Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2b30LSVrbRiD3g-d1PqxxAj6C44.roa
File: 2b30LSVrbRiD3g-d1PqxxAj6C44.roa (raw, json)
Hash identifier: +3hGsYsrc6QcZz3nBsEV0J/bZmjI4OaQpi/QMKIBBSY=
Subject key identifier: D9:BD:F4:2D:25:6B:6D:18:83:DE:0F:9D:D4:FA:B1:C4:08:FA:0B:8E
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CF85165C85C1518A7DE765BE9E8DAB0F2
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2b30LSVrbRiD3g-d1PqxxAj6C44.roa
Signing time: Mon 16 Mar 2026 20:23:29 +0000
ROA not before: Mon 16 Mar 2026 20:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:51:65:c8:5c:15:18:a7:de:76:5b:e9:e8:da:b0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 16 20:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9bdf42d256b6d1883de0f9dd4fab1c408fa0b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:ff:9f:ab:ab:0b:e3:ec:ce:39:96:bc:e1:
92:b8:b4:bd:19:c5:b8:16:2c:08:28:9f:c6:8c:e9:
4a:19:9e:dd:8f:cd:75:5c:5d:6c:cc:9c:03:29:1d:
de:a5:78:29:c0:19:56:44:4d:03:79:3b:ed:71:1d:
49:e7:cc:1d:9f:18:7b:0a:a8:94:90:c7:a0:90:76:
c8:95:cf:d5:00:1e:34:31:05:bf:99:de:fb:39:83:
00:bd:25:59:8f:3a:59:4a:f8:d5:64:99:cc:aa:0a:
ac:c2:7b:a8:e2:65:e1:30:03:df:c6:5e:68:e9:41:
ca:f6:bb:a7:1f:36:68:8b:af:6e:11:f1:89:e3:30:
49:e4:45:c0:0c:36:e3:a7:74:51:d2:07:ee:70:ab:
0f:20:5b:6e:77:1c:aa:45:8f:a2:46:5a:be:da:ea:
d4:9f:f7:25:48:75:59:e2:41:19:4c:a6:b2:17:c9:
b6:26:cd:9f:00:73:77:66:5a:af:b9:70:1d:e4:28:
d4:2f:3d:e2:1a:77:6d:39:c8:bf:91:24:e4:2a:3e:
e0:32:f3:bd:36:e5:17:a7:46:a0:bd:4d:d5:2d:07:
ac:50:61:03:8c:8c:e3:13:ab:fb:69:79:de:40:4b:
73:e0:ad:e8:de:e2:12:b3:0a:69:c5:02:11:d9:ea:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:F4:2D:25:6B:6D:18:83:DE:0F:9D:D4:FA:B1:C4:08:FA:0B:8E
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2b30LSVrbRiD3g-d1PqxxAj6C44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.107.0/24
84.32.152.0/24
84.32.154.0/24
84.32.156.0/24
84.32.218.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
01:09:37:ee:4a:49:f5:55:bd:d3:d2:0a:bc:cc:96:53:02:01:
96:00:8b:52:32:73:8f:42:d2:fc:b1:2e:f5:10:89:8d:c8:22:
09:b7:0d:cb:5c:dc:90:90:1b:c6:36:fa:3e:ec:61:36:9e:49:
2e:16:2d:b9:22:6a:d8:1d:42:d4:f7:62:79:68:73:55:65:26:
8d:de:db:51:ad:85:18:bf:69:48:8c:c9:df:df:7b:d7:10:c0:
26:87:ee:19:83:c4:6c:37:ab:89:d5:41:c0:c2:8e:1a:10:fd:
ad:f4:26:15:01:72:25:ce:7c:35:06:2b:0e:6e:0e:3f:45:c6:
a2:d4:58:ea:5b:b3:37:a5:5e:30:de:58:dc:61:bf:92:87:70:
dc:e5:7e:00:f8:7e:f6:4f:45:49:e8:3f:22:f1:b7:ab:01:54:
93:90:36:5f:22:07:6a:bd:31:af:05:a3:e5:c9:00:57:f4:75:
89:59:dd:8b:29:e9:c2:9f:f8:cf:71:86:b3:2e:d8:70:75:94:
a1:54:4d:d7:fb:dc:9e:4a:d9:e1:34:f5:d4:0b:64:34:b7:04:
61:95:90:35:cb:0f:46:20:32:b7:ba:de:46:b7:7a:40:82:b4:
d7:2f:a2:a2:ee:f5:c7:88:ad:73:9f:c5:ce:59:78:96:0f:02:
ca:1f:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:13 2026 by rpki-client