Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/NN02rpF4NkQbHWq3LDbnpWJ9WEE.roa
File: NN02rpF4NkQbHWq3LDbnpWJ9WEE.roa (raw, json)
Hash identifier: 27OTS1M0cYN173A/jkknYLCtiSqNQuqA4FrxbG9foWI=
Subject key identifier: 34:DD:36:AE:91:78:36:44:1B:1D:6A:B7:2C:36:E7:A5:62:7D:58:41
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019DDF83C9304A34EC34C6439528BF25B79D
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/NN02rpF4NkQbHWq3LDbnpWJ9WEE.roa
Signing time: Thu 30 Apr 2026 17:50:49 +0000
ROA not before: Thu 30 Apr 2026 17:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.71.0.0/16 maxlen: 16
31.72.0.0/14 maxlen: 14
31.78.0.0/15 maxlen: 15
31.99.128.0/18 maxlen: 18
31.99.153.0/24 maxlen: 24
31.99.154.0/23 maxlen: 23
31.99.156.0/22 maxlen: 22
31.99.160.0/19 maxlen: 19
31.99.208.0/20 maxlen: 20
31.99.224.0/19 maxlen: 19
178.99.0.0/16 maxlen: 16
178.107.48.0/20 maxlen: 20
178.107.64.0/18 maxlen: 18
185.102.192.0/22 maxlen: 22
185.102.196.0/22 maxlen: 22
185.102.200.0/22 maxlen: 22
194.36.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:83:c9:30:4a:34:ec:34:c6:43:95:28:bf:25:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Apr 30 17:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34dd36ae917836441b1d6ab72c36e7a5627d5841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:19:13:db:7d:89:95:dc:46:06:5b:d8:e3:
f2:1f:0f:13:80:53:a3:d3:99:2b:b7:0b:46:90:0c:
34:97:a7:de:7f:62:dc:14:e6:dc:95:ae:dc:ea:47:
fe:28:57:28:f9:0e:42:b2:46:2b:b6:97:88:50:6a:
16:73:f8:4f:1d:af:af:f4:f6:ab:a2:43:2e:a2:27:
35:d7:f2:40:83:d9:e1:a0:6f:92:06:1a:83:fd:2a:
46:a3:23:57:78:40:4b:cc:2d:f5:65:17:ff:b1:a5:
73:83:db:c8:08:8b:eb:03:19:67:c4:99:f3:2f:98:
2b:14:79:9f:05:81:c4:2b:82:25:0d:13:92:f3:3b:
ed:5a:27:32:dc:f0:24:f5:a1:3c:23:a5:61:c5:e9:
bd:34:32:ae:af:c8:83:cf:71:fc:c4:94:b9:b0:76:
11:92:6b:e9:b0:f3:27:59:0b:c1:b6:0a:60:7a:4f:
a6:10:77:08:6b:ec:2b:0b:57:fc:83:4d:2a:19:3c:
10:36:42:a0:73:67:73:9e:61:b6:07:e5:0e:a9:2c:
f9:e7:90:f5:5a:53:4c:6f:74:c9:ed:64:4e:69:a8:
a9:0b:52:3d:ea:34:a9:96:cd:7f:f2:91:4d:23:22:
be:08:78:05:3c:37:8e:9f:53:e4:37:04:8d:b6:50:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DD:36:AE:91:78:36:44:1B:1D:6A:B7:2C:36:E7:A5:62:7D:58:41
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/NN02rpF4NkQbHWq3LDbnpWJ9WEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.71.0.0-31.75.255.255
31.78.0.0/15
31.99.128.0/18
31.99.208.0-31.99.255.255
178.99.0.0/16
178.107.48.0-178.107.127.255
185.102.192.0-185.102.203.255
194.36.212.0/22
Signature Algorithm: sha256WithRSAEncryption
60:34:36:6f:c9:c8:64:79:6b:f8:eb:87:e3:ed:5c:ea:91:85:
2a:83:6e:5d:8d:04:6f:1f:db:22:72:d2:09:60:4c:51:b7:71:
e7:e1:20:99:b9:42:d5:2c:50:85:f5:cc:66:f4:84:70:76:9e:
05:89:fe:c3:29:2d:35:fd:10:56:59:4d:e2:ab:00:79:41:d5:
f3:35:0b:1d:92:d1:21:3b:25:f8:05:29:0a:96:7a:2a:9b:10:
25:1d:d4:f5:2a:e4:95:98:53:48:78:40:ba:67:0f:42:62:24:
76:45:3c:3e:6b:86:6c:1e:a8:8f:a2:53:47:06:44:03:4f:61:
8e:42:b7:e7:0d:f7:37:f3:5e:35:95:c6:fc:bc:e0:b7:77:78:
69:f3:45:b2:92:df:75:f3:09:d0:10:f0:d5:77:dd:ad:be:01:
f2:04:a0:ee:b1:90:81:3b:e0:ab:57:63:41:26:82:88:50:02:
28:e9:df:ef:4f:5b:8f:b5:13:31:4f:b0:b1:96:1e:89:bf:55:
8f:50:8f:8e:22:bf:1e:93:f7:29:55:3b:2d:a1:a2:95:97:b5:
dc:ab:22:2d:21:a5:4c:3d:1e:c8:b8:0d:30:10:ca:11:7c:ad:
b2:32:eb:71:02:35:8c:81:d2:46:ef:27:ac:3e:87:19:35:22:
09:12:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:51 2026 by rpki-client