Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jwdsygu64Bm81NXTwwZhu4S_pUY.roa
File: jwdsygu64Bm81NXTwwZhu4S_pUY.roa (raw, json)
Hash identifier: S7N4fwB60DwtfA+UEhhm3pWl81VG9FmqEanZGjZEImQ=
Subject key identifier: 8F:07:6C:CA:0B:BA:E0:19:BC:D4:D5:D3:C3:06:61:BB:84:BF:A5:46
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019EB19C75D5A2C378A087034414B4E5C6C7
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jwdsygu64Bm81NXTwwZhu4S_pUY.roa
Signing time: Wed 10 Jun 2026 12:58:01 +0000
ROA not before: Wed 10 Jun 2026 12:58:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.48.0/22 maxlen: 24
84.32.49.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.99.0/24 maxlen: 24
84.32.208.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
88.216.60.0/24 maxlen: 24
88.216.72.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.130.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:9c:75:d5:a2:c3:78:a0:87:03:44:14:b4:e5:c6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 10 12:58:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f076cca0bbae019bcd4d5d3c30661bb84bfa546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:be:90:18:0c:e3:8b:98:74:7d:0f:5e:8b:
16:15:df:fc:88:f0:46:49:2c:8c:ac:d3:04:54:e6:
54:eb:28:0c:e2:60:4e:5a:f4:ba:d1:2e:be:ec:8f:
e8:eb:3c:af:90:53:15:85:fd:dc:9e:5f:51:d7:64:
bb:c1:3a:54:9a:a3:5b:35:05:57:6a:63:cd:ac:11:
f2:13:97:92:d4:9f:91:08:ff:30:26:d7:0d:c0:2e:
50:a5:bf:7f:6a:b6:5f:4d:81:79:f9:5f:93:a1:0b:
5e:cd:3e:b7:1c:02:93:4f:ab:27:5f:78:bc:0d:7f:
d3:bd:bd:2b:a2:7f:47:ee:30:5d:7b:9c:f2:e3:af:
d2:c2:0c:26:a3:9e:77:b6:9b:77:1c:65:33:d8:c8:
bd:41:cb:41:f8:fd:8a:d9:f6:ec:5c:91:ef:2a:da:
e6:c3:06:e8:a8:5a:40:f3:60:6e:a2:42:45:17:d9:
38:0b:44:40:d6:5f:11:cd:70:d9:ee:3e:ed:8d:34:
11:d2:6d:b0:87:f7:6e:0c:0d:ca:8c:25:08:25:52:
69:26:7c:99:8c:11:f0:d4:ce:c9:f1:51:73:6f:10:
59:38:fe:a6:ec:df:3b:e3:cc:3f:b6:2d:21:a5:d5:
15:42:21:81:f2:77:05:6e:48:9b:a6:74:a6:68:b5:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:07:6C:CA:0B:BA:E0:19:BC:D4:D5:D3:C3:06:61:BB:84:BF:A5:46
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jwdsygu64Bm81NXTwwZhu4S_pUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.48.0/22
84.32.99.0/24
84.32.208.0/24
84.32.217.0/24
88.216.60.0/24
88.216.72.0/24
88.216.130.0/23
88.216.214.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f7:b6:23:6c:03:b7:44:2e:9d:91:fd:f1:17:14:59:f9:fb:
bd:e0:a9:3e:c9:02:e1:9d:59:91:43:bc:88:b0:16:9f:68:ee:
32:82:ff:64:2e:cc:07:14:6e:19:01:55:83:dc:0b:41:e2:07:
00:71:60:c5:26:b5:09:3e:c8:1f:31:41:e5:7b:22:9a:91:b2:
ac:ab:0b:cd:bf:3f:29:8f:6d:28:8c:03:cf:52:1b:b3:99:6c:
39:fb:38:df:b7:9f:52:9a:36:ce:d9:c1:4b:6a:95:c0:3a:dd:
10:0a:c7:23:9d:24:7d:77:0c:2e:b9:dc:16:0c:e3:41:4b:2a:
1e:be:22:4c:d8:03:0a:78:5d:1f:6b:be:39:74:7b:36:8d:1a:
35:e6:db:26:0d:d0:a4:ae:e9:fc:4d:b8:4b:f9:8d:1e:84:70:
30:55:fc:07:5c:1f:fb:40:15:3e:fe:ca:bf:dd:12:4d:7f:b0:
59:15:09:f6:d7:5c:e6:8f:00:88:bb:4b:f4:f3:cf:7c:db:64:
37:77:53:11:10:d8:a2:6e:62:9f:5a:6e:b1:90:8b:9e:9e:4a:
ce:b0:1d:a0:c9:02:a6:c6:13:7d:e9:8b:96:49:5a:46:df:4c:
92:d0:2d:3c:12:12:49:0f:26:d7:87:08:14:f8:13:af:c0:54:
80:ac:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:03:14 2026 by rpki-client