Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/z-6FXCbgItJ5LZ2bs9jkqiV8YWs.roa
File: z-6FXCbgItJ5LZ2bs9jkqiV8YWs.roa (raw, json)
Hash identifier: 38QsEhcpbVVwr8wy+B4gSM8QeIJ3xKPJTqrRDXS4WXo=
Subject key identifier: CF:EE:85:5C:26:E0:22:D2:79:2D:9D:9B:B3:D8:E4:AA:25:7C:61:6B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019FF78C8E3222077BC55D1036F5F669A1B7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/z-6FXCbgItJ5LZ2bs9jkqiV8YWs.roa
Signing time: Wed 12 Aug 2026 19:56:51 +0000
ROA not before: Wed 12 Aug 2026 19:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.99.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
84.32.208.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.72.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:8c:8e:32:22:07:7b:c5:5d:10:36:f5:f6:69:a1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 12 19:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfee855c26e022d2792d9d9bb3d8e4aa257c616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:da:ba:f0:07:17:29:7b:48:d8:93:05:15:
c2:0a:b2:b2:ec:2e:9c:43:40:2d:36:ec:32:b1:63:
23:82:55:02:ed:b6:29:69:e6:2c:31:80:ff:45:f3:
b5:cd:ac:f2:fd:90:f4:af:65:17:1c:31:0a:be:17:
26:a0:06:33:2e:55:c9:5e:5a:4e:15:f6:71:ee:6e:
d8:04:4f:31:bd:c6:36:a7:d6:4f:c2:21:c8:66:4c:
d6:13:97:b2:21:48:16:37:41:c6:cd:0b:0f:37:fe:
e5:af:dd:a1:e0:f0:52:f8:6f:1e:ab:8e:be:f1:93:
81:5c:de:5e:45:65:ba:e7:e8:85:02:17:70:32:9c:
80:56:fe:f4:9e:bd:d1:21:bb:e0:1f:d4:19:48:2b:
5d:75:79:67:28:28:ff:c7:83:d5:64:e3:11:c4:de:
03:59:b3:25:7d:27:5d:5d:3e:41:c8:54:f8:f3:dd:
3e:8a:19:44:a3:63:f1:c3:7f:e9:26:75:69:1c:36:
ab:f0:da:e6:d9:12:8b:a8:8b:ac:e3:0e:d3:01:6c:
25:97:00:eb:54:9c:16:69:54:65:ec:e4:04:6d:de:
dd:1e:5a:69:3a:a4:38:d8:23:4e:bb:e2:1f:17:27:
af:e4:b0:02:06:2d:ea:4e:bc:ef:50:e0:8d:4c:00:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:85:5C:26:E0:22:D2:79:2D:9D:9B:B3:D8:E4:AA:25:7C:61:6B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/z-6FXCbgItJ5LZ2bs9jkqiV8YWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.99.0/24
84.32.106.0/24
84.32.208.0/24
84.32.217.0/24
88.216.60.0/24
88.216.72.0/24
88.216.130.0/23
88.216.189.0/24
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ea:3b:65:9d:df:42:6c:3b:49:a0:49:33:41:a2:1f:02:99:
04:91:ec:f1:4d:f2:39:49:5f:48:ec:6e:8e:4c:73:cb:54:f1:
89:15:45:e3:87:08:62:2a:40:c5:6f:97:a3:0c:2c:ee:f9:cb:
56:2b:52:95:28:e2:37:b2:55:28:62:ea:de:5b:9a:a4:1a:6d:
25:cf:ab:bb:20:89:96:37:33:20:fe:ac:c9:8e:d2:10:60:b2:
dd:ac:d1:61:1a:9d:90:34:e2:0c:41:3f:e0:1b:91:8c:15:c8:
55:d8:1b:f6:a6:a4:c4:21:cf:c1:af:be:42:64:45:92:7a:c5:
76:70:c6:be:38:70:b7:26:96:1a:8c:32:ec:75:71:8d:3c:f4:
6b:97:9f:80:40:3a:8f:a7:df:5a:38:b0:bb:65:eb:06:70:e5:
28:d7:94:56:e2:9a:e0:13:53:43:fb:04:ec:cd:66:2b:6a:80:
c2:df:03:4c:e2:f1:01:26:b4:db:9d:f2:f8:3a:a8:e6:9e:50:
c6:94:0c:ee:4d:94:90:04:65:f1:cb:23:57:95:a8:96:47:58:
39:fe:58:d2:0c:3e:b4:68:54:49:74:02:ad:90:06:bd:e7:42:
be:a5:e6:6a:ac:ab:9d:a0:b1:06:fe:a3:de:a6:b6:a5:55:7d:
c9:6c:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:26:40 2026 by rpki-client