Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xJZlMqTzSOLfaHTtSfzXW26neVQ.roa
File: xJZlMqTzSOLfaHTtSfzXW26neVQ.roa (raw, json)
Hash identifier: MpOk2vkPz4qIkAloQidMYnmAP3AX7RMnClZc9zWgHgA=
Subject key identifier: C4:96:65:32:A4:F3:48:E2:DF:68:74:ED:49:FC:D7:5B:6E:A7:79:54
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A0F267DDD6C81272CC517B3D6BD6C4F599
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xJZlMqTzSOLfaHTtSfzXW26neVQ.roa
Signing time: Wed 30 Sep 2026 13:01:28 +0000
ROA not before: Wed 30 Sep 2026 13:01:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.99.0/24 maxlen: 24
84.32.106.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.208.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.72.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:67:dd:d6:c8:12:72:cc:51:7b:3d:6b:d6:c4:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 30 13:01:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4966532a4f348e2df6874ed49fcd75b6ea77954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:c8:11:5f:d7:f2:e0:bb:6e:71:19:b9:0c:
5b:17:52:ed:6e:e0:55:e7:b9:9b:eb:72:66:59:71:
12:58:44:b4:0b:9b:27:33:28:60:19:db:5e:41:78:
b1:95:f5:bb:ac:5e:3d:d3:38:71:99:96:67:55:7f:
21:db:17:81:2a:7f:90:c1:6d:34:ce:50:f3:7d:d5:
0a:07:c2:1e:f6:d3:0a:dd:af:23:fe:04:27:99:cc:
3b:b4:09:5a:12:63:af:bb:4b:ce:14:eb:95:9a:d2:
88:bf:d7:9d:d8:c8:5c:44:bd:89:34:12:94:09:7d:
21:79:e5:6d:7a:4e:c3:d1:ac:03:16:31:78:43:0a:
26:b2:11:a6:cb:fb:82:51:44:0b:fc:51:e6:55:c1:
6b:36:7f:b6:c4:35:af:da:9e:0a:0a:fd:da:b1:b8:
9a:84:ab:54:91:1a:2e:63:e0:fb:36:23:eb:57:15:
11:0e:5e:52:a3:94:f2:8e:db:45:b1:81:d9:a4:8f:
11:84:f9:fc:06:81:07:fa:5e:bd:a5:9b:96:1f:03:
bf:90:ec:3c:ef:23:c0:51:ab:18:4c:ec:b5:1e:a7:
8a:72:38:b8:c5:c8:48:a0:02:dd:a7:3e:fc:80:1d:
c3:b5:91:20:1c:16:0b:01:f5:69:52:90:b4:12:d0:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:96:65:32:A4:F3:48:E2:DF:68:74:ED:49:FC:D7:5B:6E:A7:79:54
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/xJZlMqTzSOLfaHTtSfzXW26neVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.99.0/24
84.32.106.0/24
84.32.154.0/24
84.32.208.0/24
84.32.217.0/24
88.216.60.0/24
88.216.72.0/24
88.216.129.0-88.216.131.255
88.216.189.0/24
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a3:97:fd:e3:77:9a:13:17:d8:a3:e1:02:ee:3a:12:c5:58:
b1:32:b6:36:4e:f1:e7:a8:f8:15:08:8b:f0:09:9d:93:07:9e:
20:a0:8b:bc:bd:ee:b1:81:ca:08:0c:90:72:b8:a5:cf:48:e3:
92:47:58:7e:e8:8e:85:1c:65:0d:6f:6e:8f:09:9c:43:c0:e9:
28:52:ba:72:6a:bd:8f:33:4e:f6:f8:7f:c4:77:7a:b8:4f:98:
a2:85:d5:52:3d:20:40:8f:33:08:a8:cd:b5:95:3c:2d:1b:bd:
ec:51:08:1f:42:6d:34:aa:96:70:86:b8:fe:99:ba:fe:f1:f9:
04:0c:23:91:4e:e3:c0:1d:1c:0f:e0:ce:c4:6d:3b:3f:f6:ec:
3b:a5:c9:b9:58:d9:f4:3b:9b:04:72:be:37:32:e0:4a:5c:0b:
bb:37:2b:97:e7:16:2a:51:1e:18:0b:78:ce:6a:85:7c:b3:13:
1e:a5:74:f0:4a:fd:09:86:bd:ee:5b:6a:04:67:ef:9f:9b:f9:
63:5b:b5:2b:63:ef:f7:93:b8:b9:c6:08:34:4f:fd:f6:cd:46:
c7:77:b5:3f:b9:80:8e:91:d3:40:9f:23:cd:07:dc:8a:80:23:
6b:61:12:98:4d:7c:b6:97:67:db:e9:a6:52:01:45:be:5b:33:
b9:31:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:26:24 2026 by rpki-client