Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HrEbKJKHaZXVXVFD7u_lCBZnOF8.roa
File: HrEbKJKHaZXVXVFD7u_lCBZnOF8.roa (raw, json)
Hash identifier: O0luu2PD+EQytW1WEHSRrekVziPScO8/UG/BQ9VaMGo=
Subject key identifier: 1E:B1:1B:28:92:87:69:95:D5:5D:51:43:EE:EF:E5:08:16:67:38:5F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A0D1FD7D55B1DAB1515CAACBEE27A8A9B0
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HrEbKJKHaZXVXVFD7u_lCBZnOF8.roa
Signing time: Thu 24 Sep 2026 05:57:25 +0000
ROA not before: Thu 24 Sep 2026 05:57:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.220.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.68.0/24 maxlen: 24
88.216.73.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.195.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.254.0/24 maxlen: 24
88.216.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:fd:7d:55:b1:da:b1:51:5c:aa:cb:ee:27:a8:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 24 05:57:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb11b2892876995d55d5143eeefe5081667385f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:d9:56:41:0e:13:34:20:13:bd:53:a1:e5:
69:37:01:33:8c:97:0e:12:07:fd:95:e6:f1:80:6d:
76:2b:d8:2d:d0:19:e9:fd:f4:03:e1:c8:d0:eb:c7:
aa:78:1f:c3:5a:6d:dc:d7:09:2f:f2:c0:92:50:66:
54:36:b6:6d:92:9a:b9:09:2e:65:1a:39:28:e1:1a:
bf:32:f6:34:c8:c0:56:26:2f:1a:46:00:f0:21:81:
9d:46:2b:1b:89:1c:a9:de:11:03:73:70:ce:03:cb:
cb:f3:96:54:06:19:fc:59:6c:1c:73:f3:34:dc:a8:
97:f5:ee:9e:d8:0b:5a:86:0d:8c:a2:72:b7:f3:5f:
85:20:62:36:d1:3c:0f:71:fd:06:45:69:6d:ef:7e:
98:ad:8e:89:1d:8f:ca:de:71:4a:34:e2:34:aa:d4:
27:f1:5e:c3:ee:22:d5:0d:d5:3c:9c:55:04:f3:9d:
bb:71:d4:88:4a:41:f3:85:cc:7d:9d:03:62:50:1e:
37:97:8c:47:9a:08:f7:c1:9a:09:24:b3:0e:a0:20:
b0:cb:6d:10:20:f5:36:ff:25:59:dc:b2:d2:6b:be:
01:9e:3a:3a:0f:c9:57:41:3d:5b:e3:49:da:e9:bd:
c4:68:e6:38:a5:e2:26:fc:6e:61:4c:8c:64:cf:5e:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:1B:28:92:87:69:95:D5:5D:51:43:EE:EF:E5:08:16:67:38:5F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HrEbKJKHaZXVXVFD7u_lCBZnOF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.48.0/24
84.32.61.0/24
84.32.63.0/24
84.32.70.0/23
84.32.128.0/22
84.32.220.0/24
88.216.39.0/24
88.216.57.0/24
88.216.68.0/24
88.216.73.0/24
88.216.183.0-88.216.184.255
88.216.195.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
88.216.254.0/23
Signature Algorithm: sha256WithRSAEncryption
91:87:76:c3:a8:04:fb:45:ce:15:14:ea:b6:57:08:3e:69:88:
7a:77:c6:c2:5b:cb:55:31:d7:ac:65:e3:da:da:16:5b:71:6b:
98:64:56:b2:a2:25:ba:6f:9a:a1:fa:a4:e2:68:d3:38:d8:f1:
c5:64:5e:6c:36:ee:e2:fe:7a:d9:64:39:27:7a:73:5f:1c:40:
89:cd:1f:cb:6f:39:70:db:ac:83:f9:70:40:62:26:54:43:2c:
59:ca:31:65:77:9c:c0:38:57:11:23:35:d7:8e:c7:e2:a4:1e:
f4:10:9b:b1:94:d0:bd:d2:17:13:ae:cb:33:75:0a:50:5f:a9:
20:fc:63:a8:92:ef:60:12:5a:1e:a7:77:38:01:75:ee:52:eb:
19:64:dd:e0:ea:5d:57:0e:da:dc:9c:55:c2:31:d2:e9:a3:d5:
6b:68:37:d1:cf:09:76:03:77:4d:fb:c3:24:0a:60:b8:6d:21:
27:07:3d:93:4d:f4:80:0d:57:3b:04:e0:66:9d:17:0e:97:69:
29:75:f6:92:e0:76:29:26:da:3d:18:a5:bc:ef:33:c1:c1:4f:
ee:d1:79:d2:af:e0:0c:0b:08:6d:bb:0c:cb:03:07:b8:64:f5:
d7:88:f0:fe:4d:a1:ca:c6:1b:20:34:f7:ad:a5:52:fe:8f:62:
e9:a1:08:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:47 2026 by rpki-client