Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kqrWTL-ybZDS0CEsUzzU5jy7MWE.roa
File: kqrWTL-ybZDS0CEsUzzU5jy7MWE.roa (raw, json)
Hash identifier: rB/WabCqAG/62HvHLahu2X4LidKd0+g5Y8AECOgEDUc=
Subject key identifier: 92:AA:D6:4C:BF:B2:6D:90:D2:D0:21:2C:53:3C:D4:E6:3C:BB:31:61
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019EA64833CE9086359BCF34A2C455626E48
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kqrWTL-ybZDS0CEsUzzU5jy7MWE.roa
Signing time: Mon 08 Jun 2026 08:10:10 +0000
ROA not before: Mon 08 Jun 2026 08:10:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33922
IP address blocks: 84.32.0.0/22 maxlen: 22
84.32.2.0/23 maxlen: 23
84.32.3.0/24 maxlen: 24
84.32.36.0/24 maxlen: 24
84.32.37.0/24 maxlen: 24
84.32.38.0/24 maxlen: 24
84.32.80.0/23 maxlen: 23
84.32.114.0/23 maxlen: 24
84.32.116.0/23 maxlen: 24
84.32.120.0/22 maxlen: 22
84.32.124.0/24 maxlen: 24
84.32.125.0/24 maxlen: 24
84.32.132.0/24 maxlen: 24
84.32.134.0/24 maxlen: 24
84.32.140.0/22 maxlen: 22
84.32.140.0/24 maxlen: 24
84.32.142.0/24 maxlen: 24
84.32.165.0/24 maxlen: 24
84.32.166.0/24 maxlen: 24
84.32.167.0/24 maxlen: 24
84.32.171.0/24 maxlen: 24
84.32.180.0/24 maxlen: 24
84.32.181.0/24 maxlen: 24
84.32.182.0/24 maxlen: 24
84.32.183.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
88.216.8.0/24 maxlen: 24
88.216.24.0/23 maxlen: 24
88.216.26.0/23 maxlen: 24
88.216.28.0/22 maxlen: 24
88.216.71.0/24 maxlen: 24
88.216.76.0/22 maxlen: 24
88.216.82.0/23 maxlen: 23
88.216.84.0/24 maxlen: 24
88.216.85.0/24 maxlen: 24
88.216.86.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.106.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.112.0/21 maxlen: 21
88.216.112.0/24 maxlen: 24
88.216.113.0/24 maxlen: 24
88.216.114.0/24 maxlen: 24
88.216.115.0/24 maxlen: 24
88.216.116.0/24 maxlen: 24
88.216.117.0/24 maxlen: 24
88.216.118.0/24 maxlen: 24
88.216.119.0/24 maxlen: 24
88.216.120.0/22 maxlen: 22
88.216.120.0/24 maxlen: 24
88.216.121.0/24 maxlen: 24
88.216.122.0/24 maxlen: 24
88.216.123.0/24 maxlen: 24
88.216.124.0/24 maxlen: 24
88.216.125.0/24 maxlen: 24
88.216.126.0/24 maxlen: 24
88.216.136.0/21 maxlen: 21
88.216.136.0/24 maxlen: 24
88.216.137.0/24 maxlen: 24
88.216.147.0/24 maxlen: 24
88.216.148.0/24 maxlen: 24
88.216.149.0/24 maxlen: 24
88.216.150.0/24 maxlen: 24
88.216.151.0/24 maxlen: 24
88.216.153.0/24 maxlen: 24
88.216.154.0/24 maxlen: 24
88.216.155.0/24 maxlen: 24
