Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dcTuacVkZ6DHzWmHvD5XlP1WL6U.roa
File: dcTuacVkZ6DHzWmHvD5XlP1WL6U.roa (raw, json)
Hash identifier: Mg7f1bl1b0mZHV3qkGpxc7Y8JHnjNs1+uelID5F2OKk=
Subject key identifier: 75:C4:EE:69:C5:64:67:A0:C7:CD:69:87:BC:3E:57:94:FD:56:2F:A5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01978CD783A237C6B31C14B3592807A7A095
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dcTuacVkZ6DHzWmHvD5XlP1WL6U.roa
Signing time: Fri 20 Jun 2025 10:17:03 +0000
ROA not before: Fri 20 Jun 2025 10:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33922
IP address blocks: 84.32.0.0/22 maxlen: 22
84.32.2.0/23 maxlen: 23
84.32.3.0/24 maxlen: 24
84.32.36.0/24 maxlen: 24
84.32.37.0/24 maxlen: 24
84.32.38.0/24 maxlen: 24
84.32.80.0/23 maxlen: 23
84.32.114.0/23 maxlen: 24
84.32.116.0/23 maxlen: 24
84.32.120.0/22 maxlen: 22
84.32.124.0/24 maxlen: 24
84.32.125.0/24 maxlen: 24
84.32.132.0/24 maxlen: 24
84.32.134.0/24 maxlen: 24
84.32.140.0/22 maxlen: 22
84.32.140.0/24 maxlen: 24
84.32.142.0/24 maxlen: 24
84.32.165.0/24 maxlen: 24
84.32.166.0/24 maxlen: 24
84.32.167.0/24 maxlen: 24
84.32.171.0/24 maxlen: 24
84.32.180.0/24 maxlen: 24
84.32.181.0/24 maxlen: 24
84.32.182.0/24 maxlen: 24
84.32.183.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
88.216.24.0/23 maxlen: 24
88.216.26.0/23 maxlen: 24
88.216.28.0/22 maxlen: 24
88.216.71.0/24 maxlen: 24
88.216.76.0/22 maxlen: 24
88.216.82.0/23 maxlen: 23
88.216.84.0/24 maxlen: 24
88.216.85.0/24 maxlen: 24
88.216.86.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.112.0/21 maxlen: 21
88.216.112.0/24 maxlen: 24
88.216.113.0/24 maxlen: 24
88.216.114.0/24 maxlen: 24
88.216.115.0/24 maxlen: 24
88.216.116.0/24 maxlen: 24
88.216.117.0/24 maxlen: 24
88.216.118.0/24 maxlen: 24
88.216.119.0/24 maxlen: 24
88.216.120.0/22 maxlen: 22
88.216.120.0/24 maxlen: 24
88.216.121.0/24 maxlen: 24
88.216.122.0/24 maxlen: 24
88.216.123.0/24 maxlen: 24
88.216.124.0/24 maxlen: 24
88.216.125.0/24 maxlen: 24
88.216.126.0/24 maxlen: 24
88.216.136.0/21 maxlen: 21
88.216.136.0/24 maxlen: 24
88.216.137.0/24 maxlen: 24
88.216.147.0/24 maxlen: 24
88.216.148.0/24 maxlen: 24
88.216.150.0/24 maxlen: 24
88.216.153.0/24 maxlen: 24
88.216.154.0/24 maxlen: 24
88.216.155.0/24 maxlen: 24
88.216.156.0/24 maxlen: 24
88.216.157.0/24 maxlen: 24
88.216.158.0/24 maxlen: 24
88.216.159.0/24 maxlen: 24
88.216.160.0/23 maxlen: 23
88.216.162.0/24 maxlen: 24
88.216.164.0/22 maxlen: 22
88.216.164.0/24 maxlen: 24
88.216.165.0/24 maxlen: 24
88.216.166.0/24 maxlen: 24
88.216.167.0/24 maxlen: 24
88.216.168.0/23 maxlen: 23
88.216.170.0/23 maxlen: 23
88.216.170.0/24 maxlen: 24
88.216.171.0/24 maxlen: 24
88.216.173.0/24 maxlen: 24
88.216.174.0/24 maxlen: 24
88.216.175.0/24 maxlen: 24
