Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hW8uq5RZBfir5Y82Tk5WT1NQ9Ik.roa
File: hW8uq5RZBfir5Y82Tk5WT1NQ9Ik.roa (raw, json)
Hash identifier: mkCKE5aBY77Al9k9/QrTIMBXSnq2s6lk122uxhnhjX4=
Subject key identifier: 85:6F:2E:AB:94:59:05:F8:AB:E5:8F:36:4E:4E:56:4F:53:50:F4:89
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CF8507B4D29FA5412091FCDA027783472
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hW8uq5RZBfir5Y82Tk5WT1NQ9Ik.roa
Signing time: Mon 16 Mar 2026 20:22:29 +0000
ROA not before: Mon 16 Mar 2026 20:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213896
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.98.0/24 maxlen: 24
84.32.100.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.70.0/24 maxlen: 24
88.216.74.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:50:7b:4d:29:fa:54:12:09:1f:cd:a0:27:78:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 16 20:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=856f2eab945905f8abe58f364e4e564f5350f489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:bb:b7:f6:cf:ba:36:de:b4:44:77:64:fc:
d1:06:2c:22:86:5b:f1:fe:6c:a8:af:cf:40:e9:55:
5b:25:8a:3a:89:fc:86:47:8c:91:ad:db:f9:c5:89:
bd:3c:1d:aa:71:50:ed:03:d6:da:48:38:51:b4:34:
62:1f:4c:ee:ef:16:a6:25:7e:51:71:24:ed:06:66:
0f:a9:b6:33:65:ee:57:3a:c3:a1:ed:95:81:cd:7b:
16:9f:c0:95:cc:97:95:84:0e:11:1f:99:c0:ea:6b:
0a:63:58:44:bb:a8:1f:56:cf:52:3f:f7:93:87:dc:
ca:aa:7a:0e:b9:1f:59:8f:e4:e8:4b:37:16:16:34:
d5:77:94:a9:df:1a:0a:7d:ce:f8:3f:db:f2:65:58:
3a:4e:fc:44:78:e4:6e:c9:b0:9a:db:24:7e:05:dd:
e3:b7:45:e9:b5:36:a8:4a:69:70:9d:be:eb:4b:d9:
40:66:c7:81:2e:8e:56:87:19:72:8f:ce:39:f5:07:
48:94:c2:a5:ce:7f:75:03:95:c4:b9:8a:32:40:8c:
2f:52:55:e2:e1:06:ee:49:8e:79:71:8b:d8:05:fa:
44:23:de:11:35:c0:48:cf:3e:78:0e:5b:cf:b7:0d:
54:2a:21:64:11:22:0b:60:cb:d1:5e:d1:b5:e7:d9:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6F:2E:AB:94:59:05:F8:AB:E5:8F:36:4E:4E:56:4F:53:50:F4:89
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/hW8uq5RZBfir5Y82Tk5WT1NQ9Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
84.32.98.0/24
84.32.100.0/24
84.32.223.0/24
88.216.36.0/24
88.216.70.0/24
88.216.74.0/24
88.216.211.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b8:8e:69:28:fa:4f:a2:af:83:f3:f5:e0:0e:97:fb:81:87:
13:a6:58:66:59:1b:8f:5d:5d:b0:89:63:0e:84:c1:18:af:a4:
bb:65:9f:c7:8c:89:14:48:d1:f2:10:9e:ff:26:d0:57:e5:54:
49:31:ad:db:a7:b9:25:2e:24:bb:1d:cd:dd:71:95:c7:d1:d6:
a0:26:26:8d:be:69:a6:4c:da:c2:4d:16:34:28:c1:38:a8:5e:
00:86:dd:9b:5d:65:f9:e2:44:11:b8:92:a5:ff:78:41:75:47:
43:c1:10:c3:bc:69:2b:97:1e:9c:02:1f:29:29:5f:3c:68:67:
ad:15:51:c5:e2:03:eb:84:5e:ee:1e:d9:b7:89:d9:92:d5:fa:
1b:a1:0a:87:1b:e4:fb:96:ff:f8:93:a5:a3:6d:f7:b5:87:a5:
fc:78:52:1e:e5:5d:29:6e:99:1f:6c:f0:4f:0f:29:94:ac:5a:
14:57:75:4d:e7:bf:f1:2c:e7:39:f2:01:b4:8f:d0:f4:a7:4f:
85:2e:dd:1e:47:e3:30:dc:7e:c2:fb:95:5b:3b:7d:95:8d:5d:
23:f9:f0:9d:97:ad:1e:0e:58:79:60:d2:f5:e1:3d:12:b4:dc:
21:8e:d6:cf:8a:6c:4a:ff:97:20:0f:c1:fe:59:7e:be:c6:da:
9e:42:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 09:21:47 2026 by rpki-client