88.216.156.0/24 maxlen: 24
88.216.157.0/24 maxlen: 24
88.216.158.0/24 maxlen: 24
88.216.159.0/24 maxlen: 24
88.216.160.0/23 maxlen: 23
88.216.162.0/24 maxlen: 24
88.216.164.0/22 maxlen: 22
88.216.164.0/24 maxlen: 24
88.216.165.0/24 maxlen: 24
88.216.166.0/24 maxlen: 24
88.216.167.0/24 maxlen: 24
88.216.168.0/23 maxlen: 23
88.216.170.0/23 maxlen: 23
88.216.170.0/24 maxlen: 24
88.216.171.0/24 maxlen: 24
88.216.173.0/24 maxlen: 24
88.216.174.0/24 maxlen: 24
88.216.175.0/24 maxlen: 24
88.216.176.0/24 maxlen: 24
88.216.177.0/24 maxlen: 24
88.216.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:48:33:ce:90:86:35:9b:cf:34:a2:c4:55:62:6e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 8 08:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92aad64cbfb26d90d2d0212c533cd4e63cbb3161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:19:7f:bf:6c:99:90:03:58:18:9d:01:b0:
cf:fd:0f:53:bd:14:6a:3c:a0:6f:3d:b1:0a:ab:f7:
47:1f:73:b2:5b:57:cc:75:d1:42:8c:0d:31:92:bd:
d0:6e:4f:a8:e7:8c:3b:1f:8e:a1:e4:98:68:33:b4:
b5:30:0b:79:9a:3c:50:8b:9d:e4:91:d8:82:06:89:
60:df:93:3f:6f:7f:fa:bb:dd:e7:f6:e7:86:7b:ef:
3e:b0:71:91:ac:15:b4:69:8e:40:c1:db:a2:e1:1a:
d0:68:28:1e:45:b8:a9:6d:26:37:b0:17:60:98:d0:
0c:96:9e:d8:c0:83:8f:1b:00:62:cf:c5:50:39:6b:
aa:d0:eb:5c:42:25:69:ff:31:30:de:7b:a0:92:87:
63:81:63:ad:cb:c0:21:d7:7b:af:d8:40:22:ec:52:
ec:35:72:1f:10:05:e1:77:6f:8f:6f:a9:73:1b:29:
8a:e5:4f:be:c2:87:3d:e8:39:de:b3:a3:44:04:86:
4f:e2:fb:6c:90:fc:58:69:7e:82:0e:4b:00:e0:7a:
e8:a8:ac:b9:91:40:0f:3e:d8:c5:71:d2:e1:e6:df:
a5:ce:14:33:5d:e0:e3:da:9c:31:06:f0:bd:d7:bb:
ef:20:e3:83:76:49:2a:b7:a6:26:74:e5:3c:22:69:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AA:D6:4C:BF:B2:6D:90:D2:D0:21:2C:53:3C:D4:E6:3C:BB:31:61
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kqrWTL-ybZDS0CEsUzzU5jy7MWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.0.0/22
84.32.36.0-84.32.38.255
84.32.80.0/23
84.32.114.0-84.32.117.255
84.32.120.0-84.32.125.255
84.32.132.0/24
84.32.134.0/24
84.32.140.0/22
84.32.165.0-84.32.167.255
84.32.171.0/24
84.32.180.0/22
84.32.250.0/23
88.216.8.0/24
88.216.24.0/21
88.216.71.0/24
88.216.76.0/22
88.216.82.0-88.216.86.255
88.216.104.0/22
88.216.112.0-88.216.126.255
88.216.136.0/21
88.216.147.0-88.216.151.255
88.216.153.0-88.216.162.255
88.216.164.0-88.216.171.255
88.216.173.0-88.216.179.255
Signature Algorithm: sha256WithRSAEncryption
