Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HCfXySP6yZxsc3QZ6RWVfSz49zw.roa
File: HCfXySP6yZxsc3QZ6RWVfSz49zw.roa (raw, json)
Hash identifier: UWVD6KlFIUp1asHgQRBNmtWrwlJ7RUGGBZNEEKSmqb4=
Subject key identifier: 1C:27:D7:C9:23:FA:C9:9C:6C:73:74:19:E9:15:95:7D:2C:F8:F7:3C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01A0949A7DFB19881F55669C57BD82E6F87E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HCfXySP6yZxsc3QZ6RWVfSz49zw.roa
Signing time: Sat 12 Sep 2026 07:52:27 +0000
ROA not before: Sat 12 Sep 2026 07:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204770
IP address blocks: 84.32.32.0/24 maxlen: 24
84.32.34.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.128.0/22 maxlen: 32
84.32.220.0/24 maxlen: 24
88.216.39.0/24 maxlen: 24
88.216.57.0/24 maxlen: 24
88.216.68.0/24 maxlen: 24
88.216.73.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.184.0/24 maxlen: 24
88.216.195.0/24 maxlen: 24
88.216.198.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
88.216.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:9a:7d:fb:19:88:1f:55:66:9c:57:bd:82:e6:f8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Sep 12 07:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c27d7c923fac99c6c737419e915957d2cf8f73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:63:87:0b:f0:dd:0d:04:f5:67:03:16:c3:
e8:3e:26:28:31:a7:df:2d:df:47:ae:c9:a2:ae:1d:
bb:bd:c9:f6:b9:49:1d:0e:c0:bf:69:38:3a:83:c0:
6a:66:be:8a:4a:31:5e:37:04:82:ff:9d:76:ca:61:
18:90:e0:f4:91:c2:1d:84:e7:b5:d6:ac:3b:ef:ea:
c4:56:f9:19:9a:ca:47:ad:d8:f5:4b:d1:34:98:4e:
06:42:36:f6:41:7b:cb:51:dd:5a:e0:21:87:65:0c:
40:65:16:85:f3:6e:57:d1:5b:0c:e8:75:db:a6:50:
07:ca:2e:e4:a6:ac:c4:2b:59:24:07:e9:37:f4:75:
2b:d0:ae:00:a8:53:03:36:86:19:0d:48:af:92:3b:
3c:98:24:56:fe:e2:e5:2a:80:b2:c6:fa:20:b9:ce:
c2:21:03:f0:74:22:4f:f9:fa:52:a6:cb:94:0e:4c:
40:28:14:62:6f:45:e3:79:fc:86:7c:e4:8e:86:a3:
b6:3d:99:16:ae:d5:01:f8:33:52:19:5e:92:d1:62:
03:7b:d2:ad:ec:ce:a6:e3:38:5b:b0:c7:88:e2:9c:
52:86:98:bc:a6:77:b6:ca:a8:3b:07:0a:86:c6:03:
24:2c:a6:05:7e:ff:03:31:96:f4:0b:ad:e4:a6:cc:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:D7:C9:23:FA:C9:9C:6C:73:74:19:E9:15:95:7D:2C:F8:F7:3C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/HCfXySP6yZxsc3QZ6RWVfSz49zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.32.0/24
84.32.34.0/24
84.32.48.0/24
84.32.61.0/24
84.32.63.0/24
84.32.70.0/23
84.32.128.0/22
84.32.220.0/24
88.216.39.0/24
88.216.57.0/24
88.216.68.0/24
88.216.73.0/24
88.216.183.0-88.216.184.255
88.216.195.0/24
88.216.198.0/24
88.216.210.0/24
88.216.222.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bc:76:cb:60:de:35:fe:f5:58:c8:e2:a9:34:53:c7:96:09:
47:67:bc:26:95:ce:68:32:72:42:d9:53:63:0d:4e:22:b8:86:
ff:c9:9c:74:6f:a7:4d:0e:b8:73:9e:09:2c:bf:fd:f0:ad:84:
c0:ae:62:7b:c8:0e:30:0c:b8:16:e6:49:9f:82:df:9e:5b:93:
15:cc:8a:b4:39:da:d5:ce:6a:1e:aa:87:b9:87:64:e9:6a:6b:
41:cb:c7:2a:92:07:27:02:d4:73:bc:1a:a3:c0:f0:08:7e:83:
c3:34:f8:c0:bf:85:f9:07:ca:5a:d2:d3:42:3b:63:82:e7:5e:
1d:68:a8:c3:c2:ac:ed:0c:2a:eb:65:50:2f:8d:d2:39:2e:95:
fd:10:f2:b0:ed:ec:b3:05:20:f8:d0:8e:84:0e:d5:31:45:6c:
9e:40:9f:a9:4b:51:9d:0d:6d:22:a0:33:5d:f1:92:fa:6c:06:
7c:a8:23:94:78:1e:88:be:bf:94:c5:8e:54:ca:4c:43:88:26:
59:7e:00:7d:f3:60:0e:d0:ca:e2:43:3a:04:42:0d:6b:31:f7:
7c:db:9c:0a:2b:a3:34:f1:eb:b5:f5:18:4a:d6:df:fe:d6:fb:
36:2e:89:b4:1c:51:c7:4a:1f:de:44:b3:66:ff:12:75:34:c7:
a5:b3:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:48 2026 by rpki-client