Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/NN4I3X81eMdfxSPDwC84MF9p8WU.roa
File: NN4I3X81eMdfxSPDwC84MF9p8WU.roa (raw, json)
Hash identifier: ykKvXMmleoaLHhJSPR4Oi+U1d0KeOCaBVP6OGm1bNDI=
Subject key identifier: 34:DE:08:DD:7F:35:78:C7:5F:C5:23:C3:C0:2F:38:30:5F:69:F1:65
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019FDCB34BC6A4D074887E46945C397D92FC
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/NN4I3X81eMdfxSPDwC84MF9p8WU.roa
Signing time: Fri 07 Aug 2026 14:49:25 +0000
ROA not before: Fri 07 Aug 2026 14:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 103.65.230.0/24 maxlen: 24
138.226.221.0/24 maxlen: 24
185.204.54.0/24 maxlen: 24
2a12:9cc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:b3:4b:c6:a4:d0:74:88:7e:46:94:5c:39:7d:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Aug 7 14:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34de08dd7f3578c75fc523c3c02f38305f69f165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:64:15:57:19:a2:b8:c4:ff:aa:52:5e:44:
0d:d2:76:2c:6a:a1:80:62:eb:e1:41:d5:d0:48:71:
bf:26:53:3b:2b:ef:d9:5f:37:9a:73:53:49:97:d5:
cf:c2:21:f8:10:c0:5c:5a:da:98:87:13:95:5c:7e:
61:77:38:e3:64:7f:7f:36:cc:34:b5:37:22:0d:43:
62:ce:d9:7a:25:a7:bc:50:4c:25:95:18:37:63:fc:
5e:a6:35:65:f5:9b:39:7e:c7:a0:21:2c:cf:14:5e:
42:1d:2f:3f:19:a2:02:b1:87:fa:e2:03:5e:bc:9a:
10:f0:da:9b:19:4d:83:0c:91:06:5c:76:63:c4:1d:
ee:14:88:94:43:5c:b3:ef:2b:cc:8f:c9:ee:a1:8e:
53:58:58:1d:dc:b9:f4:33:ad:a0:22:77:6d:ab:6f:
17:c1:d4:ac:bc:8f:ae:6d:a1:ba:cd:91:89:96:4f:
b2:30:5c:f6:14:f2:78:48:a0:91:dc:b0:a9:99:ee:
55:e8:e3:71:22:80:59:ab:9d:7c:7f:65:bf:69:a4:
a1:8f:d0:20:48:5d:56:ae:81:2a:50:d3:63:f6:1b:
3f:a4:ed:3b:39:7d:88:3c:48:87:4d:c8:ac:6a:4e:
ca:cc:c1:c3:b4:7a:c4:60:fe:57:ac:69:28:2c:fe:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:08:DD:7F:35:78:C7:5F:C5:23:C3:C0:2F:38:30:5F:69:F1:65
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/NN4I3X81eMdfxSPDwC84MF9p8WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.65.230.0/24
138.226.221.0/24
185.204.54.0/24
IPv6:
2a12:9cc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
46:ae:da:c4:3b:9c:9a:8a:d2:e0:c0:92:44:6a:c5:b0:d2:77:
b0:c2:4f:83:c7:e0:0f:06:54:20:22:cc:8c:96:01:d5:02:f1:
a8:0c:2b:0a:3e:64:eb:51:31:f4:b3:ba:b1:06:b1:02:45:13:
d7:76:0c:4c:b2:6f:b6:0f:5d:e4:d8:2d:ed:a8:08:71:06:fd:
02:e7:20:4a:dd:86:7d:e8:8a:bd:09:ae:ef:3f:c2:0a:d5:9d:
86:41:f7:0c:64:2b:87:c7:04:4c:3f:41:42:90:e7:23:a3:8c:
04:b5:67:d8:fd:4d:bc:e2:50:24:10:ee:d7:e4:3f:13:71:38:
d7:ee:61:06:ba:3a:a5:8c:25:32:9c:b8:53:9f:b4:e2:cf:c0:
2d:f0:80:2c:6a:4b:56:b7:7e:7c:9b:bb:82:5e:3f:ac:73:41:
11:e2:50:84:e7:17:3c:53:96:49:e7:46:f4:ca:7f:7b:31:c9:
b1:7a:f5:f5:54:f4:bf:01:6a:b8:86:e1:71:d4:33:60:d5:62:
91:6d:aa:55:be:08:34:c0:66:ef:c0:50:4f:71:13:02:d6:65:
dd:ec:2e:01:29:e5:6c:ca:01:40:98:2b:23:d8:97:5a:1e:f7:
45:34:29:bc:44:19:4e:73:23:cf:cd:0a:4b:dd:e7:48:ad:5b:
25:54:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:48 2026 by rpki-client