Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Wk753KG9Qu21sIQBl0SUnrmlBzM.roa
File: Wk753KG9Qu21sIQBl0SUnrmlBzM.roa (raw, json)
Hash identifier: n1C4AczgbaZ0+fW4qA583AD55dboff5luYRXwSCq9Ko=
Subject key identifier: 5A:4E:F9:DC:A1:BD:42:ED:B5:B0:84:01:97:44:94:9E:B9:A5:07:33
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019EAD3944828115ADE0762FE8858874A0D6
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Wk753KG9Qu21sIQBl0SUnrmlBzM.roa
Signing time: Tue 09 Jun 2026 16:31:11 +0000
ROA not before: Tue 09 Jun 2026 16:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210162
IP address blocks: 88.216.188.0/24 maxlen: 24
88.216.193.0/24 maxlen: 24
88.216.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:39:44:82:81:15:ad:e0:76:2f:e8:85:88:74:a0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 9 16:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a4ef9dca1bd42edb5b084019744949eb9a50733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:6b:7b:6f:d5:1c:c4:bf:3e:2f:c5:9d:d3:
fd:ea:e1:0e:ec:f9:f5:c0:04:2e:df:ff:fe:d8:4e:
56:70:7e:ba:6f:ce:cd:e3:f3:fa:6a:9d:c7:b3:8e:
67:41:1e:fe:79:4c:90:8c:e7:de:05:51:03:63:62:
5b:46:89:0a:67:eb:01:81:d7:31:a7:81:4d:d4:52:
2a:c4:1a:00:c4:58:c1:a2:8e:f8:28:48:be:51:2f:
a7:d0:0b:c7:41:1a:78:4f:4e:88:d1:0c:3d:d7:01:
2b:1a:f3:6a:9d:c3:2a:a5:9d:7a:c5:68:0a:1f:76:
62:79:fb:36:d3:6a:85:e3:d4:c9:57:fc:35:b0:42:
2a:98:b0:a2:10:24:39:8e:c6:c8:f0:1e:e2:16:cc:
2a:95:ae:d1:e7:d8:c1:51:29:cf:70:54:97:5c:45:
2b:b1:13:7d:52:cb:a9:68:ae:98:ac:25:54:6f:f7:
08:df:2f:b7:af:f8:f6:84:fe:c5:4c:a8:fe:e7:a8:
eb:69:75:40:52:f3:21:65:52:97:3c:53:30:c5:61:
15:d0:ae:c2:8a:99:4b:0c:3d:d8:c8:6e:6e:e7:62:
3a:ed:ab:68:79:c3:26:1a:41:a9:6e:ea:99:04:d5:
d6:42:c8:f6:6f:3d:44:65:12:6c:13:e8:71:8a:b2:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4E:F9:DC:A1:BD:42:ED:B5:B0:84:01:97:44:94:9E:B9:A5:07:33
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Wk753KG9Qu21sIQBl0SUnrmlBzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.188.0/24
88.216.193.0-88.216.194.255
Signature Algorithm: sha256WithRSAEncryption
75:5e:8e:34:1b:cd:d8:a1:6f:a2:f1:e2:f4:1f:e1:12:f6:a4:
00:14:ac:4c:bd:18:dd:da:e6:a3:fc:69:b2:ba:0e:d7:2f:36:
63:a4:87:47:2f:ec:09:a1:7b:2d:1e:7f:6c:03:5e:f0:59:1f:
7f:60:83:e1:d1:55:2f:58:8f:de:c2:98:d9:62:37:f5:50:a4:
eb:82:33:35:30:54:1a:17:65:54:b0:1e:59:35:76:78:57:56:
ce:76:f3:ea:53:95:48:8f:2e:4d:b3:b1:36:78:55:9c:33:13:
69:1f:f0:3e:39:a7:85:a7:b7:7a:be:25:69:e3:1e:46:8f:70:
af:1c:22:fa:19:6a:42:d3:71:6c:c7:cc:6e:97:ba:60:19:ac:
8c:b9:cb:34:9a:dd:ff:30:2b:d0:c7:ee:a9:c1:88:8a:55:e5:
89:98:1b:28:46:a9:bc:02:5a:9b:71:00:65:7e:3f:d2:6c:fb:
84:22:3e:aa:ad:6d:bd:fe:b1:02:54:61:a3:5c:41:dc:6f:7f:
1a:9a:fa:12:b8:ac:3f:c2:cd:72:73:88:01:8e:8e:36:0a:69:
b8:0e:c3:47:8e:1a:4b:79:8a:65:61:10:23:46:c6:09:b5:9f:
3b:e9:2b:39:38:2b:a0:a6:c4:19:6b:de:34:32:3a:81:9f:5a:
27:be:bc:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:42 2026 by rpki-client