Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/NFl71PMJau8OoVT-JEiyhHLSIZE.roa
File: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (raw, json)
Hash identifier: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=
Subject key identifier: 34:59:7B:D4:F3:09:6A:EF:0E:A1:54:FE:24:48:B2:84:72:D2:21:91
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019F79FE927E93B8B8190D3BBB3A3AD2D50C
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/NFl71PMJau8OoVT-JEiyhHLSIZE.roa
Signing time: Sun 19 Jul 2026 10:49:14 +0000
ROA not before: Sun 19 Jul 2026 10:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 31.169.83.0/24 maxlen: 24
31.169.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:fe:92:7e:93:b8:b8:19:0d:3b:bb:3a:3a:d2:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jul 19 10:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34597bd4f3096aef0ea154fe2448b28472d22191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:51:bb:ff:a5:83:6a:0c:6b:5b:52:76:8f:
53:36:fc:55:f0:05:e5:20:76:df:d9:17:79:af:98:
a9:27:0f:72:fc:e3:81:2f:66:a9:c9:b9:c5:3e:d4:
9c:8f:5d:27:69:e0:57:b4:5c:30:07:e7:31:dc:6d:
16:50:8b:2b:e2:dd:6a:2d:1a:52:c9:11:72:79:4d:
5c:1d:a4:1a:de:15:e0:5d:b2:ac:76:4b:bb:36:df:
27:94:1a:8d:09:ae:9b:65:ef:f1:f5:93:11:3e:64:
3f:49:1a:5c:a5:18:f6:da:f1:1e:f8:8c:2f:95:36:
39:35:4e:2b:7a:1a:b9:8f:62:3f:a5:ec:de:7c:21:
20:3c:8a:24:ee:f9:86:01:6c:ba:03:4c:ed:0d:d6:
73:c2:f0:2e:af:9c:f2:e4:1e:50:b1:bb:e1:7c:44:
2d:26:43:45:29:47:df:c2:a9:3b:e0:16:19:ca:02:
1d:88:68:de:05:fa:fc:78:b6:b6:50:7f:02:31:e6:
15:3e:43:49:75:ca:26:e0:50:f4:91:a9:b4:9e:db:
b8:8d:48:14:db:b5:9f:59:aa:dd:e7:21:5d:83:fa:
de:ad:2e:7a:44:89:8c:9c:9f:6f:be:da:f6:15:66:
47:34:0f:0c:57:be:5a:26:c3:d1:d3:6a:0a:02:96:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:59:7B:D4:F3:09:6A:EF:0E:A1:54:FE:24:48:B2:84:72:D2:21:91
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/NFl71PMJau8OoVT-JEiyhHLSIZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.83.0/24
31.169.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d3:c9:59:90:df:95:60:c1:88:f1:7b:90:a0:e2:56:98:62:
21:6a:73:e6:60:74:fd:45:f3:7f:d4:b4:71:88:6f:90:81:17:
29:9d:bd:68:98:93:89:62:c9:18:a3:3c:6c:39:bb:65:7f:b2:
be:70:94:63:5e:df:a2:34:3d:5f:bc:b1:a3:99:d5:74:1e:22:
8b:1f:ba:5a:74:9f:8b:bf:27:e4:9b:85:93:46:a2:67:fe:ac:
0f:f1:a0:57:76:a3:46:e6:ea:5b:4a:41:1b:01:0b:39:65:9e:
3a:c5:eb:8a:40:1d:4c:06:03:18:9a:f9:5b:cd:74:24:9b:a0:
43:21:c4:2e:62:6b:d7:fa:a0:bd:78:e0:43:1c:78:19:b6:81:
8f:03:03:ad:bc:3f:1f:f0:33:b5:df:90:b8:10:be:ea:1e:a3:
0d:d4:d9:bf:30:d0:88:6d:88:7c:5d:dc:79:7b:f5:fa:57:25:
c9:e1:4b:be:f5:7a:b2:f3:35:da:7a:de:63:b2:85:4f:e4:4d:
88:cd:24:81:0d:e3:59:62:cb:4e:25:f8:9c:38:95:7a:ff:6e:
96:19:c6:67:5b:db:3d:cd:0c:70:3a:45:76:ec:3d:ee:cb:7b:
21:d9:90:bf:8a:53:b6:92:96:af:52:80:b5:f7:ee:7d:d9:38:
d8:ce:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:10 2026 by rpki-client