88.216.92.0/23
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c0:7e:55:d3:da:2c:31:42:82:77:37:e9:61:96:dd:66:d3:
9f:fe:70:d5:1a:8a:7c:4c:3d:73:8b:d6:86:4c:52:a8:32:ef:
99:fc:b0:7c:c2:19:f2:ac:a0:ee:3d:bd:8a:6b:d8:f2:6f:7c:
12:93:d4:af:1e:6d:06:ad:a2:68:08:cb:c7:18:51:80:f4:1c:
21:69:93:c6:2b:82:bd:8e:ea:40:35:f8:e0:95:bf:3d:c5:61:
b9:58:99:aa:de:39:42:92:cd:d0:d7:cc:19:8a:ce:b3:bb:3c:
34:f1:8f:f3:2c:b5:b7:4c:b4:1b:a2:0b:c0:be:17:b9:97:7f:
61:c3:48:f5:d2:03:72:9d:a9:42:83:bc:cf:62:32:21:fe:a6:
fe:08:9f:6b:c2:73:2f:dd:4b:0e:eb:5d:7f:c4:95:aa:35:7f:
18:c2:de:96:43:15:2e:a7:20:41:b9:d1:6c:27:87:87:bc:f1:
52:f3:bf:17:9c:ec:e3:26:31:dc:9d:07:b9:65:a9:fc:fd:5c:
b7:34:89:4d:e3:e0:57:8a:13:d7:cb:1b:23:61:4e:0d:2b:e5:
b4:37:9f:2c:75:f9:54:15:c8:98:88:5f:2c:e4:ee:7c:12:d3:
70:c4:71:52:c5:7b:e1:b4:a3:fa:d3:8b:a6:ba:b9:a8:80:ce:
cc:34:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:19:36 2026 by rpki-client