Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ywt2b0zx_gzxlVtoTfANxIdDi_c.roa
File: ywt2b0zx_gzxlVtoTfANxIdDi_c.roa (raw, json)
Hash identifier: Dl/k1Lrtl1w+Y1bmVsHM6fFeOCQiMourzQH3D8pWDI4=
Subject key identifier: CB:0B:76:6F:4C:F1:FE:0C:F1:95:5B:68:4D:F0:0D:C4:87:43:8B:F7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019FF78C8D1BC205EAD3A6ECA4C982BACA8E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ywt2b0zx_gzxlVtoTfANxIdDi_c.roa
Signing time: Wed 12 Aug 2026 19:56:51 +0000
ROA not before: Wed 12 Aug 2026 19:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.220.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.68.0/24 maxlen: 24
88.216.73.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.195.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:8c:8d:1b:c2:05:ea:d3:a6:ec:a4:c9:82:ba:ca:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 12 19:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb0b766f4cf1fe0cf1955b684df00dc487438bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:df:c4:a7:e0:0b:89:e5:87:39:29:b9:d9:
ca:66:81:cc:3c:45:51:c7:4b:2a:41:74:c4:8b:d6:
70:51:19:24:e2:0b:f4:c4:4a:db:2c:46:07:4c:2b:
69:1b:ea:9d:29:b8:ba:ed:4b:57:a3:4f:c9:ec:1c:
60:03:24:33:e4:05:4f:7d:bd:e2:ba:ac:17:a1:8d:
66:de:fd:b7:49:c9:03:4e:23:90:f3:c1:0e:5e:d6:
d7:30:8a:e9:63:74:b2:d7:0d:69:4a:da:41:6b:0f:
c8:b9:78:e1:21:75:67:6f:0f:55:cd:cd:f9:ec:8c:
e0:fd:85:31:f4:8a:55:a2:1d:d9:7c:1e:c1:d6:c4:
5a:0f:22:32:5c:84:1b:94:57:c0:67:ac:e8:d1:3a:
69:5b:3b:cf:43:17:38:c5:7e:57:e6:ad:70:56:03:
6e:52:49:af:bf:73:2f:cf:75:7a:33:02:14:c0:0e:
7d:66:12:01:2f:e2:ae:e3:73:24:ff:6e:28:5c:38:
df:57:16:f1:85:39:06:d2:24:88:a4:62:b1:4f:7d:
1f:1c:66:6f:44:f5:c3:3d:8d:97:c9:a3:ff:62:d0:
8d:51:38:6c:91:16:31:6c:53:2c:24:e6:3a:a6:33:
eb:d0:85:29:64:83:28:7f:33:83:13:55:d7:e8:5e:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:76:6F:4C:F1:FE:0C:F1:95:5B:68:4D:F0:0D:C4:87:43:8B:F7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ywt2b0zx_gzxlVtoTfANxIdDi_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.48.0/24
84.32.61.0/24
84.32.63.0/24
84.32.70.0/23
84.32.128.0/22
84.32.220.0/24
88.216.39.0/24
88.216.57.0/24
88.216.68.0/24
88.216.73.0/24
88.216.184.0/24
88.216.195.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
33:55:f7:0c:da:97:80:51:50:2d:3d:2d:61:67:36:15:8b:6f:
98:b0:03:d0:cc:e0:94:f8:18:e2:40:ce:85:cc:4c:00:fa:d2:
ff:be:13:76:d1:d7:cd:16:c4:b3:2e:36:6c:ca:cf:14:d3:2b:
28:da:2f:c6:e0:6b:e9:1c:74:79:86:69:8b:37:70:a9:ef:5f:
d2:8f:0d:e5:b2:f5:e0:97:12:36:53:0e:f3:d9:c4:db:3f:1b:
38:b6:b1:b5:f3:25:dc:1b:c5:0e:c6:6a:2f:92:9f:c2:9f:ee:
c4:0e:ea:32:cf:39:c9:b6:66:5c:9d:ed:7c:aa:2d:6c:37:7d:
7e:41:16:e2:53:67:a3:3a:36:22:c6:d6:67:f7:6c:57:9b:92:
99:9b:27:fe:73:10:68:c1:4d:1e:35:ef:e5:10:d3:3f:59:22:
6a:02:d5:ce:a5:4a:19:b6:b9:82:4b:bf:6e:33:77:9d:68:16:
3d:9a:30:eb:c1:1b:cd:49:ff:3e:83:35:6d:ea:2b:89:9e:20:
d8:b2:a2:b3:27:b4:37:18:ce:17:29:3b:11:32:17:f4:c3:24:
da:92:b4:c0:90:d2:89:23:06:ee:ca:73:c4:09:ca:97:c9:cb:
8e:b0:8e:c9:63:ff:06:9a:33:d6:db:65:6c:88:73:12:c3:60:
01:c1:9a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:50 2026 by rpki-client