Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iE_YKGDRHMJMRfwdrhubVSRemfQ.roa
File: iE_YKGDRHMJMRfwdrhubVSRemfQ.roa (raw, json)
Hash identifier: Abr37QlUNCUzV5gIbkz73yXsnId5jZyS4/FjPZ78wVA=
Subject key identifier: 88:4F:D8:28:60:D1:1C:C2:4C:45:FC:1D:AE:1B:9B:55:24:5E:99:F4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019C2CC7BC6BC539282D1D58301E34D75B9B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iE_YKGDRHMJMRfwdrhubVSRemfQ.roa
Signing time: Thu 05 Feb 2026 07:50:13 +0000
ROA not before: Thu 05 Feb 2026 07:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 84.32.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:c7:bc:6b:c5:39:28:2d:1d:58:30:1e:34:d7:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 5 07:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=884fd82860d11cc24c45fc1dae1b9b55245e99f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:f3:24:88:87:07:d1:fe:87:d0:cc:1c:0a:
ae:3d:50:bb:37:40:1c:b9:04:9c:52:3b:f3:d2:6c:
3c:6a:6c:98:1d:98:88:ca:bd:99:be:3c:8c:61:f1:
f9:e6:f3:18:a8:a0:bb:1b:b0:2b:24:cf:e4:9f:5b:
57:6d:95:3b:f2:ce:26:f6:4b:28:ca:18:a0:b4:69:
25:bc:c8:e6:a2:66:d4:ab:18:48:71:e2:e1:5c:e4:
87:a9:3f:19:d2:f5:19:15:14:c6:60:ca:c0:95:a4:
28:df:60:83:1f:ad:f7:76:42:8c:47:df:a3:3b:b4:
ba:97:c1:07:f0:d3:ae:6b:ae:82:69:7d:68:68:8a:
01:c5:18:ce:59:97:aa:f5:ea:52:b0:a2:53:66:e7:
70:cb:16:f9:fb:19:99:fd:4d:c0:8f:3e:43:ef:4d:
7f:fc:be:e7:b2:78:91:07:56:6e:7f:8f:4b:56:66:
60:00:01:f7:f8:2b:41:1c:d9:5b:19:de:a0:8b:06:
e4:85:23:38:49:8e:69:25:d1:53:cf:9b:ec:0f:c8:
28:9d:9d:4a:8e:ab:30:68:dc:2f:83:18:de:da:0c:
64:bc:1a:54:47:fe:c9:2c:73:78:3c:68:94:f9:67:
05:7e:c1:4b:ff:b6:1f:c5:48:e9:e5:1a:ee:db:1f:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:D8:28:60:D1:1C:C2:4C:45:FC:1D:AE:1B:9B:55:24:5E:99:F4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/iE_YKGDRHMJMRfwdrhubVSRemfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
Signature Algorithm: sha256WithRSAEncryption
34:72:9a:c9:ee:ab:03:eb:06:8e:2b:58:7e:50:dd:e9:1f:fa:
a7:ea:3d:a0:57:ca:6e:95:24:f0:e4:6a:82:fa:95:f6:8b:ad:
80:21:f5:ce:06:61:cd:c4:14:27:33:59:0b:4c:3f:f3:5d:ed:
ec:10:03:1a:e3:6b:34:94:ce:60:f9:fb:41:b6:2b:10:b0:6d:
68:a3:a9:ee:54:dc:cf:cc:09:aa:12:02:c9:29:45:ab:6d:be:
b0:5f:d9:87:9e:d8:18:57:2a:cc:b6:97:b4:90:53:41:d9:3b:
03:d4:10:bb:61:6b:e5:bd:7e:af:8f:95:fe:1b:85:38:40:7b:
7d:4c:9f:d2:2b:4d:65:b9:1e:cf:95:e9:9e:3f:c5:fd:cc:0b:
44:9c:c8:03:99:c5:e9:50:fb:6f:98:fe:06:0a:0b:b8:d9:43:
5f:f3:de:31:83:60:77:cc:99:c1:dc:58:5f:72:96:fc:0e:a9:
02:cf:2e:6b:68:25:5d:19:a7:b8:30:fd:72:e4:47:79:b1:2e:
64:dd:ba:8c:18:3b:00:d7:60:e9:68:50:a2:4e:b9:32:4d:da:
99:9e:49:b2:e5:8b:a3:5c:4a:18:d4:7b:72:8f:91:78:8d:66:
31:32:00:a7:e3:a7:74:21:c8:8c:43:11:ad:5d:b1:74:7b:b3:
5b:25:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:22 2026 by rpki-client