Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hR3v5ghxs3YRCTv9VgsHueuNWtU.roa
File: hR3v5ghxs3YRCTv9VgsHueuNWtU.roa (raw, json)
Hash identifier: mZxlGHjx4CvC4FXYAOW6/Mo1E2w8K6SrYjkVxm53p0o=
Subject key identifier: 85:1D:EF:E6:08:71:B3:76:11:09:3B:FD:56:0B:07:B9:EB:8D:5A:D5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CD8AB9D03FFC35F4CB58EAE1DBD2ED69A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hR3v5ghxs3YRCTv9VgsHueuNWtU.roa
Signing time: Tue 10 Mar 2026 16:54:11 +0000
ROA not before: Tue 10 Mar 2026 16:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.99.0/24 maxlen: 24
84.32.208.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.72.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:ab:9d:03:ff:c3:5f:4c:b5:8e:ae:1d:bd:2e:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 10 16:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=851defe60871b37611093bfd560b07b9eb8d5ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:af:3c:33:ed:01:18:b1:39:33:64:e3:ad:
17:09:58:1a:25:3e:26:9b:7a:30:5f:bc:b7:e7:4b:
76:71:d5:8e:e3:98:5c:9d:1b:95:8e:23:94:2d:ff:
55:69:d2:96:36:42:56:13:60:32:72:48:71:75:b9:
f7:6c:3b:8e:c2:df:df:e6:36:34:76:b1:8d:88:a3:
68:30:4e:89:14:0f:68:f8:98:bf:68:52:9e:a0:1e:
89:88:5e:54:04:49:f5:a1:c7:eb:91:44:07:e3:32:
7b:ec:8a:d5:34:51:dc:85:43:64:d4:b3:4e:e2:67:
83:b0:3d:b0:9a:34:92:b2:a1:b4:77:e0:f9:dc:48:
91:29:06:a4:0b:f0:da:55:73:4d:f0:1e:ac:82:fb:
b1:4b:2d:ca:8e:c0:8f:e3:9c:d9:96:e5:9a:ae:7d:
a7:0c:1a:9a:e8:6f:68:bc:6c:07:b1:1b:3e:dc:47:
80:98:23:96:9d:ed:5c:7e:ff:23:06:d1:5c:05:f2:
05:65:d9:f2:a1:b1:b9:f1:8b:1f:da:d1:72:6a:4b:
bc:26:27:60:ad:a9:b0:28:3b:e6:45:fb:65:8f:f1:
4b:62:5d:85:5c:ac:76:6c:03:f6:f0:d4:b9:8b:21:
e2:27:a6:a1:00:07:4a:c2:31:a9:21:8e:0a:d3:20:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:EF:E6:08:71:B3:76:11:09:3B:FD:56:0B:07:B9:EB:8D:5A:D5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hR3v5ghxs3YRCTv9VgsHueuNWtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.99.0/24
84.32.208.0/24
84.32.217.0/24
88.216.60.0/24
88.216.72.0/24
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2c:9b:30:cb:f3:b6:28:82:c1:b9:3a:73:36:ed:87:dc:f4:
45:12:57:3d:12:81:93:ad:3b:cc:72:f8:d5:7d:d4:74:54:4d:
49:2c:96:61:fa:97:18:01:0d:a1:f3:8b:b1:79:45:81:a6:fc:
27:1e:c0:03:87:ca:97:b0:1b:07:32:3f:11:2d:8a:ad:07:98:
68:3a:17:50:4a:af:88:bb:07:6d:27:4f:15:40:08:8d:69:78:
2e:89:3c:fd:fd:25:aa:ea:14:23:a0:90:d4:a9:7a:cc:4c:45:
98:55:df:c3:40:29:1b:75:ba:f5:b5:47:17:5e:8b:e2:5f:7d:
f0:4b:3e:73:c8:d2:d0:c5:18:7a:9f:9a:49:39:52:f1:4a:83:
5e:92:47:f1:b8:0b:19:a2:02:70:95:44:b2:90:3d:34:5d:7d:
41:76:d8:0a:56:81:ce:d5:9d:23:9d:8e:cc:0a:ad:13:49:54:
86:05:68:78:1c:df:5c:a6:04:26:8e:9a:a1:c1:3d:b4:f2:5b:
a3:bc:fc:d7:16:59:43:16:10:b7:66:d7:e6:cc:54:48:c1:b9:
fe:43:95:b5:d4:0e:97:92:b0:99:38:4b:f5:df:23:65:5d:ad:
f8:77:d7:38:39:4e:0f:6b:79:72:b2:24:e0:09:51:e2:78:c2:
1f:d5:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 09:32:55 2026 by rpki-client