88.216.176.0/24 maxlen: 24
88.216.177.0/24 maxlen: 24
88.216.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:d7:83:a2:37:c6:b3:1c:14:b3:59:28:07:a7:a0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 20 10:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75c4ee69c56467a0c7cd6987bc3e5794fd562fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:09:70:00:e1:99:52:16:dc:57:63:df:38:
57:42:a5:55:c4:00:f2:6c:e1:e9:49:43:bb:b3:33:
e3:9d:79:61:45:aa:8f:70:06:ad:29:f9:09:5f:94:
7d:e5:a1:87:32:b6:4e:ce:eb:ef:76:a7:57:b5:92:
24:1b:8d:3f:6b:45:e9:ae:4b:c9:f6:81:95:46:ef:
31:c3:55:62:05:6e:05:b0:a8:32:94:9f:df:56:9b:
e9:fd:9c:bc:52:95:65:ce:a7:28:f4:d5:23:86:20:
8c:1a:c0:68:c2:fd:cf:4d:f6:6d:23:5f:61:b8:2b:
56:1b:1a:e7:be:54:73:cc:42:d2:31:6b:70:07:e7:
1c:a8:3e:4c:49:c5:32:f9:32:9b:b5:4c:c3:3a:f3:
99:69:55:cb:cf:8e:2f:cd:62:05:8f:3e:8e:05:92:
d1:94:4f:d4:6a:b4:ab:c9:95:db:cc:1c:5c:a8:b3:
54:ca:e6:61:03:c9:5a:90:37:52:b0:ab:6a:5b:7f:
c6:de:18:07:a6:6b:64:50:69:d3:c9:05:a7:a4:26:
42:9a:7e:ef:2b:ad:cf:e4:7c:31:ba:48:99:63:e7:
ef:22:a3:ec:20:16:b9:ee:ed:3c:21:dc:d3:86:28:
09:7f:ec:66:17:9a:21:74:96:84:19:f8:12:46:d8:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C4:EE:69:C5:64:67:A0:C7:CD:69:87:BC:3E:57:94:FD:56:2F:A5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dcTuacVkZ6DHzWmHvD5XlP1WL6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.0.0/22
84.32.36.0-84.32.38.255
84.32.80.0/23
84.32.114.0-84.32.117.255
84.32.120.0-84.32.125.255
84.32.132.0/24
84.32.134.0/24
84.32.140.0/22
84.32.165.0-84.32.167.255
84.32.171.0/24
84.32.180.0/22
84.32.250.0/23
88.216.24.0/21
88.216.71.0/24
88.216.76.0/22
88.216.82.0-88.216.86.255
88.216.104.0/22
88.216.112.0-88.216.126.255
88.216.136.0/21
88.216.147.0-88.216.148.255
88.216.150.0/24
88.216.153.0-88.216.162.255
88.216.164.0-88.216.171.255
88.216.173.0-88.216.179.255
Signature Algorithm: sha256WithRSAEncryption
6a:8a:f8:70:b5:f1:5b:bf:e1:fd:1f:73:1c:d7:c0:1b:74:a6:
c7:6e:14:49:eb:e1:4b:bb:f8:f2:52:5a:04:80:24:01:71:d2:
5d:ae:6b:ab:53:2d:95:3d:1d:8f:77:e0:8a:c8:07:34:46:82:
b9:8d:ad:07:59:5a:fc:74:49:72:d1:5f:1a:b4:c1:8a:0f:96:
32:e0:a4:5f:82:47:ba:01:30:fb:b5:80:6c:f4:1c:ca:9d:56:
b7:05:69:f6:ad:fa:71:81:f7:1b:6c:88:2d:c8:e3:27:83:50:
66:77:de:67:75:5c:51:15:39:ff:53:8f:aa:f4:3a:c9:52:00:
0a:7a:b1:f0:58:a8:fc:05:29:7a:4a:b0:0a:bb:95:77:71:2e:
79:04:f8:1e:8d:98:3b:af:26:49:fa:51:ec:f6:e1:44:87:62:
28:79:17:c9:f1:22:ef:c4:8b:cf:08:c7:ff:7c:5c:f0:0c:5d:
20:cb:d9:cd:d6:cb:17:ce:39:75:e3:96:01:ff:7c:c5:1a:41:
f5:84:be:84:13:0e:29:be:79:77:e4:64:33:58:83:1d:76:04:
e2:28:00:7d:38:89:23:23:34:bb:2e:dc:29:05:bf:1d:c5:49:
d2:95:e9:ac:63:88:ed:a2:17:fc:84:7d:18:7d:f2:21:e9:46:
c2:82:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:33 2025 by rpki-client