Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0RnZxHzta-i5px8tNtu1TmeXnq4.roa
File: 0RnZxHzta-i5px8tNtu1TmeXnq4.roa (raw, json)
Hash identifier: 3rHFZD5uHGlIjTlI6EJEAqbKtqOmrFUToaqDzyLR4FA=
Subject key identifier: D1:19:D9:C4:7C:ED:6B:E8:B9:A7:1F:2D:36:DB:B5:4E:67:97:9E:AE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CF84F909EC344173B2EF88D5766788877
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0RnZxHzta-i5px8tNtu1TmeXnq4.roa
Signing time: Mon 16 Mar 2026 20:21:29 +0000
ROA not before: Mon 16 Mar 2026 20:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.64.0/24 maxlen: 24
84.32.96.0/24 maxlen: 24
84.32.101.0/24 maxlen: 24
84.32.102.0/24 maxlen: 24
84.32.103.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.108.0/24 maxlen: 24
84.32.176.0/24 maxlen: 24
84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
84.32.231.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.75.0/24 maxlen: 24
88.216.92.0/23 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:4f:90:9e:c3:44:17:3b:2e:f8:8d:57:66:78:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 16 20:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d119d9c47ced6be8b9a71f2d36dbb54e67979eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:c8:b8:4e:87:b1:7d:86:49:f3:19:25:1e:
ea:a7:86:88:92:59:b6:45:b3:42:5d:ed:b0:57:db:
5a:43:ae:c9:93:83:67:b8:68:84:47:00:4a:bc:e6:
6f:ce:33:a4:c6:14:7d:2e:e5:8f:df:5f:bd:53:2b:
23:11:46:0e:8b:ae:c3:04:22:08:7b:63:f3:d9:56:
17:1a:5e:91:d8:a0:a4:9c:09:86:2f:ef:60:22:0b:
8a:2c:3b:aa:6d:2c:9b:16:3a:1b:4f:f1:d0:20:3a:
d6:e6:5d:34:ba:45:95:23:d6:33:6b:be:b9:18:d6:
63:99:8a:8f:41:bf:3a:62:16:2e:26:63:b6:13:5a:
2b:0f:d8:0c:03:a5:27:1f:9d:e4:57:11:9d:6a:23:
cd:33:d7:b1:3f:6b:50:4a:38:af:1c:20:ee:33:bc:
2a:fe:52:a2:93:be:84:48:87:87:1d:34:8c:db:ff:
cf:15:81:9c:81:d4:09:2e:93:5a:2b:8e:93:72:bf:
26:4c:51:a6:d6:cb:0a:5e:11:4b:1a:d5:34:7c:fe:
7c:9e:ea:37:a7:c5:73:f5:6c:66:02:8f:c3:60:60:
22:71:a5:68:65:36:e1:39:9e:a4:f1:8c:7f:fc:c3:
77:01:fe:c3:fa:89:aa:53:a4:8d:7c:67:71:e0:4c:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:D9:C4:7C:ED:6B:E8:B9:A7:1F:2D:36:DB:B5:4E:67:97:9E:AE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0RnZxHzta-i5px8tNtu1TmeXnq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.64.0/24
84.32.96.0/24
84.32.101.0-84.32.104.255
84.32.108.0/24
84.32.176.0/24
84.32.184.0/21
84.32.231.0/24
88.216.61.0/24
88.216.63.0/24
88.216.75.0/24
88.216.92.0/23
88.216.187.0/24
Signature Algorithm: sha256WithRSAEncryption
71:dc:5d:4e:0f:e7:52:4c:f7:3f:b9:3c:86:66:d1:b9:64:a8:
18:87:02:2e:89:db:f9:53:06:ba:1b:c5:73:21:80:15:20:6f:
93:5e:e2:a0:c8:e4:e2:f8:47:a3:dc:21:fe:35:3c:fe:e8:e6:
04:31:fe:31:e2:0c:dc:98:34:1d:be:da:cb:fe:72:3e:37:44:
33:f3:94:6d:6d:1f:f2:a2:1a:1a:6c:b6:f2:ef:42:10:8c:55:
74:48:f6:19:85:9e:44:03:a7:37:62:70:0f:63:31:5a:c5:cd:
0e:9c:90:31:84:8e:d8:2c:5d:77:72:42:97:10:ac:ac:d6:39:
41:51:88:f9:32:cf:a5:ec:2e:d7:17:20:c5:68:c7:76:7b:3f:
23:17:c4:30:69:2c:11:03:ed:b4:e1:ee:e3:7a:3d:46:53:e1:
fc:da:fb:9e:a0:8b:b0:cb:5b:3c:7c:5c:5a:0c:5b:dc:f8:f5:
3e:f2:a8:ae:37:30:45:fc:b1:b3:ec:f4:b8:dd:25:e1:27:26:
ca:67:db:88:b2:ca:13:71:ba:e3:93:4e:e1:a1:72:5d:6d:9a:
7e:16:d3:e0:6f:a0:eb:62:68:5e:3b:73:ab:a9:0d:27:3a:69:
b5:54:d5:77:af:83:19:7d:d5:36:f7:a5:08:91:bd:9c:97:4f:
5c:6b:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:13 2026 by rpki-client