Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dOza18PPfrTRLB6KFf7rM5DvfOw.roa
File: dOza18PPfrTRLB6KFf7rM5DvfOw.roa (raw, json)
Hash identifier: P+dtezO/rK6N3PeG/CKZY6Yoq9cGw027l9AEpg14P48=
Subject key identifier: 74:EC:DA:D7:C3:CF:7E:B4:D1:2C:1E:8A:15:FE:EB:33:90:EF:7C:EC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019E97B7436A6B7E11063AA1DA7E56C5B5E9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dOza18PPfrTRLB6KFf7rM5DvfOw.roa
Signing time: Fri 05 Jun 2026 12:17:10 +0000
ROA not before: Fri 05 Jun 2026 12:17:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.6.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:b7:43:6a:6b:7e:11:06:3a:a1:da:7e:56:c5:b5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 5 12:17:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74ecdad7c3cf7eb4d12c1e8a15feeb3390ef7cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:2c:83:bb:ae:e0:e5:bf:e2:0c:90:ff:4b:
83:2f:bb:9d:58:54:81:b6:fe:88:1c:2a:e7:31:d8:
31:37:8e:c0:19:a5:5a:f0:8c:fc:ed:3a:2c:96:85:
2a:d7:89:e3:39:39:49:96:2c:86:02:19:f7:44:ab:
9b:4d:fa:f2:2f:30:d3:f4:6b:37:75:27:9c:8e:57:
d7:b1:ef:49:f2:48:d7:a0:0c:aa:ae:23:ae:b1:f6:
63:ce:91:49:3f:ba:d4:52:7c:c7:ac:54:99:bb:1b:
2b:b9:be:21:d6:4a:15:44:69:45:3e:0f:5c:68:20:
02:17:2e:fe:b3:7d:02:71:60:cb:a3:26:db:ea:dd:
8f:8e:5c:f4:ca:a7:af:ca:a0:09:40:72:09:9a:2a:
04:08:e9:2c:82:24:ce:b0:1b:ea:3f:78:ed:88:94:
51:87:88:38:20:36:19:cb:77:e6:82:fa:36:6a:b8:
f2:bd:21:45:33:6b:2d:48:05:61:86:a2:a0:10:ed:
91:ad:3f:59:33:20:32:88:9e:a6:88:5a:e5:ab:76:
07:a3:1a:53:a5:26:33:cf:ba:74:a4:2b:f4:dc:ef:
b5:74:f3:e3:d0:a6:2c:61:07:a7:ba:87:33:00:29:
98:07:25:54:fe:59:47:a4:f4:00:4a:e3:3c:61:21:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:DA:D7:C3:CF:7E:B4:D1:2C:1E:8A:15:FE:EB:33:90:EF:7C:EC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dOza18PPfrTRLB6KFf7rM5DvfOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
88.216.21.0/24
88.216.98.0/24
88.216.103.0/24
88.216.185.0/24
88.216.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:11:4d:a2:8c:60:3f:b4:75:8a:4c:41:b8:6a:1d:8f:cb:c4:
18:71:dd:71:78:08:bf:b2:d1:f9:a9:05:af:a5:58:73:26:02:
1c:95:0e:c9:80:ba:f9:e3:b2:29:b3:5b:0f:e3:17:df:7e:ee:
4c:2a:0d:3c:1e:98:ee:25:80:f7:68:98:2b:fd:31:53:c2:07:
09:f0:d4:29:79:12:2c:56:82:7d:50:4b:d5:b5:40:17:a9:77:
55:41:b7:05:38:c5:18:c6:b8:1e:68:62:aa:79:9e:e6:1b:9a:
85:78:6a:47:9c:cc:ed:f3:4e:e8:30:15:48:84:21:e8:7c:e3:
e2:4b:68:dd:e7:66:9b:b0:5a:1b:1b:76:88:50:11:14:7f:75:
94:7c:66:b5:ab:76:13:1b:6e:77:2e:f3:46:3b:b4:8a:d7:b1:
2c:68:76:cb:87:8b:67:80:c7:8d:8e:a2:66:4b:79:65:62:0e:
0c:65:3d:6d:5b:b3:03:7e:6d:4c:14:21:30:73:72:aa:19:45:
7c:79:79:a1:3a:fd:72:32:72:15:f9:55:d7:d2:c1:10:dc:76:
bb:17:4f:17:3a:f0:5f:81:5a:b3:43:5f:db:55:b9:9b:ca:61:
5a:39:64:82:e9:d9:8f:0a:96:12:ac:bd:9f:85:4b:86:02:69:
a4:ab:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:18 2026 by rpki-client