Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lBJombASAhV7u4pwnbwLUk9hBHg.roa
File: lBJombASAhV7u4pwnbwLUk9hBHg.roa (raw, json)
Hash identifier: 71Wrm3eGoQ4IRyQcbiZ1TIBCnyfgAaEB0WtXHpfEJFE=
Subject key identifier: 94:12:68:99:B0:12:02:15:7B:BB:8A:70:9D:BC:0B:52:4F:61:04:78
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019F7AA2737C66ADCFDC0DBDEC8659A82880
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lBJombASAhV7u4pwnbwLUk9hBHg.roa
Signing time: Sun 19 Jul 2026 13:48:14 +0000
ROA not before: Sun 19 Jul 2026 13:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213896
IP address blocks: 84.32.59.0/24 maxlen: 24
84.32.98.0/24 maxlen: 24
84.32.100.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.70.0/24 maxlen: 24
88.216.74.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.190.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7a:a2:73:7c:66:ad:cf:dc:0d:bd:ec:86:59:a8:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 19 13:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94126899b01202157bbb8a709dbc0b524f610478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:f9:d9:54:a9:b7:5f:b1:2e:c2:0f:c3:44:
74:d5:03:4a:21:05:02:8f:80:82:34:dd:4c:90:95:
5b:41:de:aa:81:39:f5:54:44:76:46:fc:12:c6:64:
b1:4a:3c:7c:58:60:3e:ed:51:42:46:70:32:bd:bb:
9b:14:26:5b:fb:23:3c:68:7f:5e:ad:ae:9e:d4:c7:
de:80:72:1f:b8:80:9a:da:1d:41:53:cf:ad:ed:94:
68:e9:60:79:a1:8a:88:6a:3e:28:c3:b3:cb:cb:21:
6c:cd:73:b0:5d:d2:d2:7f:b1:0e:25:14:8b:34:17:
0f:b4:9e:71:f8:f6:b1:ac:35:71:89:0e:f9:e5:b1:
08:84:82:01:8c:18:c2:77:8c:d3:bc:0e:54:43:25:
f8:85:6d:c3:24:d7:fa:fb:73:2f:a6:2e:f7:e8:c2:
60:b3:b3:83:9a:cb:12:05:ae:14:63:12:4f:5a:d4:
70:00:c5:61:6c:a3:24:bd:fd:a7:3e:78:b3:59:bf:
1e:46:bf:9c:aa:66:81:9b:3d:51:3f:4a:93:2d:87:
c4:4a:9f:e9:4e:60:de:aa:90:09:f6:38:05:9c:c2:
7d:60:4f:13:ff:a1:b5:da:c7:f8:fe:a0:24:cb:3e:
d0:0d:63:30:b6:e8:0f:39:95:0f:db:57:b2:22:83:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:68:99:B0:12:02:15:7B:BB:8A:70:9D:BC:0B:52:4F:61:04:78
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lBJombASAhV7u4pwnbwLUk9hBHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.59.0/24
84.32.98.0/24
84.32.100.0/24
84.32.223.0/24
88.216.36.0/24
88.216.70.0/24
88.216.74.0/24
88.216.132.0/24
88.216.190.0/24
88.216.211.0/24
88.216.220.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2a:f1:bc:43:71:44:b3:bd:8b:ac:f4:6f:27:a9:8c:c4:af:
e4:45:fe:b5:bf:18:90:6f:f6:a9:19:dd:06:b3:64:05:85:0a:
40:05:0f:43:61:f9:52:43:df:fc:66:7e:d3:e0:88:d5:5c:1e:
51:2e:36:a6:bb:94:c5:00:54:e6:3c:9e:7f:16:33:87:83:3c:
34:ed:3c:63:22:2d:99:ff:67:6f:84:61:4e:4b:91:4e:81:4e:
34:51:ae:46:32:67:50:fc:ed:28:81:11:4d:1b:65:ae:c7:0e:
d7:55:94:ab:47:fd:5b:a2:4c:0f:29:41:fe:d6:4a:5d:40:0d:
ee:95:79:67:26:21:d6:6c:8e:44:8d:16:86:bb:44:f6:27:ba:
84:96:ff:a4:ef:f6:5b:e6:93:a4:b4:59:f9:51:3f:f5:e8:97:
80:6b:01:65:83:c4:64:f6:a7:63:69:f1:1e:a4:31:8e:6a:d8:
97:56:d7:3e:7c:f3:bf:3e:25:fb:0f:7a:31:3b:89:2a:60:d1:
7a:83:39:d0:05:c4:9b:80:df:75:9a:4a:05:a6:f1:6a:aa:c5:
ef:cd:ca:7e:92:5d:fd:37:76:60:37:13:be:e9:b6:b7:6b:63:
d9:68:fb:50:30:43:62:06:b3:0f:ba:4a:be:7b:fc:c0:33:43:
3e:f2:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:17:19 2026 by rpki-client