Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Fd-Roi8WsAtXa3NceGhjpiEHemc.roa
File: Fd-Roi8WsAtXa3NceGhjpiEHemc.roa (raw, json)
Hash identifier: 7HmuzadUD+4EgUcKFRr9h33VT96/6Uzj/9O/tOBZIL8=
Subject key identifier: 15:DF:91:A2:2F:16:B0:0B:57:6B:73:5C:78:68:63:A6:21:07:7A:67
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019DC6285B97A8013209910DE58108EDE627
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Fd-Roi8WsAtXa3NceGhjpiEHemc.roa
Signing time: Sat 25 Apr 2026 19:40:26 +0000
ROA not before: Sat 25 Apr 2026 19:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 84.32.6.0/24 maxlen: 24
84.32.136.0/22 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c6:28:5b:97:a8:01:32:09:91:0d:e5:81:08:ed:e6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 25 19:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15df91a22f16b00b576b735c786863a621077a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:44:84:a5:1d:3b:69:41:48:7e:9d:96:9c:51:
fd:d7:5f:27:7b:5a:30:54:b0:15:e0:57:46:9d:93:
9a:ef:b9:e3:0d:62:35:04:0c:2c:81:27:d4:61:71:
a6:05:2e:4e:13:e5:38:0a:b1:10:5b:d4:04:2c:47:
ac:a6:bf:02:a0:0b:c0:6b:f7:28:38:2a:da:8d:27:
73:89:88:ac:ce:bd:6f:9b:fa:9b:f5:ba:f8:04:51:
5d:3a:06:cf:d4:3c:ff:1c:2b:c0:32:18:58:c5:9d:
fa:a2:a4:14:aa:69:77:43:17:f9:83:0e:2d:47:8d:
27:64:5f:97:8a:26:01:1d:d9:12:bf:a3:b8:3a:94:
71:81:de:e0:61:2b:3c:de:89:5a:66:62:d1:d7:94:
31:00:ab:63:17:a3:aa:23:cb:50:7f:2a:0e:84:22:
43:f7:92:77:1e:ee:a4:4f:28:ae:02:23:6a:a7:d5:
b4:3b:77:06:b2:c0:e7:7e:3d:41:12:94:4f:7e:04:
cf:16:e8:aa:be:55:31:70:1a:5c:04:17:56:58:70:
df:0d:c5:e5:17:d3:d1:98:43:7c:f3:57:ae:03:09:
ae:a9:82:73:95:7c:bf:3a:57:84:f1:31:ab:53:39:
31:07:d5:be:f1:3f:88:82:a7:0d:b0:6e:a9:2c:ec:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DF:91:A2:2F:16:B0:0B:57:6B:73:5C:78:68:63:A6:21:07:7A:67
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Fd-Roi8WsAtXa3NceGhjpiEHemc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.136.0/22
88.216.98.0/24
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
97:29:d0:2e:80:0b:5c:c5:ad:e1:af:a4:5e:37:6c:34:e7:1c:
c9:a0:5c:39:8e:10:3a:7e:8e:1f:24:1d:6f:5f:f3:9f:aa:92:
1c:1e:de:fd:b8:c7:de:95:2b:a6:61:fe:59:97:c6:78:41:8f:
d9:6b:ce:b3:23:68:44:f2:84:46:50:fc:ea:0c:67:22:d2:5b:
db:bc:df:63:b7:bb:37:f9:c9:11:83:ed:09:f4:29:45:7e:43:
13:c0:b1:75:d0:df:98:68:36:d4:e7:12:cb:b4:b5:d7:58:a9:
92:fc:15:f0:e4:00:30:67:f0:d9:a2:eb:2c:32:d0:bb:f4:9d:
5d:cd:91:f0:bf:6f:b1:ac:33:f3:34:8b:3d:ab:ca:71:d9:75:
bd:88:ba:cb:5f:b7:2d:d6:5a:46:2d:a8:ce:11:c2:78:f9:b8:
f1:e3:2c:54:6e:2b:e9:ca:78:8d:6a:63:07:23:2c:08:a2:a2:
e3:9f:3b:cc:1d:5a:00:ac:0c:e1:f5:67:d8:73:d3:fc:51:54:
73:7a:0e:c0:60:8b:72:05:ac:c4:0c:24:1e:39:3c:09:6e:a8:
c6:e0:81:35:65:ce:0c:d2:80:5e:a8:6f:c4:e3:c6:4c:eb:5f:
61:01:ff:81:1b:a5:51:b1:16:a8:ba:e3:02:4e:ed:2a:27:cb:
43:70:e3:a5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ3GKFuXqAEyCZEN5YEI7eYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwNDI1MTk0MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWRmOTFhMjJmMTZiMDBiNTc2YjczNWM3ODY4NjNhNjIxMDc3YTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kSEpR07aUFIfp2WnFH9118ne1ow
VLAV4FdGnZOa77njDWI1BAwsgSfUYXGmBS5OE+U4CrEQW9QELEespr8CoAvAa/co
OCrajSdziYiszr1vm/qb9br4BFFdOgbP1Dz/HCvAMhhYxZ36oqQUqml3Qxf5gw4t
R40nZF+XiiYBHdkSv6O4OpRxgd7gYSs83olaZmLR15QxAKtjF6OqI8tQfyoOhCJD
95J3Hu6kTyiuAiNqp9W0O3cGssDnfj1BEpRPfgTPFuiqvlUxcBpcBBdWWHDfDcXl
F9PRmEN881euAwmuqYJzlXy/OleE8TGrUzkxB9W+8T+IgqcNsG6pLOzyKwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBXfkaIvFrALV2tzXHhoY6YhB3pnMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvRmQtUm9pOFdzQXRYYTNOY2VHaGpwaUVIZW1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCAGAwQC
VCCIAwQAWNhiAwQCWNj4MA0GCSqGSIb3DQEBCwUAA4IBAQCXKdAugAtcxa3hr6Re
N2w05xzJoFw5jhA6fo4fJB1vX/OfqpIcHt79uMfelSumYf5Zl8Z4QY/Za86zI2hE
8oRGUPzqDGci0lvbvN9jt7s3+ckRg+0J9ClFfkMTwLF10N+YaDbU5xLLtLXXWKmS
/BXw5AAwZ/DZoussMtC79J1dzZHwv2+xrDPzNIs9q8px2XW9iLrLX7ct1lpGLajO
EcJ4+bjx4yxUbivpyniNamMHIywIoqLjnzvMHVoArAzh9WfYc9P8UVRzeg7AYIty
BazEDCQeOTwJbqjG4IE1Zc4M0oBeqG/E48ZM619hAf+BG6VRsRaouuMCTu0qJ8tD
cOOl
-----END CERTIFICATE-----
Generated at Tue May 12 23:45:55 2026 by rpki-client