Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pQEtUYowQS5_a7aXQkkiwYOBVPU.roa
File: pQEtUYowQS5_a7aXQkkiwYOBVPU.roa (raw, json)
Hash identifier: 9Sb0DLFr7Hij/yuceT9anOWuDEHsWwHvWB5ahH7U1sk=
Subject key identifier: A5:01:2D:51:8A:30:41:2E:7F:6B:B6:97:42:49:22:C1:83:81:54:F5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CD8AC861E730C86B62EC3935D13EED1E4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pQEtUYowQS5_a7aXQkkiwYOBVPU.roa
Signing time: Tue 10 Mar 2026 16:55:11 +0000
ROA not before: Tue 10 Mar 2026 16:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.220.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.68.0/24 maxlen: 24
88.216.73.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:ac:86:1e:73:0c:86:b6:2e:c3:93:5d:13:ee:d1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 10 16:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5012d518a30412e7f6bb697424922c1838154f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:d5:90:2e:03:c0:6a:ec:d8:1b:eb:e7:09:
5e:64:91:b1:ff:98:f6:99:5b:8b:fd:15:03:a5:3a:
85:5e:ec:4b:e4:f9:e7:06:0b:0d:b2:9f:1c:ce:af:
31:45:f9:09:63:fa:5f:60:ac:12:06:62:5a:d3:6a:
89:d7:7e:bf:8b:25:41:15:3a:c0:9e:b3:ba:d0:08:
db:23:4a:40:d4:76:b8:be:82:88:9f:6e:78:d0:28:
c2:0e:44:26:97:0e:09:f3:6d:06:a5:d4:74:c7:d7:
91:db:cf:d5:3c:d8:72:5d:45:c7:4f:2b:0c:65:18:
08:74:08:30:e1:25:fc:af:1e:3d:08:3d:ab:f5:7f:
b8:35:d9:48:a8:ca:7a:42:55:00:25:a4:bf:30:41:
6f:ff:51:63:d9:ff:80:95:b2:41:03:44:30:d0:db:
15:5c:38:c2:b8:5a:55:86:65:a8:2a:fc:11:ca:46:
7f:7e:77:77:31:17:ea:8f:f9:93:96:db:66:ee:3e:
33:cf:70:1e:08:11:9a:8d:83:1f:e2:c2:38:8b:6f:
8b:7e:96:8f:15:80:41:bc:16:67:b0:60:18:5e:b1:
df:91:16:fa:49:56:1b:ca:3c:91:39:ed:2c:84:09:
32:b2:8f:8a:ab:2a:d5:37:3d:9b:96:79:d4:b9:60:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:01:2D:51:8A:30:41:2E:7F:6B:B6:97:42:49:22:C1:83:81:54:F5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pQEtUYowQS5_a7aXQkkiwYOBVPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.48.0/24
84.32.61.0/24
84.32.63.0/24
84.32.70.0/23
84.32.128.0/22
84.32.220.0/24
88.216.39.0/24
88.216.68.0/24
88.216.73.0/24
88.216.184.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
88:87:f1:62:0e:49:37:e4:d4:e9:33:31:5e:ff:9c:f0:c6:47:
53:e1:38:f8:a0:f1:81:7f:ef:5e:20:0f:20:6c:29:79:c9:fa:
fe:bd:bd:fa:f2:70:4a:33:f0:bc:a5:49:fd:55:6d:c9:53:8a:
b6:88:06:37:9e:85:29:1b:6d:26:61:ff:f0:67:d1:c2:fa:40:
81:e6:3a:30:26:c2:6c:12:01:b8:2b:54:62:a6:c1:33:f4:b4:
8a:20:b9:ff:8a:41:85:79:ee:00:c7:81:12:2b:7d:cc:92:74:
e8:e7:d2:74:63:9e:e9:b7:ad:cf:d1:00:f3:86:7a:ad:a2:f1:
f7:23:d0:52:b3:a6:93:0e:e6:82:8c:3d:b2:7c:25:d6:1d:66:
f4:56:87:9f:38:8e:21:f7:18:92:95:7c:6f:2c:ce:bf:1e:04:
d5:7d:9d:a4:a0:ad:a7:b3:ad:2e:b6:0b:a8:ae:5b:62:d0:f6:
70:df:89:dd:8c:5b:79:20:0e:5c:07:b7:52:c1:73:ac:ca:63:
36:10:91:9f:a9:7b:f2:09:23:e7:56:4d:ba:fb:ac:4d:37:49:
72:fd:f1:d8:7f:9a:4b:13:6f:e3:aa:5f:8b:a2:2c:a1:2b:2f:
86:24:ef:03:bb:d9:5a:a7:d5:31:bb:3a:07:84:7f:11:bb:d4:
91:a1:89:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 09:32:50 2026 by rpki-client