Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/udNh7qNcIjth6zSPqkgHqerKx5Q.roa
File: udNh7qNcIjth6zSPqkgHqerKx5Q.roa (raw, json)
Hash identifier: bfKXFXizFEabuo/3uTHgozuA18vHtgRIrvxH7YaHggs=
Subject key identifier: B9:D3:61:EE:A3:5C:22:3B:61:EB:34:8F:AA:48:07:A9:EA:CA:C7:94
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019CD8AB9BBB856AC1979B7AEC5396B7AF8A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/udNh7qNcIjth6zSPqkgHqerKx5Q.roa
Signing time: Tue 10 Mar 2026 16:54:11 +0000
ROA not before: Tue 10 Mar 2026 16:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.230.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:ab:9b:bb:85:6a:c1:97:9b:7a:ec:53:96:b7:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 10 16:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9d361eea35c223b61eb348faa4807a9eacac794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:83:32:d8:1c:d2:04:19:f5:4c:38:e9:42:
a2:15:37:57:bb:9a:e5:db:b1:69:7a:8b:28:5b:de:
04:45:00:c3:0a:cc:55:3e:20:c1:ae:10:fe:a6:3b:
93:91:6e:21:b0:02:49:b1:e7:ba:42:88:7f:c2:25:
eb:39:2f:99:cd:66:28:c7:cd:d1:2c:bb:0e:01:8a:
25:c3:70:f9:dd:41:19:e9:39:a4:2a:55:85:d9:ac:
02:6a:e7:18:af:6d:f5:47:74:14:3c:05:50:46:ab:
2b:ad:93:8b:53:81:dd:a7:ff:22:ed:ae:0e:2f:6f:
6b:ad:36:62:5a:9e:da:a2:21:11:fb:12:93:36:c3:
5a:4a:f6:bd:b6:72:11:6e:b4:63:39:33:b1:8b:38:
9e:37:39:26:52:30:79:1c:7f:50:c1:44:97:83:7f:
bc:3f:c3:1d:ac:2d:5b:0c:e8:07:99:07:ac:39:96:
96:cd:cc:0c:38:8f:4d:e3:5a:8d:1d:d7:1c:46:3e:
94:31:38:04:f0:86:94:d2:74:0f:64:d9:18:c8:3b:
4a:62:7e:66:8e:b0:82:5f:9c:06:44:4f:66:e7:e5:
65:92:7f:6f:6d:c6:0d:9d:cb:94:1c:d5:33:c5:56:
a5:f9:1c:8a:38:fe:cb:9b:07:39:0f:24:96:f4:e0:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:61:EE:A3:5C:22:3B:61:EB:34:8F:AA:48:07:A9:EA:CA:C7:94
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/udNh7qNcIjth6zSPqkgHqerKx5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0/24
84.32.20.0/22
84.32.46.0/23
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.230.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.66.0/23
88.216.130.0/23
88.216.134.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:37:36:1c:f6:29:ce:25:e1:e0:33:a4:4f:7e:44:6b:4a:2b:
95:55:95:89:78:2b:f5:49:b5:b0:6b:c3:c1:c1:66:dc:20:99:
24:4b:50:7e:68:f0:2e:d2:e6:1b:c2:10:f9:11:63:d8:54:4d:
2d:09:ad:93:18:37:bb:82:62:c3:c1:71:59:29:11:8c:12:8e:
ae:0b:cc:1c:71:9f:3e:d7:c4:bc:a7:ca:81:99:85:e2:db:6b:
8d:2a:de:37:0c:3f:97:88:bf:d6:3b:2a:79:b7:4a:c5:bf:19:
f0:34:0a:00:c0:ff:0f:10:16:8c:f6:e6:af:f8:ba:6f:53:8a:
1e:20:df:e4:28:25:e1:6b:94:99:85:e8:de:5a:57:a8:01:01:
b9:60:d1:3d:56:b9:45:0b:05:48:0b:5c:38:1b:89:36:27:37:
21:10:7e:6c:37:bf:a3:36:18:e6:c9:20:5d:d6:f0:00:fc:0a:
4b:74:3c:7b:a0:04:2f:6f:f3:c5:e9:30:bf:3f:ea:bd:c7:b8:
50:2a:9e:f3:27:7a:c7:7b:0e:d4:e0:73:8c:7d:86:81:74:ae:
15:e3:bc:b4:78:56:14:ed:3f:16:af:98:a5:8c:8c:f2:01:01:
46:c7:cd:f6:60:7c:ab:3c:00:18:f3:76:84:01:f4:ce:a6:34:
ba:30:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:17 2026 by rpki-client