5f:5e:a8:f7:e8:dc:d0:6a:5e:f8:ff:3b:9a:06:f2:a4:89:9a:
58:f1:c1:10:dc:93:bd:4c:36:fe:f8:7d:33:fc:e7:df:60:a0:
fb:f6:d9:62:eb:b6:6c:fd:61:1e:20:4a:2e:96:54:f8:35:d4:
93:07:ea:a8:62:b3:c2:88:ef:7e:cb:5d:c6:5c:24:5b:60:6c:
e4:3c:32:ca:17:dc:cb:d5:b5:f8:e1:82:6e:08:96:59:e0:26:
e1:0e:53:79:cd:80:5b:c1:17:ee:20:3c:8a:d6:2b:91:e4:69:
1b:81:56:80:f2:22:22:6e:ff:ce:4f:cc:18:2e:e4:86:d4:aa:
d2:7b:06:30:00:79:c3:3b:90:86:a0:d2:bc:03:b7:1f:0c:4e:
19:d8:e2:13:62:c9:e7:b6:04:aa:8c:72:f5:59:9c:6b:49:2d:
f1:4f:b4:f7:7c:dd:e9:0a:19:ad:0b:06:4b:92:32:12:84:6d:
c5:42:18:ba:e7:67:42:6a:0f:25:be:20:cc:13:8a:ea:1e:67:
9e:17:f8:3a:59:6f:2c:82:a6:1c:fc:66:cf:c3:ff:79:0d:e1:
72:ca:c0:ce:25:10:5b:68:e7:fa:d1:ea:be:57:ee:2a:d7:6a:
ec:40:a3:1c:56:65:7e:e7:c1:7d:a9:b6:f6:d4:be:29:f3:d5:
58:3c:ea:f2
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAZ6mSDPOkIY1m880osRVYm5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjYwNjA4MDgxMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmFhZDY0Y2JmYjI2ZDkwZDJkMDIxMmM1MzNjZDRlNjNjYmIzMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8cZf79smZADWBidAbDP/Q9TvRRq
PKBvPbEKq/dHH3OyW1fMddFCjA0xkr3Qbk+o54w7H46h5JhoM7S1MAt5mjxQi53k
kdiCBolg35M/b3/6u93n9ueGe+8+sHGRrBW0aY5Awdui4RrQaCgeRbipbSY3sBdg
mNAMlp7YwIOPGwBiz8VQOWuq0OtcQiVp/zEw3nugkodjgWOty8Ah13uv2EAi7FLs
NXIfEAXhd2+Pb6lzGymK5U++woc96Dnes6NEBIZP4vtskPxYaX6CDksA4HroqKy5
kUAPPtjFcdLh5t+lzhQzXeDj2pwxBvC917vvIOODdkkqt6YmdOU8ImkuUQIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFJKq1ky/sm2Q0tAhLFM81OY8uzFhMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEva3FyV1RMLXliWkRTMENFc1V6elU1ank3TVdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAJU
IAAwDAMEAlQgJAMEAFQgJgMEAVQgUDAMAwQBVCByAwQBVCB0MAwDBANUIHgDBAFU
IHwDBABUIIQDBABUIIYDBAJUIIwwDAMEAFQgpQMEA1QgoAMEAFQgqwMEAlQgtAME
AVQg+gMEAFjYCAMEA1jYGAMEAFjYRwMEAljYTDAMAwQBWNhSAwQAWNhWAwQCWNho
MAwDBARY2HADBABY2H4DBANY2IgwDAMEAFjYkwMEA1jYkDAMAwQAWNiZAwQAWNii
MAwDBAJY2KQDBAJY2KgwDAMEAFjYrQMEAljYsDANBgkqhkiG9w0BAQsFAAOCAQEA
X16o9+jc0Gpe+P87mgbypImaWPHBENyTvUw2/vh9M/zn32Cg+/bZYuu2bP1hHiBK
LpZU+DXUkwfqqGKzwojvfstdxlwkW2Bs5Dwyyhfcy9W1+OGCbgiWWeAm4Q5Tec2A
W8EX7iA8itYrkeRpG4FWgPIiIm7/zk/MGC7khtSq0nsGMAB5wzuQhqDSvAO3HwxO
GdjiE2LJ57YEqoxy9Vmca0kt8U+093zd6QoZrQsGS5IyEoRtxUIYuudnQmoPJb4g
zBOK6h5nnhf4OllvLIKmHPxmz8P/eQ3hcsrAziUQW2jn+tHqvlfuKtdq7ECjHFZl
fufBfam29tS+KfPVWDzq8g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:54 2026 by rpki-client