Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cb0RX3bLp1cv7EcinKFIgkjKYj0.roa
File: cb0RX3bLp1cv7EcinKFIgkjKYj0.roa (raw, json)
Hash identifier: 6dZrhZJZcPxwCfLJ89JYEo3+SbAkm6/q2ZDDPzd3gjE=
Subject key identifier: 71:BD:11:5F:76:CB:A7:57:2F:EC:47:22:9C:A1:48:82:48:CA:62:3D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019E1BB96B0B0194209FC0E884BA11AAAC36
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cb0RX3bLp1cv7EcinKFIgkjKYj0.roa
Signing time: Tue 12 May 2026 10:26:36 +0000
ROA not before: Tue 12 May 2026 10:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.220.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.68.0/24 maxlen: 24
88.216.73.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.195.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:b9:6b:0b:01:94:20:9f:c0:e8:84:ba:11:aa:ac:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 12 10:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71bd115f76cba7572fec47229ca1488248ca623d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:de:11:d3:07:c9:35:f0:b4:79:af:69:d2:
1c:6f:18:40:a5:2e:f7:f2:df:9e:d7:02:93:7e:ec:
b0:e8:33:0d:e4:9b:8d:7e:eb:b1:ff:7e:6c:ca:f2:
34:96:bb:ab:57:26:44:48:a5:b1:69:22:56:00:34:
00:38:c4:4c:ee:dc:c3:7d:d4:32:34:4d:03:c3:45:
df:25:10:7f:88:22:ba:27:de:e4:54:c5:e6:49:a0:
9c:26:33:21:b6:e6:8f:2a:1b:57:3f:cb:e0:1e:cf:
ad:ca:5b:1d:00:7e:49:7e:a8:04:a4:7f:a7:7b:05:
5e:f0:da:d1:c7:4b:af:46:af:ed:b2:46:c3:8f:0d:
fd:63:b2:46:c9:04:a7:78:95:61:bc:47:7f:46:e8:
9a:89:8b:2b:d4:28:5d:6f:c7:35:ec:46:66:d9:69:
19:6d:e2:c1:fa:46:c7:01:b6:32:e6:d2:c4:08:9a:
12:7f:33:87:48:f6:f4:62:ff:07:a7:51:62:ab:ee:
2c:99:cf:f7:e1:18:e8:4e:02:53:f1:ad:af:cf:f1:
85:cb:ab:5f:d5:75:be:e4:65:7f:ce:c0:31:3a:6e:
d2:98:24:11:0b:f7:0e:fb:0c:d2:97:4c:6f:1f:83:
5d:44:39:73:5d:02:b0:e5:39:e7:0f:37:1f:03:96:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:11:5F:76:CB:A7:57:2F:EC:47:22:9C:A1:48:82:48:CA:62:3D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cb0RX3bLp1cv7EcinKFIgkjKYj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.48.0/24
84.32.61.0/24
84.32.63.0/24
84.32.70.0/23
84.32.128.0/22
84.32.220.0/24
88.216.39.0/24
88.216.68.0/24
88.216.73.0/24
88.216.184.0/24
88.216.195.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
45:27:57:60:3c:62:bc:51:13:9c:11:70:d8:42:24:65:4f:fe:
37:db:f3:ce:b6:a0:5e:a1:a2:26:6e:c7:77:85:0a:6c:06:2b:
47:75:c7:ed:a7:fd:99:56:62:fa:a3:b1:f7:e3:41:a6:57:05:
a5:c2:20:5c:7d:93:b3:16:9d:a3:eb:6e:5e:32:29:e1:c7:26:
82:88:fd:1f:a1:d1:fb:55:8c:e5:ab:44:90:2e:1d:f9:72:2e:
d7:69:33:eb:95:88:62:ea:f5:00:14:fc:f0:67:f1:44:77:90:
f2:39:14:9d:31:3f:21:f9:a7:db:a8:4f:0e:0c:b1:19:ef:a6:
29:7b:29:f4:b5:be:42:89:69:ed:09:b7:b2:21:c3:2c:ac:29:
75:78:82:70:af:2c:be:7c:42:1c:0c:5a:b2:a7:83:70:1c:36:
42:34:f3:80:ca:60:7e:0f:e4:f7:23:e4:6f:b4:21:fb:c1:77:
f5:71:41:ab:3d:87:7c:07:6b:b5:78:4c:c5:0e:2a:a4:4b:7a:
11:1f:4f:ce:60:40:2b:40:eb:f5:5c:ca:76:b6:40:11:cb:40:
2c:18:3f:62:0f:fc:e3:f6:13:dd:a6:cf:72:05:91:5b:82:45:
9a:7e:4c:f5:a5:17:0e:bc:83:20:1a:98:85:f0:ab:96:51:d1:
6f:e7:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:05 2026 by rpki-client