Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rRBh6Nfduo4kCSC-zG57OaaqdFw.roa
File: rRBh6Nfduo4kCSC-zG57OaaqdFw.roa (raw, json)
Hash identifier: 4RT4wUq6UYuC5JB9HeirTaOqtj49NEEtVjAmAyfHgoE=
Subject key identifier: AD:10:61:E8:D7:DD:BA:8E:24:09:20:BE:CC:6E:7B:39:A6:AA:74:5C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A143F027CFFD57B1D822935A84E13C4EB8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rRBh6Nfduo4kCSC-zG57OaaqdFw.roa
Signing time: Fri 16 Oct 2026 08:59:34 +0000
ROA not before: Fri 16 Oct 2026 08:59:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f0:27:cf:fd:57:b1:d8:22:93:5a:84:e1:3c:4e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 16 08:59:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad1061e8d7ddba8e240920becc6e7b39a6aa745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:cb:28:a8:9f:3c:c7:44:11:6c:b8:9d:3f:
68:7e:9d:91:ca:97:c8:32:42:2a:13:23:2e:f5:fe:
f9:86:66:c3:5e:0e:1b:69:39:b1:7e:e7:1b:6b:71:
11:3a:1b:b8:c4:ed:57:08:62:ab:76:57:4a:bd:54:
e7:17:46:84:c9:72:f8:7e:16:b6:be:cc:df:43:96:
a3:70:87:4a:91:d6:c3:0c:4f:ff:87:86:a8:74:27:
b3:13:3b:5b:9d:6d:41:e5:48:b4:c9:7b:de:1e:57:
45:fe:2f:8a:69:f7:34:86:f0:2d:cc:90:e0:62:14:
92:c3:47:4a:3b:5d:8c:7f:06:ec:f2:bf:24:41:ec:
95:12:3c:fa:62:50:da:36:69:b4:51:f5:4f:99:85:
02:f0:e3:78:15:00:db:38:0e:b3:d8:e2:cb:38:a2:
ee:8d:2e:c2:6b:69:a4:e4:d9:fc:71:82:a0:40:77:
43:f3:a5:f5:08:f6:97:d8:5e:42:dc:99:dc:98:73:
5f:81:b7:bb:74:45:50:31:d3:4a:4b:d4:7c:53:6c:
2b:b3:44:55:cb:11:57:bc:4c:99:13:86:e7:33:34:
5b:94:d8:ba:9f:c1:dd:ae:c6:4f:10:62:52:0d:c2:
dc:0d:e6:51:2f:a9:43:01:cc:67:56:27:86:23:39:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:61:E8:D7:DD:BA:8E:24:09:20:BE:CC:6E:7B:39:A6:AA:74:5C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/rRBh6Nfduo4kCSC-zG57OaaqdFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.107.0/24
84.32.156.0/24
84.32.218.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d0:d9:ca:51:d5:1a:93:57:53:1f:78:14:7a:d1:8f:5c:66:
b1:a5:fb:43:b9:ed:df:18:3b:09:36:5f:4e:25:f9:00:b3:dc:
73:f2:42:0e:60:96:f3:9a:2a:d0:19:cc:f0:02:2a:46:09:e4:
52:dc:cb:c9:ea:ea:f6:b0:36:98:74:5f:39:e1:99:78:53:2d:
b3:47:d1:24:c5:3a:58:45:5d:f1:d0:1c:76:db:86:bd:81:5d:
90:79:df:b4:d4:da:0c:a4:6b:3d:02:37:72:52:2e:25:07:fd:
c7:ff:bc:5e:c9:27:06:9b:d2:e3:fa:f6:05:7d:88:08:15:65:
ca:5d:65:bc:eb:41:c1:c9:33:5a:8d:28:6c:33:e0:b6:a5:67:
9d:58:b5:f9:69:e8:3a:41:73:77:e8:32:21:c1:15:db:25:b8:
29:2a:09:d0:3c:f7:5f:06:20:78:13:8a:36:b6:44:9a:04:43:
87:d4:a5:60:cc:0a:f6:76:90:9c:19:e2:bc:2a:83:c9:df:f0:
64:7a:0d:b3:7e:98:c4:b9:c0:84:3b:1f:fc:08:56:11:85:43:
3e:5a:24:2c:7b:07:8d:67:04:3a:fb:42:89:a2:f6:d5:90:e3:
c7:73:37:c6:77:3c:b8:7c:31:9a:92:26:80:47:c2:3f:8a:b7:
72:b6:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:43 2026 by rpki-client