Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ofg0mk15JYj1R6-ORZQRKiGr9Ak.roa
File: ofg0mk15JYj1R6-ORZQRKiGr9Ak.roa (raw, json)
Hash identifier: 8rSVSQ5heo6ZOwOepEC0ktIjOkJ6U2uS8kx+s2tO0Ao=
Subject key identifier: A1:F8:34:9A:4D:79:25:88:F5:47:AF:8E:45:94:11:2A:21:AB:F4:09
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CF851657F25C9A0E3816E84D98B3D579C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ofg0mk15JYj1R6-ORZQRKiGr9Ak.roa
Signing time: Mon 16 Mar 2026 20:23:29 +0000
ROA not before: Mon 16 Mar 2026 20:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:51:65:7f:25:c9:a0:e3:81:6e:84:d9:8b:3d:57:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 16 20:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1f8349a4d792588f547af8e4594112a21abf409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:e5:ea:06:46:32:29:56:51:8d:2b:48:73:
0d:9f:d3:c6:9c:54:26:fd:bb:ab:28:03:22:1a:da:
87:5f:38:0c:51:fa:80:51:59:49:a7:20:13:4c:48:
d8:9e:05:ff:6e:53:24:6f:78:b7:36:67:f8:8e:77:
9a:26:60:f7:ad:55:4e:d7:a7:e9:6d:70:e0:21:a0:
09:35:ae:54:4f:4e:5c:3d:1d:3f:e4:03:75:2b:72:
21:26:3c:69:58:e2:99:3e:26:87:17:5d:c4:2b:2a:
d0:39:1e:85:44:8d:99:b7:fd:5e:2d:1e:e8:ac:06:
99:de:1c:9d:3b:af:83:43:52:b7:3a:26:c7:92:7b:
1f:b0:44:3d:03:f8:8c:4d:24:80:ac:26:30:43:90:
e5:82:e4:7f:0d:24:74:1d:14:0c:20:48:ff:31:c5:
c4:85:47:a6:be:4e:6a:56:f1:6e:c0:5c:12:80:d5:
2f:79:d6:31:4a:f7:97:42:b7:35:b7:72:c6:56:af:
95:a9:ec:66:7c:b1:0e:c6:a2:c1:89:d7:07:77:4b:
54:e5:81:4c:cf:60:12:94:5a:e3:69:41:a7:ea:2c:
96:2a:31:1d:04:51:e8:33:1b:6f:df:56:b2:e3:39:
24:79:85:dd:8f:a5:db:7d:04:3e:54:40:3d:e0:5c:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F8:34:9A:4D:79:25:88:F5:47:AF:8E:45:94:11:2A:21:AB:F4:09
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ofg0mk15JYj1R6-ORZQRKiGr9Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.107.0/24
84.32.152.0/24
84.32.154.0/24
84.32.156.0/24
84.32.218.0/24
88.216.41.0/24
88.216.100.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ea:c5:8b:d4:d2:80:bc:52:2a:fd:33:0d:9d:d0:7d:51:13:
7e:8a:c7:b3:af:76:c2:30:f3:25:a2:63:2b:4c:14:fe:a6:a7:
8a:e3:75:a9:e6:9d:ad:51:fc:4f:72:2c:d7:5c:75:d3:d0:ac:
48:ff:ae:02:a5:cb:d5:09:f7:5d:dc:b9:9c:9b:34:52:0b:b7:
da:77:be:30:1f:e5:3e:3b:0b:d8:4d:08:bc:66:fb:46:74:74:
80:44:95:68:04:69:7d:c4:91:c2:95:08:3d:94:ed:c6:f2:e2:
0d:07:70:0d:77:32:65:e9:b8:14:ec:e0:f9:43:b2:e6:1e:4f:
4e:b2:b6:3a:37:5f:55:0c:4a:20:1a:f9:93:9b:27:b3:21:fb:
26:50:10:1b:7c:79:d5:ee:24:34:65:31:02:c2:a5:77:c7:c6:
ec:f2:97:93:e2:4c:49:96:1f:03:71:8f:60:40:e9:94:44:03:
66:b7:1d:e2:a4:b7:9f:2d:56:9f:fd:7c:be:69:49:26:60:19:
54:0e:3a:aa:9e:ed:37:c5:44:bd:49:95:e5:2f:16:78:6c:40:
8b:53:67:b8:1d:88:bd:b0:42:5b:18:f0:1f:94:f7:20:93:c1:
87:d4:48:50:d5:0b:33:8b:d7:81:60:ca:65:eb:c3:df:16:96:
f5:6e:20:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:16:56 2026 by rpki-client